<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="9497">
<package pkgid="f81227ff8b217ea38908af69d5af92871560116909d3fbb0afa5e6485c2d04b5" name="389-ds-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="7c0dae7941a219125a8b85d8b0a03285976091f27abd9842f122ee5a2412bba8" name="389-ds-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="9e597b8f4b3e1d1b05bc86ab6ef601e8a566bfc812314c3c4d806a57e910aef3" name="389-ds-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="f95b254e894252a0bb6fa291b3dab5dc69f9ef913fcc1b4a9a08e9708e1da21a" name="389-ds-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="065d64a80469548baf4e698a61018e87bb2701dd1dc32a73c0c1fe143b570379" name="389-ds-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="ee73cafa7bf019b5f043789c64b885cc5116da5af19fb703baa1fc55f050a3f1" name="389-ds-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="a3bbee5b4d05940fe5fa329eb0381b623c0ef4a476186517d9fe1a06ae6a645f" name="389-ds-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="239ea6c48621e6a8d60d529e7cc8bd68d18bdb148d651df0341105d484d106f4" name="389-ds-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="c9a7b57d05199ae7414528fec8562510bad99e4f55ed288eec239b60d8cfb479" name="389-ds-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.12~git0.9bc042902" rel="lp152.2.6.1"/>
  <changelog author="hguo@suse.com" date="1517400000">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
</package>
<package pkgid="ce46b5f7b85f402e29c88d5e7034347e6cde7bfae161418f9ca5c3a5bf6ac0a5" name="389-ds-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.17~git0.3c2d054e1" rel="lp152.2.9.1"/>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
</package>
<package pkgid="3e9d29bca00bb108087f433a2a63d8c58a22dea619c43b601754c8b096feaf4c" name="389-ds-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.19~git0.bef0b5bed" rel="lp152.2.12.1"/>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
</package>
<package pkgid="76e4b9fe6b17d71eae8164cfcba96c2363db344b8fd727d00134d718a840ead9" name="389-ds-snmp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.3.9~git0.3eb8617f6" rel="lp152.2.3.1"/>
  <changelog author="hguo@suse.com" date="1517313600">- Rename dependency package python-pyldap into python3-pyldap.</changelog>
  <changelog author="dimstar@opensuse.org" date="1517400000">- BuildRequire python3-ldap instead of python3-pyldap: pyldap is
  deprecated in favor of python-ldap.</changelog>
  <changelog author="hguo@suse.com" date="1517400001">- For SLES 15 schedule, do not build lib389 programmable extension
  for now.</changelog>
  <changelog author="mrueckert@suse.de" date="1517572800">- switch lib389 to use the python3-ldap subpackage</changelog>
  <changelog author="hguo@suse.com" date="1519041600">- Explicitly generate dirsrv sysconfig file as it is necessary for
  SLES 15 (bsc#1081324).</changelog>
  <changelog author="dakechi@suse.com" date="1533038400">- Introduce patches:
  * 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  to fix the race condition on reference counter (bsc#1096368,
  CVE-2018-10850)
  * 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  (bsc#1076530, CVE-2017-15134)
  * 0008-invalid-password-migration-causes-unauth-bind.patch
  (bsc#1076530, CVE-2017-15135)</changelog>
  <changelog author="varkoly@suse.com" date="1534939200">- Introduce patch:
  0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  to fix the issue that ldapsearch with server side sort allows
  users to cause a crash (bsc#1105606, CVE-2018-10935)</changelog>
  <changelog author="varkoly@suse.com" date="1536667200">- Introduce patch:
  0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch
  to fix the issue "389-ds: Server crash through modify command with large DN"
  (bsc#1106699, CVE-2018-14624)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1555416000">- Update to version 1.4.0.22~git0.9d84a40dd:
  * Bump version to 1.4.0.22 which resolves:
  * (bsc#1120189)
  * (bsc#991201, CVE-2016-5416)
  * (bsc#1083689, CVE-2018-1054)
  * (bsc#1092187, CVE-2018-1089)
  * (bsc#1099465, CVE-2018-10871)
  * (bsc#1108674, CVE-2018-14638)
  * (bsc#1109609, CVE-2018-14648)
  * (bsc#1132385, CVE-2019-3883)
  * (bsc#1105606, CVE-2018-10935)
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Ticket 50289 - Fix various database UI issues
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Remove obsolete patch 0001-init_fhs.patch
  * Remove obsolete patch 0002-use-python2-for-selinux-detection.patch
  * Remove obsolete patch 0003-fix-rm-non-existent-man-pages.patch
  * Remove obsolete patch simplify-lib389-setup-py.patch
  * Remove obsolete patch tw.patch
  * Remove obsolete patch 0006-under-network-load-ps-can-decrease-connection-refcnt.patch
  * Remove obsolete patch 0007-fix-remote-dos-via-search-filters-in-slapi_filter_sprintf.patch
  * Remove obsolete patch 0008-invalid-password-migration-causes-unauth-bind.patch
  * Remove obsolete patch 0009-ldapsearch-with-server-side-sort-crashes-the-server.patch
  * Remove obsolete patch 0010-Log-buffer-exceeded-emergency-logging-msg-is-not-thread-safe.patch</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1564660800">- Update to version 1.4.0.26~git0.8a2d3de6f:
  * Bump version to 1.4.0.26
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50325 - Add Security tab to UI
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Bump version to 1.4.0.25
  * Issue 50431 - Fix regression from coverity fix
  * Bump version to 389-ds-base-1.4.0.24
  * Fix cherry-pick error from last commit
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50217 -  Implement dsconf security section
  * Issue 49602 - Revise replication status messages
  * Issue 50431 - Fix regression from coverity fix
  * Ticket 50431 - Fix covscan warnings
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Bump version to 1.4.0.23
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Ticket 50329 - revert fix
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50240 - Improve task logging</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565352000">- Update specfile to be inline with the OpenSUSE spec file
  * include future-configurations in the spec which are not active until 15.2
  * lib389 (upstream requirement from 1.4.0)
  * rust (upstream requirement from 1.4.2)
  * removal of perl (upstream has not supported perl in any 1.4.x release)
  * resolve missing svrcore obsoletes statement and pkg configuration
    (bsc#1144797)</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1565697600">- Fix spec file discrepencies from SLE
- Update to correct license issue in spec file
- Update to simplify rust option selection
- Update to version 1.4.1.6~git0.5ac5a8aad:
  * Bump version to 1.4.1.6
  * Issue 50355 - SSL version min and max not correctly applied
  * Issue 50497 - Port cl-dump.pl tool to Python using lib389
  * Issue: 48851 - investigate and port TET matching rules filter tests(Final)
  * correction to fix for #50417
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50425 - Add jemalloc LD_PRELOAD to systemd drop-in file
  * Issue 50325 - Add Security tab to UI
  * Ticket 49789 - By default, do not manage unhashed password
  * Ticket 49421 - Implement password hash upgrade on bind.
  * Ticket 49421 - on bind password upgrade proof of concept
  * Ticket 50493 - connection_is_free to trylock
  * Ticket 50459 - Correct issue with allocation state
  * Issue 50499 - Fix audit issues and remove jquery from the whitelist
  * Ticket 50459 - c_mutex to use pthread_mutex to allow ns sharing
  * Ticket 50484 - Add a release build dockerfile and dscontainer improvements
  * Issue 50486 - Update jemalloc to 5.2.0
- Update to version 1.4.1.5~git0.748334143:
  * Bump version to 1.4.1.5
  * Issue 50431 - Fix regression from coverity fix
  * Issue 49239 - Add a new CI test case
  * Issue 49997 - Add a new CI test case
  * Issue 50177 - Add a new CI test case, also added fixes in lib389
  * Issue 49761 - Fix CI test suite issues
  * Issue 50474 - Unify result codes for add and modify of repl5 config
  * Ticket 50472 - memory leak with encryption
  * Issue 50462 - Fix Root DN access control plugin CI tests
  * Issue 50462 - Fix CI tests
  * Ticket 50217 -  Implement dsconf security section
  * Issue: 48851 - Add more test cases to the match test suite.
  * Issue 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Ticket 50439 - fix waitpid issue when pid does not exist
  * Issue 50454 - Fix Cockpit UI branding
  * Issue: 48851 - investigate and port TET matching rules filter tests(index)
  * Issue 49232 - Truncate the message when buffer capacity is exceeded
  * Bump version to 1.4.1.4
  * Ticket 49361 - Use IPv6 friendly network functions
  * Issue: 48851 - Investigate and port TET matching rules filter tests(bug772777)
  * Issue: 50446 -  NameError: name 'ds_is_older' is not defined
  * Issue 49602 - Revise replication status messages
  * Ticket 50439 - Update docker integration to work out of source directory
  * Ticket 50037 - revert path changes as it breaks prefix/rpm builds
  * Issue 50431 - Fix regression from coverity fix
  * Issue 50370 - CleanAllRUV task crashing during server shutdown
  * Issue: 48851 - investigate and port TET matching rules filter tests(match)
  * Issue 50417 - Fix missing quote in some legacy tools
  * Ticket 50431 - Fix covscan warnings
  * Revert "Issue 49960 - Core schema contains strings instead of numer oids"
  * Issue 50426 - nsSSL3Ciphers is limited to 1024 characters
  * Issue 50052 - Fix rpm.mk according to audit-ci change
  * Issue 50365 - PIDFile= references path below legacy directory /var/run/
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Ticket 50329 - (2nd) Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 50417 - Revise legacy tool scripts to work with new systemd changes
  * Issue: 48851 - Add more search filters to vfilter_simple test suite
  * Issue 49761 - Fix CI test suite issues
  * Issue 49875 - Move SystemD service config to a drop-in file
  * Ticket 50413 - ds-replcheck - Always display the Result Summary
  * Issue 50052 - Add package-lock.json and use "npm ci"
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter simple)
  * Ticket 50355 -  NSS can change the requested SSL min and max versions
  * Issue: 48851 - investigate and port TET matching rules filter tests(vfilter_ld)
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 49730 - Remove unused Mozilla ldapsdk variables
- Update to version 1.4.1.3~git0.1f1119d4b:
  * Bump version to 1.4.1.3
  * Issue 49761 - Fix CI test suite issues
  * Issue 50041 - Add the rest UI Plugin tabs - Part 2
  * Ticket 50340 - 2nd try - structs for diabled plugins will not be freed
  * Issue 50403 - Instance creation fails on 1.3.9 using perl utils and latest lib389
  * Ticket 50389 - ns-slapd craches while two threads are polling the same connection
  * Issue: 48851 - investigate and port TET matching rules filter tests(scanlimit)
  * Issue 50037 - lib389 fails to install in venv under non-root user
  * Issue: 50112 - Port ACI test suit from TET to python3(userattr)
  * Ticket 50393 - maxlogsperdir accepting negative values
  * Issue: 50112 - Port ACI test suit from TET to python3(roledn)
  * Issue 49960 - Core schema contains strings instead of numer oids
  * Ticket 50396 - Crash in PAM plugin when user does not exist
  * Issue 50387 - enable_tls() should label ports with ldap_port_t
  * Issue 50390 - Add Managed Entries Plug-in Config Entry schema
  * Ticket 50306 - Fix regression with maxbersize
  * Issue 50384 - Missing dependency: cracklib-dicts
  * Issue 49029 - [RFE] improve internal operations logging
  * Issue 49761 - Fix CI test suite issues
  * Issue - 50374 dsdim posixgroup create fails with ERROR
  * Ticket 50251 - clear text passwords visable in CLI verbose mode logging
  * Ticket 50378 - ACI's with IPv4 and IPv6 bind rules do not work for IPv6 clients
  * Issue:48851 - investigate and port TET matching rules filter tests
  * Issue 50220 - attr_encryption test suite failing
  * Ticket 50370 -  CleanAllRUV task crashing during server shutdown
  * Ticket 50340 cont - structs for disabled plugins will not be freed
  * Fix missing import
  * Issue 50164 - Add test for dscreate to basic test suite
  * Ticket 50363 - ds-replcheck incorrectly reports error out of order multi-valued attributes
  * Issue 49730 - MozLDAP bindings have been unsupported for a while
  * Issue #50353 - Categorize tests by tiers
  * Issue 50303 - Add creation date to task data
  * Issue: 50358 -  Create a Bitwise Plugin class in plugins.py
  * Remove the nss3 path prefix from the cert.h C preprocessor source file inclusion
  * Ticket 50329 - revert fix
  * Issue: 50112 - Port ACI test suit from TET to python3(keyaci)
  * Ticket 50344 - tidy rpm vs build systemd flag handling
  * Issue #50067 - Fix krb5 dependency in a specfile
  * Ticket 50340 - structs for diabled plugins will not be freed
  * Ticket 50327 - Add replication conflict support to UI
  * Ticket 50327 - Add replication conflict entry support to lib389/CLI
  * Ticket 50329 - improve connection default parameters
  * Issue: 50313 - Add a NestedRole type to lib389
  * Issue:50112 - Port ACI test suit from TET to python3(Delete and  Add)
  * Ticket 49390, 50019 - support cn=config compare operations
  * Issue 50041 - Add the rest UI Plugin tabs - Part 1
  * Ticket 50329 - Possible Security Issue: DOS due to ioblocktimeout not applying to TLS
  * Ticket 49990 - Increase the default FD limits
  * Ticket 50306 - (cont typo) Move connection config inside struct
  * Ticket 50291 - Add monitor tab functionality to Cockpit UI
  * Fix cockpit console AppStream data
  * Ticket 50317 - fix ds-backtrace issue on latest gdb
  * Ticket 50305 - Revise CleanAllRUV task restart process
  * Fix typo from: Issue 49915 - Add regression test
  * Issue 50026 - Audit log does not capture the operation where nsslapd-lookthroughlimit is modified
  * Ticket 49899 - fix pin.txt and pwdfile permissions
  * Issue 49915 - Add regression test
  * Ticket 50303 - Add task creation date to task data
  * Ticket 50306 - Move connection config inside struct
  * Ticket 50240 - Improve task logging
  * Issue 50032 - Fix deprecation warnings in tests
  * Ticket 50310 - fix sasl header include
  * Ticket 49390 - improve compare and cn=config compare tests
- fix permissions handling (boo#1120189)
- Update to version 1.4.1.2~git0.9a126614a:
  * Removes sysconfig from RPM as we no longer create it to detect
    instance existance or settings. Older installs will still have
    their sysconfig parsed, but new installs should use systemd
    environment variables.
  * Bump version to 1.4.1.2
  * Ticket 50308 - Revise memory leak fix
  * Ticket 50308 - Fix memory leaks for repeat binds and replication
  * Use PKG_CHECK_MODULES to detect the systemd library
  * Use PKG_CHECK_MODULES to detect the kerberos library
  * Use pkg-config from the host system to better support cross-compiling
  * Use PKG_CHECK_MODULES to detect the libsasl2 library
  * configure.ac: Add missing comma to an AC_ARG_ENABLE macro
  * configure.ac: Remove unpaired parentheses from two help strings
  * m4/doxygen.m4: Fix spelling of Doxygen in a message
  * Use PKG_CHECK_MODULES to detect the pcre library
  * Use PKG_CHECK_MODULES to detect the cmocka library
  * Use PKG_CHECK_MODULES to detect the nss library
  * Use PKG_CHECK_MODULES to detect the nspr library
  * Use PKG_CHECK_MODULES to detect the event library
  * Ticket 49873 - (cont 3rd) cleanup debug log
  * Ticket 49873 - (cont 2nd) Contention on virtual attribute lookup
  * Issue 50292 - Fix Plugin CLI and UI issues
  * Issue:50112 - Port ACI test suit from TET to python3(misc and syntax)
  * Ticket 50289 - Fix various database UI issues
  * Ticket 49463 After cleanALLruv, replication is looping on keep alive DEL
  * Ticket 50300 - Fix memory leak in automember plugin
  * Ticket 50265: the warning about skew time could last forever
  * Ticket 50260 - Invalid cache flushing improvements
  * Ticket 49561 - MEP plugin, upon direct op failure, will delete twice the same managed entry
  * Ticket 50077 - Do not automatically turn automember postop modifies on
  * Ticket 50282 - OPERATIONS ERROR when trying to delete a group with automember members
  * Ticket 49715 - extend account functionality
  * Ticket 49873: (cont) Contention on virtual attribute lookup
  * Ticket 50260 - backend txn plugins can corrupt entry cache
  * Ticket 50255 - Port password policy test to use DSLdapObject
  * Ticket 49667 - 49668 - remove old spec files
  * Issue 50276 - 389-ds-console is not built on RHEL8 if cockpit_dist is already present
  * Issue: 50112 - Port ACI test suit from TET to python3(Search)
  * Ticket 50259 - implement dn construction test
  * Ticket 50273 - reduce default replicaton agmt timeout
  * Ticket 50208 - lib389- Fix issue with list all instances
  * Issue: 50112 - Port ACI test suit from TET to python3(Global Group)
  * Issue 50041 - Add CLI functionality for special plugins
  * Issue 50263 - LDAPS port not listening after installation
  * Ticket 49575 - Indicate autosize value errors and corrective actions
  * Ticket 50137 - create should not check in non-stateful mode for exist
  * Ticket 49655 - remove doap file
  * Issue 50197 - Fix dscreate regression
  * Ticket 50234 - one level search returns not matching entry
  * Ticket 50257 - lib389 - password policy user vs subtree checks are broken
  * Issue: 50253 -  Making an nsManagedRoleDefinition type in src/lib389/lib389/idm/nsrole.py
  * Issue 49029 - [RFE] improve internal operations logging
  * Ticket 50230 - improve ioerror msg when not root/dirsrv
  * Issue 50246 - Fix the regression in old control tools
  * Ticket 50197 - Container integration part 2
  * Ticket 50197 - Container init tools
  * Ticket 50232 - export creates not importable ldif file
  * Ticket 50215 - UI - implement Database Tab in reachJS
  * Ticket 50243 - refint modrdn stress test
  * Ticket 50238 - Failed modrdn can corrupt entry cache
  * Ticket 50236 - memberOf should be more robust
  * Ticket 50213 - fix list instance issue
  * Issue: 50219 - Add generic filter to DSLdapObjects
  * Issue: 50227 - Making an cosClassicDefinition type in src/lib389/lib389/cos.py
  * Issue: 50112 - Port ACI test suit from TET to python3(modify)
  * Ticket 50224 - warnings on deprecated API usage
  * Issue:50112 - Port ACI test suit from TET to python3(valueaci)
  * Issue: 50112 Port ACI test suit from TET to python3(Aci Atter)
  * Ticket 50208 - make instances mark off based on dse.ldif not sysconfig
  * Issue: 50170 - composable object types for nsRole in lib389
  * Ticket 50199 - disable perl by default
  * Issue:50211 - Making an actual Anonymous type in lib389/idm/account.py
  * Ticket 50155 - password history check has no way to just check the current password
  * Ticket 49873 - Contention on virtual attribute lookup
  * Ticket 50197 - Container integration improvements
  * Ticket 50195 - improve selinux error messages in interactive
  * Ticket 49658 - In replicated topology a single-valued attribute can diverge
  * Ticket 50111: Use pkg-config to detect icu
  * Ticket 50165 - Fix issues with dscreate
  * Ticket 50177 - import task should not be deleted too rapidely after import finishes to be able to query the status
  * Ticket 50140 - Use high ports in container installs
  * Ticket 50184 - Add cli tool parity to dsconf/dsctl
  * Ticket 50159 - sssd and config display
- Remove a pair of %if..%endif guards that do not affect the build.
- Updates to 389-ds.spec
  - Make lib389 a requirement of 389-ds installs
  - Disable shell script wrappers that have be replaced by dsctl/dsconf
  - Disable perl in spec file build. For replacement tools see:
    http://www.port389.org/docs/389ds/FAQ/legacy-command-changes.html
  - Remove patches that have been merged by upstream
  - Removed: 0001-init_fhs.patch - merged by upstream
  - Removed: 0002-use-python2-for-selinux-detection.patch - merged
    by upstream
  - Removed: drop-caps.patch - merged by upstream
  - Commented requires and recommendes in 389-ds.spec
  - cyrus-sasl-plain added as a requirement as it is the only plaintext
    or start TLS secure method for password auth (LDAPS is always secure)
  - cyrus-sasl-gssapi moved to recommends as it is not always required
  - cyrus-sasl-digestmd5 moved to recommends, as it is insecure and not
    always required
  - openldap2-client moved to recommends on lib389 as a supplement to
    ldap command line tools that we provide, but not necessary
  - python3-selinux and python3-policycoreutils moved to recommends
    as they are not required, and only give "nice to have" features
    during install of an instance
- Update to version 1.4.1.1~git0.af9bb7206:
  * Bump version to 1.4.1.1
  * Ticket 50151 - lib389 support cli add/replace/delete on objects
  * Issue 50041 - CLI and WebUI - Add memberOf plugin functionality
  * Bump version to 1.4.1.0
  * Ticket 50125 - perl fix ups for tmpfiles
  * Ticket 50164 - Add test for dscreate
  * Fix for ticket 50059: If an object is nsds5replica, it must be cn=replica
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Fix compiler warning in snmp main()
  * Ticket - Fix compiler warning in init.c
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50169 - lib389 changed hardcoded systemctl path
  * Ticket 50165 - Fix dscreate issues
  * Issue 50152 - Replace os.getenv('HOME') with os.path.expanduser
  * Ticket 49540 - FIx compiler warning in ldif2ldbm
  * Ticket 50077 - Fix compiler warnings in automember rebuild task
  * Ticket 49972 - use-after-free in case of several parallel krb
  * authentication
  * Ticket 50161 - Fixed some descriptions in "dsconf backend --help"
  * Ticket 50153 - Increase default max logs
  * Ticket 50123 - with_tmpfiles_d is associated to systemd
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 49984 - python installer add option to create suffix entry
  * Ticket 50077 - RFE - improve automember plugin to work with
  * modify ops
  * Ticket 50136 - Allow resetting passwords on the CLI
  * Ticket 49994 - Adjust dsconf backend usage
  * Ticket 50138 - db2bak.pl -P LDAPS does not work when
  * nsslapd-securePort is missing
  * Ticket 50122 - Fix incorrect path spec
  * Issue 50145 - Add a verbose option to the backup tools
  * Ticket 50056 - dsctl db2ldif throws an exception
  * Ticket 50078 - cannot add cenotaph in read only consumer
  * Ticket 50126 - Incorrect usage of sudo in test
  * Issue 50130 - Building RPMs on RHEL8 fails
  * Ticket 50134 - fixup-memberof.pl does not respect protocol requested
  * Issue 50122 - Selinux test for presence
  * Issue 50101 -  Port fourwaymmr Test TET suit to python3
  * Issue 50091 - shadowWarning is not generated if passwordWarning
  * is lower than 86400 seconds (1 day).
  * Ticket 50128 - NS Stress fails without ipv6
  * Issue 49618 - Set nsslapd-cachememsize to custom value
  * Ticket 50117 - after certain failed import operation, impossible
  * to replay an import operation
  * Ticket 49999 - rpm.mk dist-bz2 should clean cockpit_dist first
  * Issue 48064 - Fix various issues in disk monitoring test suite
  * Issue 49938 - lib389 - Clean up CLI logging
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50056 - Fix UI bugs (part 2)
  * Issue: 48064 - CI test - disk_monitoring
  * Ticket 50099 - extend error messages
  * Ticket 50099 - In FIPS mode, the server can select an unsupported
  * password storage scheme
  * Issue 50041 - Add basic plugin UI/CLI wrappers
  * Issue 50082 - Port state test suite
  * Ticket 49574 - remove index subsystem
  * Issue 49588 - Add py3 support for tickets : part-5
  * Ticket 50095 - cleanup deprecated key.h includes
- use lib389 on 15.0 and up. now that we do not hardrequire the
  python selinux bindings anymore</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1570536000">- Update to version 1.4.2.2~git0.d41ef935b:
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50545 - Port repl-monitor.pl to lib389 CLI
  * Ticket 50622 - ds_selinux_enabled may crash on suse
  * Ticket 50595 - remove syslog.target requirement
  * Ticket 50617 - disable cargo lock
  * Issue 50620 - Fix regressions from 50506 (slapi_enry_attr_get_ref)
  * Issue 50615 - Log current test name to journald
  * Ticket: 50610 memory leak in dbscan
  * Bump version to 1.4.2.1
  * Ticket 50581 - ns-slapd crashes during ldapi search
  * Issue 50604 - Fix UI validation
  * ticket 50510 - etime can contain invalid nanosecond value
  * Ticket 50593 Investigate URP handling on standalone instance
  * Issue 50506 - Fix regression for relication stripattrs
  * Issue 50580 - Perl can't be disabled in configure
  * Ticket 50584, 49212 - docker healthcheck and configuration
  * Issue 50546 - fix more UI issues(part 2)
  * Do not use comparision with "is" for empty value
  * Issue 50546 - fix more UI issues
  * Issue 50586 - lib389 - Fix DSEldif long line processing
  * Issue 50173 - Add the validate-syntax task to the dsconf schema
  * Issue 50546 - Fix various issues in UI
  * Bump version to 1.4.2.0
  * Ticket 50576 - Same proc uid/gid maps to rootdn for ldapi sasl
  * Ticket 50567, 50568 - strict host check disable and display container version
  * Issue 50550 - DS installer debug messages leaking to ipa-server-install
  * Issue 50545 - Port fixup-memberuid and add the functionality to CLI and UI
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50578 - Add SKIP_AUDIT_CI flag for Cockpit builds
  * Ticket 50349 - filter schema validation
  * Issue: 48055 - CI test-(Plugin configuration should throw proper error messages if not configured properly)
  * Issue 49324 - idl_new fix assert
  * Ticket 50564 - Fix rust libraries by default and improve docker
  * Issue 50206 - Refactor lock, unlock and status of dsidm account/role
  * Issue 49324 - idl_new report index name in error conditions
  * Issue 49761 - Fix CI test suite issues
  * Issue 50506 - Fix regression from slapi_entry_attr_get_ref refactor
  * Issue 50499 - Audit fix - Update npm 'eslint-utils' version
  * Issue 49624 - modrdn silently fails if DB deadlock occurs
  * fix for 50542 crashes in filter tests
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50542 - Entry cache contention during base search
  * Issue 50462 - Fix CI tests
  * Ticket 50490 objects and memory leaks
  * Issue 50538 - Move CI test to individual file
  * Issue 50538 - cleanAllRUV task limit is not enforced for replicated tasks
  * Issue 50536 - Audit log heading written to log after every update
  * Issue 50525 - nsslapd-defaultnamingcontext does not change when the assigned suffix gets deleted
  * Issue 50534 - CLI change schema edit subcommand to replace
  * Issue 50506 - cont Fix invalid frees from pointer reference calls
  * Issue 50507 - Fix Cockpit UI styling for PF4
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing final)
  * Issue: 48851 - Add more test cases to the match test suite(mode replace)
  * Issue 50530 - Directory Server not RFC 4511 compliant with requested attr "1.1"
  * Issue 50529 -  LDAP server returning PWP controls in different sequence
  * Issue 50506 - Fix invalid frees from pointer reference calls.
  * Issue 50506 - Replace slapi_entry_attr_get_charptr() with slapi_entry_attr_get_ref()
  * Issue 50521 - Add regressions in CI tests
  * Ticket 50510 - etime can contain invalid nanosecond value
  * Issue 50488 - Create a monitor for disk space usagedisk-space-mon
  * Issue 50511 -  lib389 PosixGroups type can not handle rdn properly
  * Issue 50508 - UI - fix local password policy form</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1579608000">- Update to version 1.4.2.6~git0.e84bbce3f:
  * Bump version to 1.4.2.6
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue 50754 - Add Restore Change Log option to CLI
  * Ticket 50727 - change syntax validate by default in 1.4.2
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Ticket #49761 - Fix CI test suite issues
  * Issue 50499 - Fix npm audit issues
  * Issue 50774 - Account.enroll_certificate() should not check for DS version
  * Issue 50771 - 1.4.2.5 doesn't compile due to error ModuleNotFoundError: No module named 'pkg_resources.extern'
  * Issue 50758 - Need to enable CLI arg completion
  * Ticket 50709: Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue: 50690 - Port Password Storage test cases from TET to python3(create required types in password_plugins)
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match index)
  * Issue 50761 - Parametrized tests are missing ':parametrized' value
  * Bump version to 1.4.2.5
  * Issue 50747 - Port readnsstate to dsctl
  * Issue 50758 - Enable CLI arg completion
  * Issue 50753 - Dumping the changelog to a file doesn't work
  * Ticket 50745: ns-slapd hangs during CleanAllRUV tests
  * Issue 50734 - lib389 creates non-SSCA cert DBs with misleading README.txt
  * Issue: 48851 - investigate and port TET matching rules filter tests(cert)
  * Issue: 50443 - Create a module in lib389 to Convert a byte sequence to a properly escaped for LDAP
  * Ticket 50664 - DS can fail to recover if an empty directory exists in db
  * Ticket 50736 - RetroCL trimming may crash at shutdown if trimming configuration is invalid
  * Ticket 50741 - bdb_start - Detected Disorderly Shutdown last time Directory Server was running
  * Issue 50572 - After running cl-dump dbdir/cldb/*ldif.done are not deleted
  * Issue 50701 - Fix type in lint report
  * Ticket 50729 - add support for gssapi tests on suse
  * Issue 50701 - Add additional healthchecks to dsconf
  * Issue 50711 - `dsconf security` lacks option for setting nsTLSAllowClientRenegotiation attribute
  * Issue 50439 - Update docker integration for Fedora
  * Issue: 48851 - Investigate and port TET matching rules filter tests(last test cases for match)
  * Issue 50499 - Fix npm audit issues
  * Issue 50722 - Test IDs are not unique
  * Issue 50712 - Version comparison doesn't work correctly on git builds
  * Issue 50499 - Fix npm audit issues
  * Issue 50706 - Missing lib389 dependency - packaging
  * Bump version to 1.4.2.4
  * Issue 49761 - Fix CI test suite issues
  * Issue 50634 - Fix CLI error parsing for non-string values
  * Ticket 50659 AddressSanitizer: SEGV ... in bdb_pre_close
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50644 - fix regression with creating sample entries
  * Issue 50699 - Add Disk Monitor to CLI and UI
  * Issue 50716 - CVE-2019-14824 (BZ#1748199) - deref plugin displays restricted attributes
  * Issue 50536 - After audit log file is rotated, DS version string is logged after each update
  * Issue #50712 - Version comparison doesn't work correctly on git builds
  * Issue 50706 - Missing lib389 dependency - packaging
  * Issue 49761 - Fix CI test suite issues
  * Issue #50683 - Makefile.am contains unused RPM-related targets
  * Issue 50696 - Fix various UI bugs
  * Update based on Marks feedback
  * Update to mark as skipif
  * Ticket 50641 - Update default aci to allows users to change their own password
  * Ticket 50007, 50648 - improve x509 handling.
  * Issue 50689 - Failed db restore task does not report an error
  * Issue 50199 - Disable perl by default
  * Ticket 50633 - Add cargo vendor support for offline builds
  * Issue 50499 - Fix npm audit issues
  * Bump version to 1.4.2.3
  * Issue 50592 - Port Replication Tab to ReactJS
  * Issue 50680 - Remove branding from upstream spec file
  * Issue 50669 - Remove nunc-stans in favour of reworking current conn code (add.)
  * Issue: 48055 -  CI test - automember_plugin(part1)
  * Issue 50677 - Map subtree searches with NULL base to default naming context
  * Issue 50669 - Fix RPM build
  * Ticket 50669 - remove nunc-stans
  * Ticket 49850 cont -fix crash in ldbm_non_leaf
  * Issue 50634 - Clean up CLI errors output - Fix wrong exception
  * Issue 50660 - Build failure on Fedora 31
  * Issue 50634 - Clean up CLI errors output
  * Issue: 48851 - Investigate and port TET matching rules filter tests(match more test cases)
  * Ticket 50428 - Log the actual base DN when the search fails with "invalid attribute request"
  * Issue 49850 -  ldbm_get_nonleaf_ids() slow for databases with many non-leaf entries
  * Issue 50655 - access log etime is not properly formatted
  * Issue 50653 -  objectclass parsing fails to log error message text
  * Issue 50646 - Improve task handling during shutdowns
  * Add new test suite to test migration between RHDS versions
  * Ticket 50627 - Support platforms without pytest_html
  * Ticket 49476 - backend refactoring phase1, fix failing tests
  * Ticket 49476 - refactor ldbm backend to allow replacement of BDB
  * Ticket - 50349 - additional fix: filter schema check must handle subtypes
  * Issue: 48851 - investigate and port TET matching rules filter tests(indexing more test cases)
  * Issue 50638 - RecursionError: maximum recursion depth exceeded while calling a Python object
  * Ticket 50636 - Crash during sasl bind
  * Ticket 50632 - Add ensure attr state so that diffs are easier from 389-ds-portal
  * Ticket 50619 - extend commands to have more modify options
  * Issue 50499 - Fix npm audit issues
  * bump version to 1.4.2.2</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1580212800">- Update to version 1.4.2.7~git0.202953d28:
  * Bump version to 1.4.2.7
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="William Brown &lt;william.brown@suse.com&gt;" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
</package>
<package pkgid="e357244555136e5b044c717adb818bc8a61a080fd257aab150ce4f9c6069166b" name="AusweisApp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp152.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
</package>
<package pkgid="9c730f747a6d9eb18ba4608db401a08fe354e517f904bd6509e0a9f899228604" name="AusweisApp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="lp152.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="1d0f565e0ff6a07c29b9af0a276b9241c28f4400820d154e1b020d46d9a62a1c" name="AusweisApp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="lp152.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="aa49a1b1c814db49cff5c859d38ea62967768a7ab0004706477ccaa4d88c94d0" name="AusweisApp2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="lp152.2.12.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
</package>
<package pkgid="8123f893048dd2b56999efd7c51b422c03a0104d2099ad6e6a9168270934c56b" name="AusweisApp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp152.2.3.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
</package>
<package pkgid="f72778ce80b74d4f627353502c9bbacdb6f3ae3a8a09ab3525f6547d0a746c8c" name="AusweisApp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.0" rel="lp152.2.6.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="f3e1ba4e4b904f5f89618b4120e58e78542807b77ed5944cdabf8a41dd638f6b" name="AusweisApp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.1" rel="lp152.2.9.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
</package>
<package pkgid="d3e0979915d38d9e97a64addd277e0157f0eb78860b4c529b95193868fde81b5" name="AusweisApp2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="lp152.2.12.1"/>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1540641600">- Initial build
  + Version 1.14.3</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1545912000">- Add patch to disable auto updater
  + 0005-disable-auto-updater.patch
- Rewrite Summary and %description in English</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1547035200">- New upstream release
  + Version 1.16.1
  * Deactivated automatic clean-up of old log files as
    that could cause a crash in version 1.16.0
  + Version 1.16.0
  * Small bug fixes
  * Added a tutorial to aid usage on Android devices
  * Dropped support for Android 4.3 and 4.4
  * Dropped support for OS X 10.10
  * Added support for macOS 10.14
  * It's now possible to transmit data from an Android smartphone
    anomynously after successful authentication
  * Extended the diagnostics functionality
  * Added popup question to rate app on Android
  * Added possibility to view logs on Android
  * On Android, the app now clearly differentiates
    between 5- and 6-digit PIN codes
  * Removing the ID card while entering PIN/CAN/PUK will no longer
    terminate the authentication or PIN changing process
  * Added support for corporate-wide deployments of the MSI
    package on Windows (separate documenation)
  * Added support for a WebSocket SDK on Windows and macOS
    (separate documentation)
  * Concurrent access from different applications to card readers
    which are connected through PC/SC is now possible
  * Updated OpenSSL version to 1.1.1
  * Updated Qt version to 5.11.2
  * Dropped support for TLS v1.1
  * Dropped support for the following TLS ciphers:
  - DHE-DSS-AES256-GCM-SHA384
  - DHE-DSS-AES256-SHA256
  - DHE-DSS-AES128-GCM-SHA256
  - DHE-DSS-AES128-SHA256
  - DHE-DSS-AES256-SHA
  - DHE-DSS-AES128-SHA
  - ECDHE-ECDSA-AES256-SHA
  - ECDHE-RSA-AES256-SHA
  - DHE-RSA-AES256-SHA
  - ECDHE-ECDSA-AES128-SHA
  - ECDHE-RSA-AES128-SHA
  - DHE-RSA-AES128-SHA
- Drop patches merged upstream
  + 0001-fix-desktop-menu-category.patch
  + 0002-add-desktop-menu-generic-name.patch
- Refresh and renumber patches for new version
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1559736000">- New upstream release
  + Version 1.16.2
  * The cancel dialog is no longer shown when switching into PIN
    changing mode while in identification mode
  * On Android, old log files are now purged automatically
  * Smartphones that have been paired as card readers (SaK) are now shown as
    available if the connection has been established automatically by the app
  * Explanatory texts in the mobile app have been improved
  * The mobile app no longer performs a browser redirect when turning the transport
    PIN into a 6-digit custom PIN when in identfication mode
  * The error dialog has gained the possibility to send an email to the AusweisApp2
    support team; it will ask the user now to include the application log and the
    email automatically includes information about the system configuration as well
    as the most recent critical error messages
  * The integrated databases for supported cardreaders as well as online
    services supporting the electronic personal ID card have been updated
  * The version number of AusweisApp2 is no longer part of the installation
    path on Windows to avoid issues with anti-virus software
  * A bug that caused AusweisApp2 to crash in identification mode while
    running in the background has been fixed
  * Automatic detection of smartphones as card readers has been improved
  * Automatic detection of card readers in diagnosis mode has been improved
  * Other small bugs have been fixed
  * The default logger can now be disabled with "?no-loghandler"
  * Instructions for "Installing in company networks" have been extended</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571486400">- New upstream release
  + Version 1.18.2
  * Small bug fixes
  * Updates to Info.plist file
  + Version 1.18.1
  * Updates to Info.plist file
  + Version 1.18.0
  * Enable NFC functionality for iOS 13
  * Small bug fixes
  * Updated OpenSSL version to 1.1.1c
  * Updated Qt version to 5.12.4
  * A compiler with C++17 support is now required
- Fix patch to set path to translation files
  + 0002-fix-translation-files-path.patch
- Refresh patches for new version
  + 0003-disable-auto-updater.patch
- Add patch to adjust path for config.json
  + 0004-set-config-path.patch
- Add patch to disable QtQuick as it's currently broken
  + 0005-disable-qtquick.patch
- Disable building shared libraries
  + Pass -DBUILD_SHARED_LIBS=off to cmake
  + Remove any references for *.so files from %install and %files sections
  + Remove generation of ld.conf.so configuration file
  + Remove invocations to /sbin/ldconfig from %postin and %postun sections
- Install config.json into data directory
- Remove libQt5QuickControls2-devel from BuildRequires</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572800">- Remove extra LICENSE.txt from packaging source</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572801">- Fix incorrect package name in spec file header
- Update copyright year to 2019
- Use https connection in Bugzilla link</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1571572802">- Use correct SPDX identifier in License field for EUPL-1.2</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1572264000">- Fix capitalization of URL field descriptor
- Remove unnecessary %defattr(-,root,root) from %files section
- Remove unnecessary %post and %postun targets
  + Drop %desktop_database_post and %icon_theme_cache_post invocations
  + Drop %desktop_database_postun and %icon_theme_cache_postun invocations
- Sort dependencies in BuildRequires
- Switch cmake builder to Ninja
  + Add ninja to BuildRequires
  + Define __builder as ninja in %build target</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libudev) instead of libudev-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1579089600">- New upstream release
  + Version 1.20.0
  * Introduce new graphical user interface for Windows and macOS
  * The DMG image for macOS is now signed
  * Support for screen readers on Android and iOS
  * Adjust color contrast for better readability
  * Optimize menu layout and introduce settings
    panel on iOS and Android
  * Optimize the functionality to use the smartphone as card reader
  * Support for macOS 10.11 was dropped
  * Support for x86 architecture on Android was dropped
  * Small bug fixes
  * Update OpenSSL to version 1.1.1d
  * Update Qt to version 5.12.5
- Add libqt5-qtdeclarative-devel and libQt5QuickControls2-devel
  to BuildRequires, required for QML-based user interface
- Add patch to disable vendor name
  + 0001-disable-vendor-name.patch
- Add patch to fix path to desktop icon
  + 0002-fix-desktop-icon-path.patch
- Drop custom icon
  + AusweisApp2.png
- Drop patches for issues fixed upstream
  + 0001-fix-resource-file-path.patch
  + 0002-fix-translation-files-path.patch
  + 0003-disable-auto-updater.patch
  + 0004-set-config-path.patch
  + 0005-disable-qtquick.patch
- Improve grammar and semantics in Summary and %description
- Install npa_icon.png as desktop icon</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1579348800">- Add Requires on libqt5-qtgraphicaleffects and libqt5-qtquickcontrols2
  This is required for the new default QML interface to work.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593000000">- New upstream release
  + Version 1.20.1
  * Password-protected proxy servers can now also be used from
    the new user interface.
  * A new option for mobile devices now allows switching between
    portrait and landscape viewing mode.
  * On Android, canceling the authentication process should now
    be faster and the previously occurring crash was fixed.
  * On Windows, a progress bar is now also shown during the
    authentication process when using the new user interface.
  * Small bug fixes.
  * Enterprise installations using the MSI package have gained the possibility
    to enable on-site-readout and providing a proxy configuration.
  * The mobile app now allows enabling and disabling debug mode when retrieving
    one's own personal ID data by tapping the magnifier icon ten times.
  * Also in the mobile app, tapping the version number in the about dialog
    ten times will now activate the advanced settings dialog which allows
    one to enable the on-site-readout.
- Drop patches for issues fixed upstream
  + 0001-disable-vendor-name.patch
  + 0002-fix-desktop-icon-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1599134400">- New upstream release
  + Version 1.20.2
  * It is now possible to paste a PIN/CAN/PUK using the common methods of
    the operating system in use, enabling the use of password managers.
  * Fixed an issue on Android 9 and older which prevented switching the
    screen to the WiFi settings on some devices.
  * Some help texts have been improved.
  * A tooltip has been added to the Windows installer for the firewall settings.
  * Search performance in the provider screen has been improved.
  * Fixed an issue on Android where an error message was shown incorrectly when
    the ID card was presented to the card reader before starting authentication.
  * Display fonts have been improved on OnePlus devices.
  * On macOS, the app will now use the integrated graphics adapter if possible.
  * Small bug fixes.
  * Support for Android NDK 21.3 and SDK cmdline-tools 2.1 has been added.
  * Fixed a compatibility issue with Qt 5.10.
  * Fixed an issue where an incorrect text was shown in comfort mode when using
    a smartphone with the CAN-allowed function.
  * Fixed an issue on Android where the feedback screen was incorrectly shown
    after using the external SDK.
  * Documentation for the integrated SDK on Android has been extended to include
    logging facilities and App Bundles.
  * Use of more inclusive terminology, the terms "blacklist" and "suppressions"
    have been removed or renamed.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1606910400">- New upstream release
  + Version 1.22.0
  * PIN management has been revised.
  * App navigation on iOS and Android harmonized. The sidebar on Android has
    been removed and replaced with a bar at the bottom of the screen.
  * The "Help" area has been revised and restructured on all platforms.
    The software licenses can now be viewed within the application.
  * A new start page has been added on Android and iOS.
  * A function test can now be carried out on Android and iOS via the
    entry "Check device and ID card" on the start page.
  * Auxiliary animations have been added to Android and iOS to
    clarify possible positions for placing the ID card.
  * The one-off notice that the transport PIN must be changed
    has been added to Android and iOS.
  * Option entry and query for the permission "local network access" has been
    added on iOS 14. This is necessary for using a smartphone as a card reader.
  * AusweisAppp2 can now be installed on macOS via the App Store. Updates that
    appear in the future can be obtained automatically through the store.
  * The update mechanism on Windows has been revised. The download of the update
    and the start of the installation are now carried out automatically when an
    update is started.
  * Support for the German eID card for Union citizens has been added.
  * Support for macOS Sierra 10.12 has been discontinued.
  * Support for Bluetooth card readers has been discontinued.
  * Minor bug fixes.
  * The SDK now supports changing the PIN.
  * The SDK now supports displaying the permissions "PinManagement" and "CanAllowed".
  * Update of OpenSSL to version 1.1.1h.
  * Update of Qt to version 5.15.2.
- Add libQt5QuickTemplates2-devel to BuildRequires
- Add manpage to %files section
- Add patch to fix manpage installation path
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1615896000">- New upstream release
  + Version 1.22.1
  * The release notes are now displayed within the app.
  * Improvements have been made to the display and reporting
    of error messages within the mobile app.
  * Fixed possible freezing of the app when checking the ID.
  * The pairing of a smartphone can now be started directly.
  * The mobile app now starts with the SaK view if this was
    the last setting used.
  * The smartphone function as a card reader can now always be
    activated on iOS.
  * Animations on iOS have been improved.
  * Minor bug fixes.
  * In the SDK for iOS, the handleInterrupt parameter was added to
    RUN_AUTH and RUN_CHANGE_PIN. Like the associated INTERRUPT command.
  * In the SDK for iOS, parameters have been added for RUN_AUTH and
    RUN_CHANGE_PIN, which allow messages to be displayed in the system
    scan dialog.
  * The following error is now returned in the SDK for an expired ID
    card: DocumentValidityVerificationFailed
  * Added support for the new protocol version for smartphones as card
    readers in accordance with the supplement to BSI TR-03112 Part 6.
  * A crash on Windows when pairing PersoSim has been fixed.
  * Added support for PersoSim for Android with host card emulation.
  * A possible infinite loop in the SDK for Android has been fixed.
  * Update of OpenSSL to version 1.1.1j.
- Drop patches for issues fixed upstream
  + 0001-fix-manpage-path.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1617192000">- New upstream release
  + Version 1.22.2
  * CyberJack RFID basis reader is working again on Windows.
  * Automatic start of the setup wizard when running AusweisApp2
    for the first time on desktop systems is working again now.
  * Fixed a bug in the self-idenfication dialog.
  * Fixed some crashes.
  * The Android SDK is now also made available on Maven Central
    as JCenter has been discontinued.
  * Support for authorization certificates with PIN management.
  * Update of OpenSSL to version 1.1.1k.</changelog>
</package>
<package pkgid="5c5baef203b691f2a1a5d9d2ae0b09c6e665aa1ad991365f7e1abd451859041b" name="Box2D-debugsource" arch="i586">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="1abc03a72ac295b1153f43720083d513c8ad34b854c003d61bee22bcba677bf0" name="Box2D-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="216fb129891c595e49fbba5928422685ba39760e28ef3d52738d6aa80165ab23" name="Box2D-debugsource" arch="i586">
  <version epoch="0" ver="2.3.1" rel="lp152.4.5.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="ea68b94700ad7c0063f77b09335075c28b0c9e24e345ec2beb2868cb2e1d0576" name="Box2D-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.1" rel="lp152.4.6.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1606996800">- Update to version 2.4.1.
  * API Changes
  * Extended distance joint to have a minimum and maximum limit.
  * Removed rope joint. Use the distance joint instead.
  * B2_USER_SETTINGS and b2_user_settings.h can control user
    data, length units, and maximum polygon vertices.
  * Default user data is now uintptr_t instead of void*
  * b2FixtureDef::restitutionThreshold lets you set the
    restitution velocity threshold per fixture.
  * BREAKING Changes
  * BREAKING: distance joint 0 stiffness now means the spring is
    turned off rather than making the joint rigid.
  * BREAKING: distance joint minimum and maximum must be set
    correctly to get old behavior.
  * Infrastructure
  * Library installation function available in CMake.
  * Shared library (DLL) option available.
  * Bug fixes
- Updates since 2.3.1
  * Infrastructure
  * Documentation in Doxygen format
  * Unit test support
  * Continuous integration testing using Travis CI
  * Limited use of C++11 (nullptr and override)
  * Collision
  * Chain and edge shape must now be one-sided to eliminate ghost
    collisions
  * Broad-phase optimizations
  * Added b2ShapeCast for linear shape casting
  * Dynamics
  * Joint limits are now predictive and not stateful
  * Experimental 2D cloth (rope)
  * b2Body::SetActive -&gt; b2Body::SetEnabled
  * Better support for running multiple worlds
  * Handle zero density better
  * The body behaves like a static body
  * The body is drawn with a red color
  * Added translation limit to wheel joint
  * World dump now writes to box2d_dump.inl
  * Static bodies are never awake
  * All joints with spring-dampers now use stiffness and damping
  * Added utility functions to convert frequency and damping
    ratio to stiffness and damping
- Remove Box2D-fix-version-2.3.1.patch, fixed.
- Change package name from Box2D to box2d.</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Fix the source URL</changelog>
</package>
<package pkgid="1aa84eec63b47c656680608b014dad2b40c00e5e63b500f7f87e6b89c8cf7b0a" name="HepMC-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="af9febbc573b791c88f04857439fe1166bc0ea9cde09d3888a6e23fbfe0ba61b" name="HepMC-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="8cbfc13a2697f3721a4c43baabc1b795663232daf1aa1bb4421ba1c1a216a94a" name="ImageMagick-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="3065d675042646eb82f293519a6c057e32d03e5d431d18dcd02eff08fb42a1fe" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="f37b0d0667a5e71d919369b2d94d5206bb7c0890a23794d85b66bcd861294af0" name="ImageMagick-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="9ef9e32e951b06b1b0fdab92d4134620a2a7091184895a56e0b081c2f4e922ad" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="fb1a7fd1e03535b2a66f8a550a0aa00b8ff54921ab61f9de22bff385125234e5" name="ImageMagick-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="54414dc82ffbc00397e99f49065924d2ec53dad2cc61270103cdd8e8f670f37f" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="aa530d232a5d8aa7cd73cdafa9ad792e7c2561eef0674e83a4ec1cd18abd8340" name="ImageMagick-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="3d8540054f46cd1cdb6aef436b5289c702f32a91d502b41b4641d8f4cbd3c9f5" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="8419ac53e2c0cad980adf8adf0c0b828545d8eb5c7b70d29b5af4dabb9ad701a" name="ImageMagick-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="ae9b944770c7833dee59957c7ffdc34d21d025ac9b42e0b0e58452e2033c55f9" name="ImageMagick-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="33f802cd633f188ca856554bc020c84aa40c15e4305aeb2e55551e8e500c554a" name="ImageMagick-debugsource" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="50e42602af1f7fa9fc2c616b5876ea89b30accfda787fd0b70a1256a701d9e83" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="33dca4cf031c11e4028690d50d9caa6da91195485c451e3482d538792d7a9119" name="ImageMagick-debugsource" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="5ac54bd07df8478b24634c45ec3b117641157698f2cf269e0ac0438ba2d9b210" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="19ad9da882aab159b6c95ec610e1fc275a1a8bc9d500eb5706eecaa86dcf1015" name="ImageMagick-debugsource" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="c03442db0073b31cf15ee00d8ea05e57df2bdfb26c21556552791d32e4899534" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="f57577006024e8036d96c6b065c9f91622f99b12a00e8d6910234efee58ec757" name="ImageMagick-debugsource" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="8e35086fb506bb0ace5c9e4c845d6c8383d790446bf75784e3d10f3068af1780" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="c5721365566c2012828008b448485781cd154dee3c5511deb0b55b509383246b" name="ImageMagick-debugsource" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="fb7abf10fa1ae1b60a3e84a5133ec239776ee72f75f0fac697ebb042f9200686" name="ImageMagick-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="1429dd83410e3679d66c0cbfb568c7239e179e6c6ffa2392bfaa820cf25d49c4" name="ImageMagick-extra-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="94de37e7651195b352b4470e0806444f8670d484cd8e2f5270ca3b65035d6305" name="ImageMagick-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="54c993ecf1bcef77b0205e3a65884d02d091d2e0513e83cac4d02a30a176ee6d" name="ImageMagick-extra-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="f73240e00ffc2d586a7b2b45139cfb0bf7aa516f12e3b2c216101bdc3fb52b90" name="ImageMagick-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="154b0260709a53adaa4b5e879f841d46c8fcb0454ebccdcd2249ab6cee426c48" name="ImageMagick-extra-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="90043cd8c59cef1e1bb11b73d41c755259a831979aefb8c25a5663876cdd9344" name="ImageMagick-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="294afaabf4f6dda3117d58e05f1b473a21fbc93f33c43a500b10c68dc72b3f7f" name="ImageMagick-extra-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="9141f4d2aba97d606991a5f573157e8174273bdaaabfc5e3751d8f0c3b80e8c9" name="ImageMagick-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="6b7656f82876b28856d8b274b2550e6269f36dde57ddf37a4aa2eeeb67af9a01" name="ImageMagick-extra-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="e7b2bcd32e351715822bf433061aa104aa4be731f1bf467dce1ff95a54dee6b2" name="ImageMagick-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="e72920223a095f492333de2812b316ff01bcceae60f01c534eb3d8325a608c75" name="LibVNCServer-debugsource" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="02ff77bba64a63cb566d83d5912216536cbe45de307a58e2252f44fa8d8c17d0" name="LibVNCServer-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update (bsc#1173477)
- added patches
  https://github.com/LibVNC/libvncserver/commit/aac95a9dcf4bbba87b76c72706c3221a842ca433
  + LibVNCServer-CVE-2017-18922.patch</changelog>
</package>
<package pkgid="c05c9806f780f00add9d22afe9ac625bae5c7a00fb9407175181e1690562d314" name="LibVNCServer-debugsource" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="f2d3faff1a8ddd176d2491795a043faedbcf777a9a6e7d4663c927d190ce2413" name="LibVNCServer-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.4.2"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
</package>
<package pkgid="06f713805a261e0f77c405945e940f06d6567a24c2eb50f30c3ec8f773343571" name="LibVNCServer-debugsource" arch="i586">
  <version epoch="0" ver="0.9.10" rel="lp152.9.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="0b95c18f542b5d8931c351e2dfeb7f870da247f1d644474777387f4a1f326ef5" name="LibVNCServer-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.10" rel="lp152.9.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
</package>
<package pkgid="5cd7278332793e5651a8f2c69aad05a3bf87e38f6af14d3b579b5857c9687c60" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="0dd28d6b3e4ee3eb8c582286b66de76acbca06cfbfcb97f17d5e2ddea5195e15" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="fa3cc75182e3046575a022d95a354419050284d5eff5dcaa3f31e183e57e8f31" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="1b6698b1d8a474d559a8c85586b1c7d9974adadec6c995dcc73bdcca7ae7b63c" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="eca9da2c477cfb1c7a4f7329f63501c8581db489f02b077fd903a6c63e77ff8e" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="6159bd137cf4154044e2e11a8e1028f3e17233477f0e48a8b03c19683d7fe9e8" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="38cab4f508379b7dedd94b4b00c829445ce5643d795e026bc2067862206e9b19" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="7c8edcc7559f7224855cb9568b48c2b5f5e1911dc2e6ec1ad05f10b48e139f33" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="12c19ef8c063a0ac20b5065a014da214721056ca3e4ff8be996ca3334142c228" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="01896344272c4994558dc563f10ba48fabbdc8716e89b562ea0aaff18bf0471d" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="4a7d80379c14bb44c5f0ac1e26e7e52701f844f741ad7cf1e48d4cf5241a34a2" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="3e0fb7e703d1885e3c8d8fa8b1dc8db7ca947e5887baa4973ec8907501cae556" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="412ef9e4508b7e2030de7f91c861143041ff450f81a0154b4541b0abbfddea7b" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="b58dbd97d5df52e5701a78c5a9053db0a45b348081e41a646794ceba4a3085c3" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="766f1b68fd7ed4dc06b279940afcddbfcc43f12af4d1798849907235ad268850" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="bcc635014b512cba0132cf812127485c4979dc5c101af5084b41613d68eadc7e" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="1f78d277b579cb0443019e3f1af2f329feed76629fe96b92adc3d6a9ef9e8d2d" name="MozillaFirefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="f349dfadb49aaf8e3bba209a40f173fff99084f29c807778bfeac9abac711713" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.0.1" rel="lp152.2.5.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1571918400">- Resolved issues fixed earlier:
  * [bsc#1104841] Newer versions of firefox have a dependency on GLIBCXX_3.4.20
  * [bsc#1129528] SLES15 - IBM s390-tools-2.1.0 Maintenance Patches (#6)
  * [bsc#1137990] Firefox 60.7 ESR changed the user interface language</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
</package>
<package pkgid="a7303ebff4e12b7a202c49beebca15e10846a1dfc2a57a9a74a99e52dbc8b0e2" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.0.2" rel="lp152.2.9.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572523200">- Add patch mozilla-bmo1504834-part4.patch to fix broken
  tab-titles on s390x</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
</package>
<package pkgid="f16b67858f4deff41c7081eebf6edb1d0887b5ecb8bc123f8e7303a26c29d6cf" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.12.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="3dfc390218c288ce60b6a59940a629ebf54249332d37d79728dbd8f0e623f034" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.1.0" rel="lp152.2.15.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572955200">- Reactivate webRTC for all architectures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574164800">- Add patch mozilla-bmo849632.patch to partially fix broken webGL
  sites on big endian machines (wrong colors)
- Replace source-stamp.txt with tar_stamps
- Reference create-tar.sh by direct commit-hash in the spec-file</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1574769600">- Fix _constraints for ppc64le (bsc#1157652)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575374400">- Firefox Extended Support Release 68.3.0 ESR
  * Changed: Updates to improve performance and stability
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578398400">- Firefox Extended Support Release 68.4.0 ESR
  * Fixed: Various security fixes
  MFSA 2020-02 (bsc#1160305)
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
</package>
<package pkgid="1767a4cfb6932aa2f9e990d60b83e67f928ac7785d0bb44510fc8ab95d4df27c" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.55.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
</package>
<package pkgid="02deaa18f8ca5123dfb81f9182f1748fc6c0b737a347ccd442bc1ae2082d26a4" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.2.0" rel="lp152.2.18.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578571200">- Firefox Extended Support Release 68.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-03 (bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1579608000">- Firefox Extended Support Release 68.4.2 ESR
  * Fixed: Fixed various issues opening files with spaces in
    their path (bmo#1601905, bmo#1602726)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581422400">- Firefox Extended Support Release 68.5.0 ESR
  * Fixed: Various stability and security fixes
- Mozilla Firefox ESR68.5
  MFSA 2020-06 (bsc#1163368)
  * CVE-2020-6796 (bmo#1610426)
    Missing bounds check on shared memory read in the parent
    process
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6799 (bmo#1606596)
    Arbitrary code execution when opening pdf links from other
    applications, when Firefox is configured as default pdf
    reader
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
</package>
<package pkgid="4a71d1f6fd9d9bdf0a434765c237908815167bd081e06f137db5ddce76b0e51c" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.3.0" rel="lp152.2.21.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1583841600">- Firefox Extended Support Release 68.6.0 ESR (bsc#1166238)
  * Fixed: Various stability and security fixes
  MFSA 2020-09 (bsc#1132665)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Firefox 74 and Firefox ESR 68.6</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1584705600">- Added patch: firefox-fips.patch (bsc#1167231)
  * FIPS: MozillaFirefox: allow /proc/sys/crypto/fips_enabled</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
</package>
<package pkgid="c4e6f8be46ca78e460ad6ea3b661b5949dd3f6569ee90658a24ee64d1c74d12e" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.24.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586001600">- Mozilla Firefox 68.6.1esr
  MFSA 2020-11 (boo#1168630)
  * CVE-2020-6819 (bmo#1620818)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728)
    Use-after-free when handling a ReadableStream</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
</package>
<package pkgid="bc60e8e6eab9bed4483cefabfb3e2a7d213ce2132e678f455db95f2ea32adf90" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.4.1" rel="lp152.2.27.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586260800">- Firefox Extended Support Release 68.7.0 ESR
  MFSA 2020-13 (bsc#1168874)
  * CVE-2020-6828 (bmo#1617928)
    Preference overwrite via crafted Intent from malicious
    Android application
  * CVE-2020-6827 (bmo#1622278)
    Custom Tabs in Firefox for Android could have the URI spoofed
  * CVE-2020-6821 (bmo#1625404)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181)
    Out of bounds write in GMPDecodeData when processing large
    images
  * CVE-2020-6825 (bmo#1572541, bmo#1620193, bmo#1620203)
    Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
</package>
<package pkgid="daa68cce79815eabb37097be9b5c8932e87bb21f5c46bd5a59f8c4ae093cbfbe" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.30.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="12556cdeb55fe141fb7dfad81436580619cc46bac587898cbf29b4b5dc436cce" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.33.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588680000">- Firefox Extended Support Release 68.8.0 ESR
  MFSA 2020-17 (bsc#1171186)
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-12388 (bmo#1618911)
    Sandbox escape with improperly guarded Access Tokens
  * CVE-2020-12389 (bmo#1554110)
    Sandbox escape with improperly separated process types
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
</package>
<package pkgid="496072d6985e4d7c7f961ae11791f7b0809d116f808d009474699e7d252bd944" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.34.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1590580800">- Removed %is_opensuse macro from spec file to align builds with
  openSUSE Leap.</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
</package>
<package pkgid="877c6f25e0b32dd4bece3dd8d3da92a4ec49924b3648116b35de8dc515b9c476" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.40.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591099200">- Firefox Extended Support Release 68.9.0 ESR
  * Fixed: Various stability and security fixes
  MFSA 2020-21 (bsc#1172402)
  * CVE-2020-12405 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Firefox 77 and Firefox ESR 68.9
  * CVE-2020-12406 (bmo#1639590)
  * CVE-2020-12410: Memory safety bugs fixed in Firefox 77 and Firefox</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="541f69e19342b409eac644a961bcf90559f0ecbc21f89ec5a692368eecf7f16a" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.43.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593518400">- Firefox Extended Support Release 78.0esr ESR
  * New: Some of the highlights of the new Extended Support
    Release are:
  - Kiosk mode
  - Client certificates
  - Service Worker and Push APIs are now enabled
  - The Block Autoplay feature is enabled
  - Picture-in-picture support
  - View and manage web certificates in about:certificate
    For more information about what's new in the Firefox 78 ESR
    release, see the more detailed release notes at
    support.mozilla.org.
- Add patches to fix big endian problems:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-bmo998749.patch
  * mozilla-bmo1626236.patch
- Add patch to fix broken build on ppc64le
  * mozilla-bmo1512162.patch
- Add patch to add screensharing capability on wayland
  * mozilla-pipewire-0-3.patch
- Rename firefox-fips.patch to mozilla-sandbox-fips.patch
- Removed upstreamed patches:
  * mozilla-cubeb-noreturn.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-s390x-bigendian.patch
  * mozilla-sle12-lower-python-requirement.patch</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
</package>
<package pkgid="56161395891f8697b0526935e31920f351b67816e80ad116b80b683c5c97b163" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.46.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1593604800">- Firefox Extended Support Release 78.0.1 ESR
  * Fixed: Fixed an issue which could cause installed search
    engines to not be visible when upgrading from a previous
    release. (bmo#1649558)
- Mozilla Firefox 78
  MFSA 2020-24 (bsc#1173576)
  * CVE-2020-12415 (bmo#1586630)
    AppCache manifest poisoning due to url encoded character
    processing
  * CVE-2020-12416 (bmo#1639734)
    Use-after-free in WebRTC VideoBroadcaster
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * CVE-2020-12402 (bmo#1631597)
    RSA Key Generation vulnerable to side-channel attack
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates
  * CVE-2020-12422 (bmo#1450353)
    Integer overflow in nsJPEGEncoder::emptyOutputBuffer
  * CVE-2020-12423 (bmo#1642400)
    DLL Hijacking due to searching %PATH% for a library
  * CVE-2020-12424 (bmo#1562600)
    WebRTC permission prompt could have been bypassed by a
    compromised content process
  * CVE-2020-12425 (bmo#1634738)
    Out of bound read in Date.parse()
  * CVE-2020-12426 (bmo#1608068, bmo#1609951, bmo#1631187,
    bmo#1637682)
    Memory safety bugs fixed in Firefox 78</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
</package>
<package pkgid="3bded328c93c9ae6b527cc34385b76e022db731c25b1a76d1151139195918271" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.49.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593691200">- Add specific requirement for libfreetype6 (bsc#1173613)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="48a5e2b50131c897e258de25d99b5400a9bff09da1207b8c8d235a4e99b51ccf" name="MozillaFirefox-debugsource" arch="x86_64">
  <version epoch="0" ver="78.9.0" rel="lp152.2.52.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1594296000">- Mozilla Firefox 78.0.2
  MFSA 2020-28 (bsc#1173948)
  * MFSA-2020-0003 (bmo#1644076)
    X-Frame-Options bypass using object or embed tags
- Firefox Extended Support Release 78.0.2esr ESR
  * Fixed: Security fix
  * Fixed: Fixed an accessibility regression in reader mode
    (bmo#1650922)
  * Fixed: Made the address bar more resilient to data corruption
    in the user profile (bmo#1649981)
  * Fixed: Fixed a regression opening certain external
    applications (bmo#1650162)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1595937600">- Firefox Extended Support Release 78.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-32 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-15655 (bmo#1645204)
    Extension APIs could be used to bypass Same-Origin Policy
  * CVE-2020-15653 (bmo#1521542)
    Bypassing iframe sandbox when allowing popups
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15656 (bmo#1647293)
    Type confusion for special arguments in IonMonkey
  * CVE-2020-15658 (bmo#1637745)
    Overriding file type when saving to disk
  * CVE-2020-15657 (bmo#1644954)
    DLL hijacking due to incorrect loading path
  * CVE-2020-15654 (bmo#1648333)
    Custom cursor can overlay user interface
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1643613,
    bmo#1644839, bmo#1645835, bmo#1646006, bmo#1646787,
    bmo#1649347, bmo#1650811, bmo#1651678)
    Memory safety bugs fixed in Firefox 79 and Firefox ESR 78.1</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596456000">- Fix broken translation-loading (boo#1173991)
  * allow addon sideloading
  * mark signatures for langpacks non-mandatory
  * do not autodisable user profile scopes
- Google API key is not usable for geolocation service any more</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596628800">- Activate ccache
- Parallelize langpack build</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1597406400">- Fix: Do not allow Firefox to use wayland on SLED15-SP0/1
  (bsc#1174420)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598270400">- Added patch: firefox-dev-random-sandbox.patch (bsc#1174284)
  * Firefox tab crash in FIPS mode</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598356800">- Firefox Extended Support Release 78.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.2
  MFSA 2020-38 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626,
    bmo#1656957)
    Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257600">- Try to fix langpack-parallelization by introducing separate
  obj-dirs for each lang (boo#1173986, boo#1167976)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600257601">- Enhance fix for wayland-detection (bsc#1174420)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1600776000">- Firefox Extended Support Release 78.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-43 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Firefox 81 and Firefox ESR 78.3</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1601553600">- Firefox Extended Support Release 78.3.1 ESR (bsc#1176756)
  * Fixed: Fixed legacy preferences not being properly applied
    when set via GPO (bmo#1666836)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1603195200">- Firefox Extended Support Release 78.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-46 (bsc#1177872)
  * CVE-2020-15969 (bmo#1666570, bmo#https://github.com/sctplab/u
    srsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Firefox 82 and Firefox ESR 78.4</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1604923200">- Firefox Extended Support Release 78.4.1 ESR
  * Fixed: Security fix
  MFSA 2020-49 (bsc#1178588)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
</package>
<package pkgid="d108d5184f764f6205c6fd252152dcd079b699cacaabb688d03ed471edd91322" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="460798135235b29672c3eeae048091e35d93ff5c28cda4edd87b8a7b78fe7854" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="e0df8eac1ef7f637bf06d56def84d0362d8c2cbf3f4c6b73bb5ef9b4344c1670" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="2ce6edfe21ad5388fcd5c4e130b0957408d2a781ab318defaf62f6a48508a315" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="860b82bc9711cf7e5aafb941ede9351fd3a5a965225b07a9a6ea90fa3aedbdb1" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="6344247295072681ea0dd06a533edd5ad3c5133d68fd0bfcaa0a701c1984362c" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="f0a36ce5ceeedd905ebcad81bbd603f9c8a010374cfd746bbfead8c654ad76ac" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="9fbfca9931bb0c761c550859b81add741f897cbfafc1a19c16d85aeb146804c9" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="e2dcd0a574ede636d6172b095abf2d96d79a8c2fbeba999b7f0b7e46bd88f39c" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="65b0a414e5932069d2de8110b194adde7dad143e04d9d6a5ec53a62efbeb1d93" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="3fa8045fbe6699d7afd3a8419f9e2cbc877050dfb1cf39464ac9ae12587879d4" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="bc3f4b41ba2308d8e3279b8a6d258e204f648dab09e6ae8c7bb6da8978a3b270" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="ee4dd502209a8fd89353f8d91f1e6ff1bb0aa504aa597cbd3bb11b8571396995" name="MozillaThunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="823d8202126997714c9b8d7a8828cfa86400f3c26bf8085fb5b29cd753af7cda" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="68.10.0" rel="lp152.2.4.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1560513600">- Mozilla Firefox Thunderbird 60.7.1
  MFSA 2019-17 (bsc#1137595)
  * CVE-2019-11703 (bmo#1553820)
    Heap buffer overflow in icalparser.c
  * CVE-2019-11704 (bmo#1553814)
    Heap buffer overflow in icalvalue.c
  * CVE-2019-11705 (bmo#1553808)
    Stack buffer overflow in icalrecur.c
  * CVE-2019-11706 (bmo#1555646)
    Type confusion in icalproperty.c
- No prompt for smartcard PIN when S/MIME signing is used
- Removed obsolete patches:
    [thunderbird-bsc1137595.patch]</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
</package>
<package pkgid="366cec523b1cf3c7aed9eab869629c149c39a1e169b8d3bd58b831b157328b1b" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="68.11.0" rel="lp152.2.7.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1561118400">- Mozilla Firefox Thunderbird 60.7.2
  MFSA 2019-20 (bsc#1138872)
  * CVE-2019-11707 (bmo#1544386)
    Type confusion in Array.pop
  * CVE-2019-11708 (bmo#1559858)
    sandbox escape using Prompt:Open</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
</package>
<package pkgid="c3febabdbdf29dd9da6aa7263596b106b3645a1725648ca608fb08ae8fbfe775" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="68.12.0" rel="lp152.2.10.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1562932800">- Mozilla Firefox Thunderbird 60.8
  MFSA 2019-23 (bsc#1140868)
  * CVE-2019-9811 (bmo#1538007, bmo#1539598, bmo#1563327)
    Sandbox escape via installation of malicious language pack
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 60.8
- Calendar: Problems when editing event times, some related to
  AM/PM setting in non-English locales</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1568289600">- Mozilla Thunderbird 68.1.0
  * Offer to configure Exchange accounts for Office365. A third-
    party add-on is required for this account type.
    IMAP still exists as alternative.
  * Edit tag not working
  * Write window: "Insert &gt; Characters and Symbols" not working
  * Moving/dragging messages from "Search Messages" result
    dialog not working
  * Command line -compose "attachment=" not working
  * Custom views not working
  * Issues with list of content types/actions for incoming attachments
  * "Learn More" links in Error Console not working
  * Visual glitches: Quick Filter Bar tag buttons too tall, missing
    scroll bar on Connection Setting subdialog, LDAP server
    selection after "New", "Edit" and "Delete"
  * Calendar: Parts of CalDAV dialog not working
  MFSA 2019-30
  * CVE-2019-11739 (bmo#1571481, bsc#1150939)
    Covert Content Attack on S/MIME encryption using a crafted
    multipart/alternative message
  * CVE-2019-11746 (bmo#1564449, bsc#1149297)
    Use-after-free while manipulating video
  * CVE-2019-11744 (bmo#1562033, bsc#1149304)
    XSS by breaking out of title and textarea elements using
    innerHTML
  * CVE-2019-11742 (bmo#1559715, bsc#1149303)
    Same-origin policy violation with SVG filters and canvas to
    steal cross-origin images
  * CVE-2019-11752 (bmo#1501152, bsc#1149296)
    Use-after-free while extracting a key value in IndexedDB
  * CVE-2019-11743 (bmo#1560495, bsc#1149298,
    https://w3c.github.io/navigation-timing)
    Cross-origin access to unload event attributes
  * CVE-2019-11740 (bmo#1563133, bmo#1573160, bsc#1149299)
    Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1,
    Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
- Mozilla Thunderbird 68.0
  * based on Firefox ESR 68
  * File link attachments can now be linked to again instead of
    uploading them again
  * Mark all folders of an account as read
  * Run filters periodically. Improved filter logging
  * OAuth2 authentication for Yandex
  * Language packs can now be selected in the Advanced Options.
    Preference intl.multilingual.enabled needs to be set (and possily
    also extensions.langpacks.signatures.required needs to be set to false)
  * Added a policy engine that allows customized Thunderbird deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * TCP keepalive for IMAP protocol
  * Full Unicode support for MAPI interfaces: New support for MAPISendMailW
  * Calendar: Time zone data can now include past and future changes.
    All known time zone changes from 2018 to 2022 are included.
  * Chat: In each conversation an individual spellcheck language can
    be selected now
  MFSA 2019-28
  * CVE-2019-11711 (bmo#1552541)
    Script injection within domain through inner window reuse
  * CVE-2019-11712 (bmo#1543804)
    Cross-origin POST requests can be made with NPAPI plugins by
    following 308 redirects
  * CVE-2019-11713 (bmo#1528481)
    Use-after-free with HTTP/2 cached stream
  * CVE-2019-11714 (bmo#1542593)
    NeckoChild can trigger crash when accessed off of main thread
  * CVE-2019-11729 (bmo#1515342)
    Empty or malformed p256-ECDH public keys may trigger a
    segmentation fault
  * CVE-2019-11715 (bmo#1555523)
    HTML parsing error can contribute to content XSS
  * CVE-2019-11716 (bmo#1552632)
    globalThis not enumerable until accessed
  * CVE-2019-11717 (bmo#1548306)
    Caret character improperly escaped in origins
  * CVE-2019-11719 (bmo#1540541)
    Out-of-bounds read when importing curve25519 private key
  * CVE-2019-11720 (bmo#1556230)
    Character encoding XSS vulnerability
  * CVE-2019-11721 (bmo#1256009)
    Domain spoofing through unicode latin 'kra' character
  * CVE-2019-11730 (bmo#1558299)
    Same-origin policy treats all files in a directory as having
    the same-origin
  * CVE-2019-11723 (bmo#1528335)
    Cookie leakage during add-on fetching across private browsing
    boundaries
  * CVE-2019-11724 (bmo#1512511)
    Retired site input.mozilla.org has remote troubleshooting
    permissions
  * CVE-2019-11725 (bmo#1483510)
    Websocket resources bypass safebrowsing protections
  * CVE-2019-11727 (bmo#1552208)
    PKCS#1 v1.5 signatures can be used for TLS 1.3
  * CVE-2019-11728 (bmo#1552993)
    Port scanning through Alt-Svc header
  * CVE-2019-11710 (bmo#1400563, bmo#1507696, bmo#1510345,
    bmo#1533842, bmo#1535482, bmo#1535848, bmo#1537692,
    bmo#1540590, bmo#1544180, bmo#1547472, bmo#1547760,
    bmo#1548611, bmo#1549768, bmo#1551907)
    Memory safety bugs fixed in Firefox 68 and Thunderbird 68
  * CVE-2019-11709 (bmo#1515052, bmo#1533522, bmo#1539219,
    bmo#1540759, bmo#1547266, bmo#1547757, bmo#1548822,
    bmo#1550498, bmo#1550498)
    Memory safety bugs fixed in Firefox 68, Firefox ESR 60.8, and
    Thunderbird 68
- removed patches that are now upstream
  * mozilla-bmo1375074.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
  * mozilla-bmo1464766.patch
  * mozilla-bigendian_bit_flags_alias.patch
- added patch to make builds reproducible
  * mozilla-bmo1568145.patch
- added a bunch of patches mainly for big endian platforms
  * mozilla-bmo1504834-part1.patch
  * mozilla-bmo1504834-part2.patch
  * mozilla-bmo1504834-part3.patch
  * mozilla-bmo1511604.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1554971.patch
  * mozilla-bmo1573381.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-ppc-altivec_static_inline.patch
- added patches to fix build on armv7:
  * mozilla-bmo1463035.patch
  * mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
- added patch to fix non-return function
  * mozilla-cubeb-noreturn.patch
- added patch to fix aarch64 build:
  * mozilla-fix-aarch64-libopus.patch (bmo#1539737)
- added patch to reduce build-load
  * mozilla-reduce-rust-debuginfo.patch
- added patch to fix locales-build
  * thunderbird-broken-locales-build.patch
- added patch to fix implicit declarations
  * mozilla-openaes-decl.patch
- added samba-patch from Firefox
  * mozilla-ntlm-full-path.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1569585600">- Mozilla Thunderbird 68.1.1
  Bugfixes
  * Issues with attachments in IMAP messages
  * Gmail accounts ignored a non-standard trash folder selection
  * Entering/pasting lists of recipients into the addressing widget or
    mailing list not working reliably, especially when lists contained
    multiple commas or semicolons
  * Edit mailing list not working
  * Various theme fixes, especially dark theme improvements for Calendar
  * Contrast between tag label and background not optimal
  * Account Central pane always loaded at start-up
  * "Config Editor" button not removed if blocked by policy
  * Calendar: Free/busy information in attendees dialog not scrolled
    correctly. Note: Scroll arrows still not behaving correctly
  MFSA 2019-32
  * CVE-2019-11755 (bmo#1240290)
    Spoofing a message author via a crafted S/MIME message</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
</package>
<package pkgid="2c54211c3973735661b4b74f450fb6cf5c1f90e17919a9a0bbe4ba2e85ee8886" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.10.0" rel="lp152.2.41.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
</package>
<package pkgid="2a0ba225d49d08b8b17a7de97762e313632d711a4f7cf439abeb30df3d8ae8b6" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.4.0" rel="lp152.2.13.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571054400">- Mozilla Thunderbird 68.1.2 (bsc#1153879)
  Bugfixes
  * Some attachments couldn't be opened in messages originating from
    MS Outlook 2016
  * Address book import from CSV
  * Performance problem in message body search
  * Ctrl+Enter to send a message would open an attachment if the
    attachment pane had focus
  * Calendar: Issues with "Today Pane" start-up
  * Calendar: Glitches with custom repeat and reminder number input
  * Calendar: Problems with WCAP provider
- add mozilla-bmo1585099.patch to fix build with rust &gt;= 1.38
- add mozilla-fix-top-level-asm.patch to fix LTO build (w/o PGO)
- updated translations-other locale list
- remove kde.js since disabling instantApply breaks extensions and
  is obsolete with the move to HTML views for preferences (boo#1151186)
- Update create-tar.sh (bsc#1152778)
- Update mozilla-bmo1512162.patch to the patch now commited upstream
  * No more -O1 builds for ppc64le necessary
- Deactivate currently useless crashreporter for the last remaining
  arch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
</package>
<package pkgid="32d937778026511f64c2dc1ecea02fafd5527d07b2627e5b00f0464d442a745d" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.4.2" rel="lp152.2.16.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1571832000">- Mozilla Thunderbird 68.2
  * new: Message Display WebExtension API
  * new: Message Search WebExtension API
  * Bugfixes
    Better visual feedback for unread messages when using the
    dark theme
    Various issues when editing mailing lists
    Integration with macOS addressbook and notifications not working
    after introduction of notarization
    Application windows not maintaining their size after restart
    Issues when upgrading from a 32bit version of Thunderbird to a
    64bit version.
  * various security fixes
  MFSA 2019-33/2019-35 (bsc#1154738)
  * CVE-2019-15903 (bmo#1584907)
    Heap overflow in expat library in XML_GetCurrentLineNumber
  * CVE-2019-11757 (bmo#1577107)
    Use-after-free when creating index updates in IndexedDB
  * CVE-2019-11758 (bmo#1536227)
    Potentially exploitable crash due to 360 Total Security
  * CVE-2019-11759 (bmo#1577953)
    Stack buffer overflow in HKDF output
  * CVE-2019-11760 (bmo#1577719)
    Stack buffer overflow in WebRTC networking
  * CVE-2019-11761 (bmo#1561502)
    Unintended access to a privileged JSONView object
  * CVE-2019-11762 (bmo#1582857)
    document.domain-based origin isolation has same-origin-
    property violation
  * CVE-2019-11763 (bmo#1584216)
    Incorrect HTML parsing results in XSS bypass technique
  * CVE-2019-11764 (bmo#1548044, bmo#1558522, bmo#1571223,
    bmo#1573048, bmo#1575217, bmo#1577061, bmo#1578933,
    bmo#1581950, bmo#1583463, bmo#1583684, bmo#1586599,
    bmo#1586845)
    Memory safety bugs fixed in Thunderbird 68.2
- removed upstream patches:
  * mozilla-bmo1512162.patch
  * mozilla-bmo1573381.patch
  * mozilla-bmo1585099.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1572868800">- Mozilla Thunderbird 68.2.1
  * new: A language for the user interface can now be chosen in
    the advanced settings (multilingual UI) (bmo#1590206)
  * fixed: Problem with Google authentication (OAuth2)
    (bmo#1592407)
  * fixed: Selected or unread messages not shown in the correct
    color in the thread pane (message list) under some
    circumstances (bmo#1585765)
  * fixed: When using a language pack, names of standard folders
    weren't localized (bmo#1575512, boo#1149126)
  * fixed: Address book default startup directory in preferences
    panel not persisted (bmo#1591364)
  * fixed: Various visual glitches: Conditions in filter editor
    not high enough, folder location widget not showing folder
    name, problem with menubar customization, add-on home page
    links accumulating, theme issues on Windows 7 (bmo#1590666)
  * fixed: Issues when upgrading from a 32bit version of
    Thunderbird to a 64bit version. Note: If your profile is
    still not recognised, selected it by visiting about:profiles
    in the Troubleshooting Information. (bmo#1587067)
  * fixed: Chat: Extended context menu on Instant messaging
    status dialog (Show Accounts) (bmo#1591506)
- added mozilla-bmo1504834-part4.patch to fix some visual issues
  on big endian platforms</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
</package>
<package pkgid="8ff85e60b62cebfed43cd6a1ab3d0f448b2141ef2b01eac37ce2e79abbd5b2fc" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.5.0" rel="lp152.2.19.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1574769600">- Remove patch thunderbird-broken-locales-build.patch due to
  switch to a different method for building locales
- Added patch mozilla-bmo849632.patch to fix some webgl-problems
  on big endian machines (sync from FF)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1575460800">- Mozilla Firefox Thunderbird 68.3
  * new: Message display toolbar action WebExtension API
    (bmo#1531597)
  * new: Navigation buttons are now available in content tabs,
    for example those opened via an add-on search (bmo#787683)
  * changed: "New email" icon in Windows systray changed from in-
    tray with arrow to envelope (bmo#1594200)
  * fixed: Icons of attachments in the attachment pane of the
    Write window not always correct (bmo#1593280)
  * fixed: Toolbar buttons of add-ons in the menubar not shown
    after startup (bmo#1584160)
  * fixed: LDAP lookup not working when SSL was enabled. LDAP
    search not working when "All Address Books" was selected.
    (bmo#1576364)
  * fixed: Scam link confirmation panel not working (bmo#1596413)
  * fixed: In Write window, the Link Properties dialog wasn't
    showing named anchors in context menu (bmo#1593629)
  * fixed: Calendar: Start-up failed if the application menu is
    not on the calendar toolbars (bmo#1588516)
  * fixed: Chat: Account reordering via drag-and-drop not working
    on Instant messaging status dialog (Show Accounts)
    (bmo#1591505)
  MFSA 2019-37 (bsc#1158328)
  * CVE-2019-17008 (bmo#1546331)
    Use-after-free in worker destruction
  * CVE-2019-13722 (bmo#1580156)
    Stack corruption due to incorrect number of arguments in
    WebRTC code
  * CVE-2019-11745 (bmo#1586176)
    Out of bounds write in NSS when encrypting with a block
    cipher
  * CVE-2019-17009 (bmo#1510494)
    Updater temporary files accessible to unprivileged processes
  * CVE-2019-17010 (bmo#1581084)
    Use-after-free when performing device orientation checks
  * CVE-2019-17005 (bmo#1584170)
    Buffer overflow in plain text serializer
  * CVE-2019-17011 (bmo#1591334)
    Use-after-free when retrieving a document in antitracking
  * CVE-2019-17012 (bmo#1449736, bmo#1533957, bmo#1560667,
    bmo#1567209, bmo#1580288, bmo#1585760, bmo#1592502)
    Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
</package>
<package pkgid="633b828dc69502520a9f1dfe556dfd152f2d5a04ad6e20bb6487877329a89db7" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.6.0" rel="lp152.2.23.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1576584000">- Mozilla Thunderbird 68.3.1
  * changed: In dark theme unread messages no longer shown in
    blue to distinguish from tagged messages (bmo#1596702)
  * changed: Account setup is now using client side DNS MX lookup
    instead of relying on a server. (bmo#1349337)
  * fixed: Searching LDAP address book crashed in some
    circumstances (bmo#1601389)
  * fixed: Message navigation with backward and forward buttons
    did not work in some circumstances (bmo#533504)
  * fixed: WebExtension toolbar icons were displayed too small
    (bmo#1598955)
  * fixed: Calendar: Tasks due today were not listed in bold
    (bmo#1598885)
  * fixed: Calendar: Last day of long-running events was not
    shown (bmo#1572964)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
</package>
<package pkgid="8f624e0c7426bcd57c50f8c418f3a18d5396f317d2dc3c2b897bd7d29be90ad6" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.6.1" rel="lp152.2.26.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1578657600">- Mozilla Thunderbird 68.4.1
  * changed: Various improvements when setting up an account for
    a Microsoft Exchange server: Now offers IMAP/SMTP if
    available, better detection for Office 365 accounts; re-run
    configuration after password change. (bmo#1592258)
  * fixed: Attachments with one or more spaces in their names
    couldn't be opened under some circumstances (bmo#1601905)
  * fixed: After changing view layout, the message display pane
    showed garbled content under some circumstances (bmo#265393)
  * fixed: Tags were lost on messages in shared IMAP folders
    under some circumstances (bmo#1596371)
  * fixed: Various theme changes to achieve "pixel perfection":
    Unread icon, "no results" icon, paragraph format and font
    selector, background of folder summary tooltip (bmo#1605612)
  * fixed: Calendar: Event attendee dialog was not displayed
    correctly (bmo#1604797)
  * fixed: Various security fixes
  MFSA 2020-04 (bsc#1160305, bsc#1160498)
  * CVE-2019-17026 (bmo#1607443)
    IonMonkey type confusion with StoreElementHole and
    FallibleStoreElement
  * CVE-2019-17015 (bmo#1599005)
    Memory corruption in parent process during new content
    process initialization on Windows
  * CVE-2019-17016 (bmo#1599181)
    Bypass of @namespace CSS sanitization during pasting
  * CVE-2019-17017 (bmo#1603055)
    Type Confusion in XPCVariant.cpp
  * CVE-2019-17021 (bmo#1599008)
    Heap address disclosure in parent process during content
    process initialization on Windows
  * CVE-2019-17022 (bmo#1602843)
    CSS sanitization does not escape HTML tags
  * CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605,
    bmo#1601826)
    Memory safety bugs fixed in Thunderbird 68.4.1
- Removed patch that is now upstream: mozilla-bmo1511604.patch
- Added patch to fix broken URL-bar on s390x:
  mozilla-bmo1602730.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
</package>
<package pkgid="ab5a6c1f961a86cf5ae6bc3279e444fba3040caadc06c5ef521bb348c56c8042" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.7.0" rel="lp152.2.29.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1580126400">- Mozilla Thunderbird 68.4.2 (bsc#1162777)
  * changed: Calendar: Task and Event tree colours adjusted for
    the dark theme (bmo#1608344)
  * fixed: Retrieval of S/MIME certificates from LDAP failed
    (bmo#1604773)
  * fixed: Address-parsing crash on some IMAP servers when
    preference mail.imap.use_envelope_cmd was set (bmo#1609690)
  * fixed: Incorrect forwarding of HTML messages caused SMTP
    servers to respond with a timeout (bmo#1222046)
  * fixed: Calendar: Various parts of the calendar UI stopped
    working when a second Thunderbird window opened (bmo#1608407)</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
</package>
<package pkgid="0bd9463315372f8c0ba13f220568c453158f219305638ff0aca88bbfb92762e9" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.7.1" rel="lp152.2.32.1"/>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1581595200">- Mozilla Thunderbird 68.5
  * new: Support for Client Identity IMAP/SMTP Service Extension
    (bmo#1532388)
  * new: Support for OAuth 2.0 authentication for POP3 accounts
    (bmo#1538409)
  * fixed: Status area goes blank during account setup
    (bmo#1593122)
  * fixed: Calendar: Could not remove color for default
    categories (bmo#1584853)
  * fixed: Calendar: Prevent calendar component loading multiple
    times (bmo#1606375)
  * fixed: Calendar: Today pane did not retain width between
    sessions (bmo#1610207)
  * fixed: Various &lt;a href="https://www.mozilla.org/en-
    US/security/known-
    vulnerabilities/thunderbird/#thunderbird68.5"&gt;security
    fixes&lt;/a&gt;
  * unresolved: When upgrading from Thunderbird version 60 to
    version 68, add-ons are not automatically updated during the
    upgrade process. They will however be updated during the add-
    on update check. It is of course possible to reinstall
    compatible add-ons via the Add-ons Manager or via
    addons.thunderbird.net. (bmo#1574183)
  MFSA 2020-07 (bsc#1163368)
  * CVE-2020-6793 (bmo#1608539)
    Out-of-bounds read when processing certain email messages
  * CVE-2020-6794 (bmo#1606619)
    Setting a master password post-Thunderbird 52 does not delete
    unencrypted previously stored passwords
  * CVE-2020-6795 (bmo#1611105)
    Crash processing S/MIME messages with multiple signatures
  * CVE-2020-6797 (bmo#1596668)
    Extensions granted downloads.open permission could open
    arbitrary applications on Mac OSX
  * CVE-2020-6798 (bmo#1602944)
    Incorrect parsing of template tag could result in JavaScript
    injection
  * CVE-2020-6792 (bmo#1609607)
    Message ID calculcation was based on uninitialized data
  * CVE-2020-6800 (bmo#1595786, bmo#1596706, bmo#1598543,
    bmo#1604851, bmo#1605777, bmo#1608580, bmo#1608785)
    Memory safety bugs fixed in Thunderbird 68.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
</package>
<package pkgid="6036686280c167edb2635ef47bc0dd0f18092beaa4b8bde886953853f8023907" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.8.0" rel="lp152.2.35.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1584100800">- Mozilla Thunderbird 68.6
  * new: Thunderbird now displays a popup window when starting up
    on a new profile (bmo#1590036)
  * changed: Thunderbird now provides partial updates resulting
    in smaller downloads (bmo#1410512)
  * fixed: Searching in message bodies led to false negatives
    under some circumstances in quoted-printable encoded HTML
    bodies (bmo#1614796)
  * fixed: "Get New Messages for All Accounts" not working for
    OAuth2-authenticated IMAP accounts (bmo#1593611)
  * fixed: Various security fixes
  MFSA 2020-10 (bsc#1166238)
  * CVE-2020-6805 (bmo#1610880)
    Use-after-free when removing data about origins
  * CVE-2020-6806 (bmo#1612308)
    BodyStream::OnInputStreamReady was missing protections
    against state confusion
  * CVE-2020-6807 (bmo#1614971)
    Use-after-free in cubeb during stream destruction
  * CVE-2020-6811 (bmo#1607742)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2019-20503 (bmo#1613765)
    Out of bounds reads in sctp_load_addresses_from_init
  * CVE-2020-6812 (bmo#1616661)
    The names of AirPods with personally identifiable information
    were exposed to websites with camera or microphone permission
  * CVE-2020-6814 (bmo#1592078, bmo#1604847, bmo#1608256,
    bmo#1612636, bmo#1614339)
    Memory safety bugs fixed in Thunderbird 68.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1586865600">- Mozilla Thunderbird 68.7.0
  * new: MailExtensions: Raw message source available to
    MailExtensions (bmo#1525274)
  * changed: MailExtensions: messages.update function extended to
    mark messages as junk or not junk (bmo#1598332)
  * changed: MailExtensions: browser.compose.begin functions no
    longer expand mailing lists (bmo#1612480)
  * fixed: Various improvements to account setup when connecting
    to an Exchange server (bmo#1598861)
  * fixed: Thread collapsed when opening news message in a new
    window (bmo#1526765)
  * fixed: Addons not automatically updated to compatible version
    after upgrade from Thunderbird 60 (bmo#1574183)
  * fixed: Updating addons did not prompt when requesting new
    permissions (bmo#1620861)
  * fixed: Extra recipients panel not keyboard-accessible
    (bmo#1612717)
  * fixed: Accessibility: Status bar was not detected by
    screenreaders (bmo#1621287)
  * fixed: MailExtensions: messages.query by folder name did not
    require accountsRead permission (bmo#1625793)
  * fixed: Calendar: Invitations with embedded null bytes did not
    always decode correctly (bmo#1623896)
  * fixed: Calendar: Cancelled events didn't show with a line-
    through (bmo#1621210)
  * fixed: Various security fixes
  MFSA 2020-14 (bsc#1168874)
  In general, these flaws cannot be exploited through email in
  Thunderbird because scripting is disabled when reading mail, but
  are potentially risks in browser or browser-like contexts.
  * CVE-2020-6819 (bmo#1620818, bsc#1168630)
    Use-after-free while running the nsDocShell destructor
  * CVE-2020-6820 (bmo#1626728, bsc#1168630)
    Use-after-free when handling a ReadableStream
  * CVE-2020-6821 (bmo#1625404, bsc#1168874)
    Uninitialized memory could be read when using the WebGL
    copyTexSubImage method
  * CVE-2020-6822 (bmo#1544181, bsc#1168874)
    Out of bounds write in GMPDecodeData when processing large images
  * CVE-2020-6825 (bmo#1572541,bmo#1620193,bmo#1620203, bsc#1168874)
    Memory safety bugs fixed in Thunderbird 68.7.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
</package>
<package pkgid="22aa6aa012d65f7f3caef08667226f9f9cad3e4d60f3321bee1163c0203afd84" name="MozillaThunderbird-debugsource" arch="x86_64">
  <version epoch="0" ver="78.9.1" rel="lp152.2.38.1"/>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1588766400">- Mozilla Thunderbird 68.8.0
  * fixed: Account Manager: text fields were too small in some
    cases (bmo#1616387)
  * fixed: Account Manager: Authentication method did not update
    when selecting an SMTP server (bmo#1631437)
  * fixed: Links with embedded credentials did not open on
    Windows (bmo#1609451)
  * fixed: Messages were sometimes sent with a badly formed
    address when filled from the address book (bmo#1629842)
  * fixed: Accessibility: Screen readers were reporting too many
    activities from the status bar (bmo#1628891)
  * fixed: MailExtensions: Setting IMAP messages as read with
    browser.messages.updated failed to persist (bmo#1631184)
  * fixed: Various security fixes
  MFSA 2020-18 (bsc#1171186)
  * CVE-2020-12397 (bmo#1617370)
    Sender Email Address Spoofing using encoded Unicode
    characters
  * CVE-2020-12387 (bmo#1545345)
    Use-after-free during worker shutdown
  * CVE-2020-6831 (bmo#1632241)
    Buffer overflow in SCTP chunk input validation
  * CVE-2020-12392 (bmo#1614468)
    Arbitrary local file access with 'Copy as cURL'
  * CVE-2020-12393 (bmo#1615471)
    Devtools' 'Copy as cURL' feature did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2020-12395 (bmo#1595886, bmo#1611482, bmo#1614704,
    bmo#1624098, bmo#1625749, bmo#1626382, bmo#1628076,
    bmo#1631508)
    Memory safety bugs fixed in Thunderbird 68.8.0</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1590408000">- Mozilla Thunderbird 68.8.1
  * fixed: IMAP stability improvements (bmo#1586494)
  * fixed: HTML tags in IRC topic changes were rendered
    incorrectly (bmo#1607097)
  * fixed: MailExtensions: Websockets could not be used
    (bmo#1627649)
- Use a symbolic icon from branding internals</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1591272000">- Mozilla Thunderbird 68.9.0
  * fixed: Custom headers added for searching or filtering could
    not be removed (bmo#1631577)
  * fixed: Calendar: Today Pane updated prior to loading all data
    (bmo#1635613)
  * fixed: Stability improvements (bmo#1625677)
  * fixed: Various security fixes
  MFSA 2020-22 (bsc#1172402)
  * CVE-2020-12405 (bmo#1631618)
    Use-after-free in SharedWorkerService
  * CVE-2020-12406 (bmo#1639590)
    JavaScript Type confusion with NativeTypes
  * CVE-2020-12410 (bmo#1619305, bmo#1632717)
    Memory safety bugs fixed in Thunderbird 68.9.0
  * CVE-2020-12398 (bmo#1613623)
    Security downgrade with IMAP STARTTLS leads to information
    leakage</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1593777600">- Mozilla Thunderbird 68.10.0
  * fixed: Chat: Topics displayed some characters improperly
    (bmo#1644024)
  * fixed: Calendar: Filtering tasks did not work when
    "Incomplete Tasks" was selected (bmo#1593711)
  MFSA 2020-26 (bsc#1173576)
  * CVE-2020-12417 (bmo#1640737)
    Memory corruption due to missing sign-extension for ValueTags
    on ARM64
  * CVE-2020-12418 (bmo#1641303)
    Information disclosure due to manipulated URL object
  * CVE-2020-12419 (bmo#1643874)
    Use-after-free in nsGlobalWindowInner
  * CVE-2020-12420 (bmo#1643437)
    Use-After-Free when trying to connect to a STUN server
  * MFSA-2020-0001 (bmo#1606610)
    Automatic account setup leaks Microsoft Exchange login
    credentials
  * CVE-2020-12421 (bmo#1308251)
    Add-On updates did not respect the same certificate trust
    rules as software updates</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1596196800">- Mozilla Thunderbird 68.11
  * fixed: FileLink attachments included as a link and file when
    added from a network drive via drag &amp; drop (bmo#793118)
  * fixed: Various security fixes
  MFSA 2020-35 (bsc#1174538)
  * CVE-2020-15652 (bmo#1634872)
    Potential leak of redirect targets when loading scripts in a
    worker
  * CVE-2020-6514 (bmo#1642792)
    WebRTC data channel leaks internal address to peer
  * CVE-2020-6463 (bmo#1635293)
    Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
  * CVE-2020-15659 (bmo#1550133, bmo#1633880, bmo#1646787,
    bmo#1650811)
    Memory safety bugs fixed in Thunderbird 68.11</changelog>
  <changelog author="Charles Robertson &lt;cgrobertson@suse.com&gt;" date="1598875200">- Mozilla Thunderbird 68.12
  * fixed: Various security vulnerabilities
  MFSA 2020-40 (bsc#1175686)
  * CVE-2020-15663 (bmo#1643199)
    Downgrade attack on the Mozilla Maintenance Service could
    have resulted in escalation of privilege
  * CVE-2020-15664 (bmo#1658214)
    Attacker-induced prompt for extension installation
  * CVE-2020-15669 (bmo#1656957)
    Use-After-Free when aborting an operation</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1602676800">- Mozilla Thunderbird 78.3.2 (bsc#1176899)
  * OpenPGP: Improved support for encrypting with subkeys
  * OpenPGP: Encrypted messages with international characters were
    sometimes displayed incorrectly
  * Single-click deletion of recipient pills with middle mouse
    button restored
  * Searching an address book list did not display results
  * Dark mode, high contrast, and Windows theming fixes
- Mozilla Thunderbird 78.3.1
  * fix crash in nsImapProtocol::CreateNewLineFromSocket (bmo#1667120)
- Mozilla Thunderbird 78.3.0
  MFSA 2020-44 (bsc#1176756)
  * CVE-2020-15677 (bmo#1641487)
    Download origin spoofing via redirect
  * CVE-2020-15676 (bmo#1646140)
    XSS when pasting attacker-controlled data into a
    contenteditable element
  * CVE-2020-15678 (bmo#1660211)
    When recursing through layers while scrolling, an iterator
    may have become invalid, resulting in a potential use-after-
    free scenario
  * CVE-2020-15673 (bmo#1648493, bmo#1660800)
    Memory safety bugs fixed in Thunderbird 78.3
- requires NSPR &gt;= 4.25.1
- removed obsolete thunderbird-bmo1664607.patch
- Mozilla Thunderbird 78.2.2
  https://www.thunderbird.net/en-US/thunderbird/78.2.2/releasenotes
- added thunderbird-bmo1664607.patch required for builds w/o updater
  (boo#1176384)
- Mozilla Thunderbird 78.2.1 (bsc#1174230)
  * based on Mozilla's 78 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/78.0/releasenotes/#whatsnew
  * built-in OpenPGP support (enigmail neither required nor supported)
- added platform patches:
  * mozilla-s390x-skia-gradient.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1512162.patch
  * mozilla-bmo1626236.patch
  * mozilla-bmo998749.patch
  * mozilla-sandbox-fips.patch
  * thunderbird-remove-python2.patch
- removed obsolete platform patches
  * mozilla-s390-bigendian.patch
  * mozilla-nestegg-big-endian.patch
  * mozilla-openaes-decl.patch
  * mozilla-cubeb-noreturn.patch</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603108800">- Mozilla Thunderbird 78.3.3
  * OpenPGP: Improved support for encrypting with subkeys
    (bmo#1665497)
  * OpenPGP message status icons were not visible in
    message header pane (bmo#1670067)
  * OpenPGP Key Manager was missing from Tools menu on
    macOS (bmo#1662279)
  * Creating a new calendar event did not require an event
    title (bmo#1663303)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1603368000">- Mozilla Thunderbird 78.4
  * new: MailExtensions: browser.tabs.sendMessage API added
    (bmo#1641576)
  * new: MailExtensions: messageDisplayScripts API added
    (bmo#1504475)
  * changed: Yahoo and AOL mail users using password
    authentication will be migrated to OAuth2 (bmo#1606339)
  * changed: MailExtensions: messageDisplay APIs extended to
    support multiple selected messages (bmo#1617461)
  * changed: MailExtensions: compose.begin functions now support
    creating a message with attachments (bmo#1662018)
  * fixed: Thunderbird could freeze when updating global search
    index (bmo#1669872)
  * fixed: Multiple issues with handling of self-signed SSL
    certificates addressed (bmo#1590474)
  * fixed: Recipient address fields in compose window could
    expand to fill all available space (bmo#1666463)
  * fixed: Inserting emoji characters in message compose window
    caused unexpected behavior (bmo#1638874)
  * fixed: Button to restore default folder icon color was not
    keyboard accessible (bmo#1663075)
  * fixed: Various keyboard navigation fixes (bmo#1667567)
  * fixed: Various color-related theme fixes (bmo#1668410)
  * fixed: MailExtensions: Updating attachments with
    onBeforeSend.addListener() did not work (bmo#1662015)
  MFSA 2020-47 (bsc#1177977)
  * CVE-2020-15969 (bmo#1666570, https://github.com/sctplab/
    usrsctp/commit/ffed0925f27d404173c1e3e750d818f432d2c019)
    Use-after-free in usersctp
  * CVE-2020-15683 (bmo#1576843, bmo#1656987, bmo#1660954,
    bmo#1662760, bmo#1663439, bmo#1666140)
    Memory safety bugs fixed in Thunderbird 78.4</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605009600">- Mozilla Thunderbird 78.4.2
  MFSA 2020-49 (bsc#1178611)
  * CVE-2020-26950 (bmo#1675905)
    Write side effects in MCallGetProperty opcode not accounted
    for
- Mozilla Thunderbird 78.4.1
  * new: Thunderbird prompts for an address to use when starting
    an email from an address book entry with multiple addresses
    (bmo#84028)
  * fixed: Searching global search results did not work
    (bmo#1664761)
  * fixed: Link location was not focused by default when adding a
    hyperlink in message composer (bmo#1670660)
  * fixed: Advanced address book search dialog was unusable
    (bmo#1668147)
  * fixed: Encrypted draft reply emails lost "Re:" prefix
    (bmo#1661510)
  * fixed: Replying to a newsgroup message did not open the
    compose window (bmo#1672667)
  * fixed: Unable to delete multiple newsgroup messages
    (bmo#1657988)
  * fixed: Appmenu displayed visual glitches (bmo#1636243)
  * fixed: Visual glitches when selecting multiple messages in
    the message pane and using Ctrl+click (bmo#1671800)
  * fixed: Switching between dark and light mode could lead to
    unreadable text on macOS (bmo#1668989)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605528000">- Mozilla Thunderbird 78.4.3
  * fixed: User interface was inconsistent when switching from
    the default theme to the dark theme and back to the default
    theme (bmo#1659282)
  * fixed: Email subject would disappear when hovering over it
    with the mouse when using Windows 7 Classic theme
    (bmo#1675970)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1605787200">- Mozilla Thunderbird 78.5.0
  * new: OpenPGP: Added option to disable attaching the public
    key to a signed message (bmo#1654950)
  * new: MailExtensions: "compose_attachments" context added to
    Menus API (bmo#1670822)
  * new: MailExtensions: Menus API now available on displayed
    messages (bmo#1670825)
  * changed: MailExtensions: browser.tabs.create will now wait
    for "mail-delayed-startup-finished" event (bmo#1674407)
  * fixed: OpenPGP: Support for inline PGP messages improved
    (bmo#1672851)
  * fixed: OpenPGP: Message security dialog showed unverified
    keys as unavailable (bmo#1675285)
  * fixed: Chat: New chat contact menu item did not function
    (bmo#1663321)
  * fixed: Various theme and usability improvements (bmo#1673861)
  * fixed: Various security fixes
  MFSA 2020-52 (bsc#1178894)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Thunderbird 78.5</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1606910400">- Mozilla Thunderbird 78.5.1
  * new: OpenPGP: Added option to disable email subject
    encryption (bmo#1666073)
  * changed: OpenPGP public key import now supports multi-file
    selection and bulk accepting imported keys (bmo#1665145)
  * changed: MailExtensions: getComposeDetails will wait for
    "compose-editor-ready" event (bmo#1675012)
  * fixed: New mail icon was not removed from the system tray at
    shutdown (bmo#1664586)
  * fixed: "Place replies in the folder of the message being
    replied to" did not work when using "Reply to List"
    (bmo#522450)
  * fixed: Thunderbird did not honor the "Run search on server"
    option when searching messages (bmo#546925)
  * fixed: Highlight color for folders with unread messages
    wasn't visible in dark theme (bmo#1676697)
  * fixed: OpenPGP: Key were missing from Key Manager
    (bmo#1674521)
  * fixed: OpenPGP: Option to import keys from clipboard always
    disabled (bmo#1676842)
  * fixed: The "Link" button on the large attachments info bar
    failed to open up Filelink section in Options if the user had
    not yet configured Filelink (bmo#1677647)
  * fixed: Address book: Printing members of a mailing list
    resulted in incorrect output (bmo#1676859)
  * fixed: Unable to connect to LDAP servers configured with a
    self-signed SSL certificate (bmo#1659947)
  * fixed: Autoconfig via LDAP did not work as expected
    (bmo#1662433)
  * fixed: Calendar: Pressing Ctrl-Enter in the new event dialog
    would create duplicate events (bmo#1668478)
  * fixed: Various security fixes
  MFSA 2020-53 (bsc#1179530)
  * CVE-2020-26970 (bmo#1677338)
    Stack overflow due to incorrect parsing of SMTP server
    response codes</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="Martin Sirringhaus &lt;martin.sirringhaus@suse.com&gt;" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
</package>
<package pkgid="2d660d52ab73e1a2e5e68a1afc60bb6ad517d4b1ee7da9a2e31045a28eef1cac" name="NetworkManager-debuginfo" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="2902e8aeae61de5e2bad471b244d184f0c9fb20c6f65ddeee139949967d8ac5d" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="8e02d434288ec79190bba33ba5d529a935f8da881da4b17055bd07ab2d87c87b" name="NetworkManager-debuginfo" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="8878d49b67865a791521a26b63610ee105b079e1c31ff84eccdf216f918bd89f" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="32ea297ffb0226df9cebe4a9312d983d33a520c4667dc795b11c5be0da87762c" name="NetworkManager-debugsource" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="b246f7068a0acd49aef07b3faad4bf99ee28203c6331b7cc1d9e13b92c12648c" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1564488000">- Update to version 1.18.2(bsc#1138213):
  + Add support for policy routing rules.
  + Add support for VLAN filtering for Linux bridge.
  + Support ieee-802-1 and ieee-802-3 LLDP TLVs.
  + Allow large MTU sizes for infiniband/IPoIB connection profiles.
  + Improve nmcli's handling of list options for connection properties.
  + Add compatibility with out-of-tree WireGuard module on 5.2 kernels
  + Fix parsing of BOOTIF= variables in initrd.
  + Accept numeric IPv4 prefix in place of a mask when parsing a command line
    in initrd.
  + Don't check connectivity of unconfigured devices.
  + Fix PKCS#12 handling in the ifcfg-rh plugin.
  + Avoid waiting for udev to see software devices created by NetworkManager.
  + Don't attempt to stop management daemon for Team devices created
    externally to NetworkManager.
  + Use FQDN for persistent hostname on Slackware.
  + Restore IPv6 configuration of a device when its link goes back up.
  + Fix management status of software devices on system suspend.
  + Make nmcli not print certificate blobs if --show-secrets is not used.
  + Fix MTU reapply.
- Drop 0001-Update-connectivity-value-on-device-removal.patch:
  Fixed upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.18.4:
  + Improve handling of externally added policy routing rules and
    for rules that are taken over after a restart of NetworkManager
    service.
  + Fix taking over OVS devices after restart of NetworkManager.
  + Bugfix reapplying IP configuration while activating.
  + Allow reapplying Wi-Fi profile when seen-bssids changes.
  + Various other bugfixes for minor issues and memory leaks.
  + Various build and test fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622404">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
</package>
<package pkgid="775be6f4e4ba75ba6867a0eff50b08933ba298166aa4c20ae1f73ed858063d87" name="NetworkManager-debugsource" arch="i586">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="9ce66594817aab840388fa142741e04c22d39096dd1dfe7e3a6b62df4789dc1c" name="NetworkManager-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.10" rel="lp152.2.6.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622400">- Update to version 1.20.0:
  + The libnm-glib library, deprecated in favor of libnm since
    NetworkManager 1.0, and disabled by default since
    NetworkManager 1.12, has now been removed.
  + The DHCP client now defaults to "internal". The default can be
    overriden at build time by using the --with-config-dhcp-default
    option of the configure script or at run time by setting the
    main.dhcp option in the configuration file.
  + Added support for configuring fq_codel line discipline and
    mirred action.
  + Added a possibility for distributions to ship dispatcher
    scripts in /usr/lib.
  + Drop deprecated setting "main.monitor-connection-files" in
    NetworkManager.conf. This setting now has no more effect and
    was disabled by default for a long time. Instead, after
    changes, load files explicitly with `nmcli connection load` or
    `nmcli connection reload`.
  + Rework parsing team JSON config in libnm and stricter validate
    settings. With this, NetworkManager rejects settings that it
    considers invalid while still allowing setting arbitrary JSON
    config directly.
  + Drop ibft settings plugin. This functionality is now covered by
    using nm-initrd-generator from initrd to pre-generate in-memory
    profiles.
  + Support "suppress_prefixlength" attribute for policy routing
    rules.
  + This is what wg-quick uses for the "Improved Rule-based
    Routing" solution, and the user can now manually configure such
    policy routing rules.
  + Support "wireguard.ip4-auto-default-route" and
    "wireguard.ip6-auto-default-route". This automatically
    implements the "Improved Rule-based Routing" of wg-quick to
    help avoiding routing loops when setting the default-route on
    the WireGuard interface. Note that this is now enabled by
    default, so there is a change in behavior if your WireGuard
    connection profiles from before had a default-route (/0) in
    allowed-ips.
  + Rework implementation of settings plugins and how profiles are
    presisted to disk. This is a large internal refactoring of the
    settings plugins that allows to migrate a connection profile
    between plugins.
  + In-memory profiles are now only handled by keyfile plugin and
    will also be persisted to /run directory. This allows to
    restart NetworkManager without loosing these profiles and it
    provides a file-system based API for creating in-memory
    profiles.
  + Keyfile plugin now supports a read-only directory of profiles
    under directory "/usr/lib/NetworkManager/system-connections".
    Such profiles still can be modified and deleted via D-Bus,
    which results in writing profiles to /etc or /run that shadow
    the read-only files.
  + Add new D-Bus method AddConnection2() that allows to block
    autoconnect of the profile at the moment when creating the
    profile. Also add support for this API to libnm.
  + Add flag "no-reapply" to Update2() D-Bus method. Normally, when
    a connection profile gets modified, this only changes the
    profile itself. When the profile is currently activated on a
    device, then the device's configuration does not update before
    the profile is fully re-activated or Reapply on the device is
    called. There is an exception to this: the "connection.zone"
    and the "connection.metered" properties take effect
    immediately. The "no-reapply" flag allows suppressing to
    reapply any properties, so that no changes take effect
    automatically. The purpose is to really only modify the profile
    itself without changes to the runtime configuration of the
    device.
  + Add "ipv6.method=disabled" to disable IPv6 on a device, like
    also possible for IPv4. Until now, the users could only set
    "ipv6.method=ignore" which means the users are free to set IPv6
    related sysctl values themselves.
  + Added support for Wi-Fi Mesh network.
- Stop passing --with-libnm-glib to configure, feature was dropped.
- Drop sub-packages libnm-util2, libnm-glib4 and libnm-glib-vpn1
  and obsolete them from the main package (also in baselibs.conf).
- Drop typelib-1_0-NetworkManager-1_0 and typelib-1_0-NMClient-1_0.
- Rebase some patches with quilt.
- Disable nm-add-CAP_SYS_ADMIN-permission.patch: Needs rework or
  possibly dropping as the ibft plugin is dropped.
- Pass --with-iwd=yes to configure, build experimental IWD backend
  support. Not recommended for endusers, only for testers willing
  to take the risk of broken wifi with no support from distro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622401">- Update to version 1.20.2:
  + Don't ask wpa_supplicant to attempt to enable FT if the
    interface doesn't support it.
  + Various bug fixes and improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622402">- Add nm-fix-gtk-doc.patch: Fix build with gtk-doc 1.32 and newer.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570622403">- Update to version 1.20.4:
  + Fix crash related to Wi-Fi-P2P.
  + Support rd.znet option in initrd generator to support s390.
  + Fix not creating default-wired-connection when a suitable
    profile exists which is not tied to the device by
    interface-name.
  + tui: support WPA3-Personal (SAE).
  + Fixes for OLPC Mesh Wi-Fi.
  + Various bug fixes. Notably, fix unit test and build issues.
- Drop nm-fix-gtk-doc.patch: Fixed upstream.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1572523200">- Drop NetworkNanager-client recommends: this is no longer needed,
  as NM itself ships a frontend by now (nmtui). If a DE has a
  better way to manage NM (by means of applets or other way of
  integration) it is up to the DE to depend on the applets.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1573041600">- Update to version 1.20.6:
  + Fix updating agent-owned VPN secrets.
  + Adjust IWD support to new D-Bus path of IWD 1.0.
  + Introduce an 'optional' property in the 802-1x setting to
    allow the activation to proceed in case of missing
    authenticator.
  + Fix ARP announcements for IP addresses configured on
    interfaces.
  + Use proper interface when adding s390 specific details in
    initrd generator.
  + Don't disable PMF on Wi-Fi connections using SAE.
  + Properly handle uint16 property types in libnm.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 1.20.8:
  + Fix handling of system CA certificates in the ifcfg parser.
  + Handle ReachableTime and RetransTimer from IPv6 Router
    Advertisements.
  + Fixed setting of MTU according to its parent device for some
    device types.
  + Various fixes for the initramfs configuration genertor.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576584000">- Update to version 1.22.0:
  + Drop support for BlueZ 4. BlueZ 5 was released in 2012 and
    should nowadays be available everywhere.
  + DHCP: switch "internal" DHCPv4 plugin from code based on
    systemd to use nettools' n-dhcp4 library.
  + Add support for "scope" attribute for IPv4 routes.
  + Add support for specifying IAID and FQDN flags for DHCP
    request.
  + Add a '802-1x.optional' property to consider the wired 802.1X
    authentication as optional.
  + Use the Network Cost Wi-Fi information element to determine
    metered device state.
  + Support main.auth-polkit=root-only setting to disable PolicyKit
    use and restrict authorization to root user.
  + core: declare "startup complete" when device reaches
    "connected" state, even if IP addressing methods did not yet
    fully complete. This changes behavior for unblocking
    "NetworkManager-wait-online.service", and
    "network-online.target" earlier. If this causes issues in your
    setup, you may need to configure "ipv4.may-fail=no" or
    "ipv6.may-fail=no", which delays reaching "connected" state for
    the address family accordingly.
  + libnm: hide NMObject and NMClient typedefs from header files.
    This prevents the user from subclassing these types and is an
    ABI change (in the unlikely case that a user was subclassing
    the types, which is no longer supported).
  + libnm: retire deprecated WiMAX API NMDeviceWimax and
    NMWimaxNsp. WiMAX support was removed from NetworkManager in
    version 1.2 (2016) and no such type instances would have been
    created by NMClient for a while now.
  + Deprecate synchronous API for D-Bus calls in libnm. We don't
    remove libnm API so you are free to continue using it. But
    tells you that using it might be a bad idea.
  + libnm: heavily internal rework NMClient. This slims down libnm
    and makes the implementation more efficient. NMClient should
    work now well with a separate GMainContext.
  + Add `nmcli general reload` subcommand to reload NetworkManager
    configuration and DNS settings.
  + nm-cloud-setup: add new tool for automatically configuring
    NetworkManager in cloud. This is still experimental and
    currently only EC2 and IPv4 is supported.
  + Add new NetworkManager logo to "contrib/art/logo".
  + Various bug fixes and improvements.
- Disable networkmanager-checks-po.patch: Needs rebase.
- Add new nm-cloud-setup.service to pre/post/preun/postun calls.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1577188800">- Update to version 1.22.2:
  + Fix multiple issues in the internal DHCP client, including
    wrong parsing of search domains and classless routes options,
    and failures in obtaining and renewing the lease with certain
    server configurations.
  + Export NM_CAPABILITY_OVS capability on D-Bus and in libnm to
    indicate that the OVS plugin is loaded.
  + Fix libnm annotations for nm_sriov_vf_get_vlan_ids() to allow
    the usage of the function through GObject introspection.</changelog>
  <changelog author="Lorenz H&#xFC;depohl &lt;dev@stellardeath.org&gt;" date="1578484800">- Fix 'nfs' dispatcher script
  It was checking for an enabled unit 'nfs.service' - which does not
  exist (anymore?). Switched to a check for an enabled unit
  'nfs-client.target'</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- Update to version 1.22.4:
  + Fix behavior of internal DHCP client when the server sends a
    NAK.
  + Support 31-bit prefixes on IPv4 point-to-point links according
    to RFC 3021.
  + Fix memory leak parsing RequestScan D-Bus method arguments.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1580472000">- Update to version 1.22.6:
  + Various fixes for the internal DHCP client.
  + Slave devices now do not get created/activated if master is
    missing.
  + Fixed 'startup-complete' bug where NetworkManager would reach
    the network-online.target even when not all the connections had
    been tried.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1580904000">- Add -fcommon to CFLAGS. This is currently being done upstream
  (boo#1160381).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 1.22.8:
  + Added configuration option to customize IPv6 RA timeout.
  + Internal DHCP client will now request a lease renewal using the
    previously obtained IP address when expired.
  + Removed length limitation for OVS Bridge, Patches and
    Interfaces (only Patch types) names.
  + Fixed initialization of 'secs' DHCP header field, this caused
    some DHCP relays to drop packets.
  + Fixed failure when creating team interfaces using 'nmstate'.
  + Various bug fixes and improvements.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1583928000">- Modify nfs script (boo#1164642)
  * Also mount nfs4 shares
  * Ignore nfs or nfs4 shares in case if the noauto option is set</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584014400">- Update to version 1.22.10:
  + core: periodically cleanup stale device state files from /run.
  + dhcp: fix crash in nettools client.
  + bond: fixed the validation of the miimon option.
  + Various minor bug fixes and improvements.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1593691200">- Rebase nm-add-CAP_SYS_ADMIN-permission.patch.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1616673600">- Add NM-restore-MAC-on-release-only-when-cloned.patch: bond:
  restore MAC on release only when there is a cloned MAC address
  (glfo#NetworkManager/NetworkManager!775, bsc#1183967).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1617969600">- Add nm-fix-dhcp-client-timeout.patch: Better handle dhclient's
  timeout so that a recorded lease can be used when dhcp server
  is down(glfo#NetworkManager/NetworkManager!811, bsc#1183202).
- Modified NetworkManager.conf: Use dhclient as the default dhcp
  client(glfo#NetworkManager/NetworkManager!811, bsc#1183202).</changelog>
</package>
<package pkgid="0603ea19cc53dca52b40a105946ca873b3f33ff78606d8e4f496d483bd43ace6" name="OpenIPMI-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="74a474d81566e75591b5bfb486099d26aa394a386081598a365711973f5939f7" name="OpenIPMI-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="dd49cb75b4280143298cd73311dc6be2e7824cf6d7f9a2ef242d24f0c7f7a3a2" name="OpenIPMI-debugsource" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="443609657e8fd8526cfca7cbf4d4bcd5868ac062de662c28ca8223de0b0a184f" name="OpenIPMI-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="b0e6cfe49e0efb3e315865c4fba7c54de1bf57a3cde3cc76f4db59273f545f2c" name="OpenIPMI-python-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="8c7c886de77f22b5d882edb1015d236c7be5a4b834a8f3f7510788ea6cd9f427" name="OpenIPMI-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.25" rel="lp152.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1414238400">- Use systemd instead of sysvinit
  + Add ipmi.service
  + Add openipmi-helper to keep capabilities of sysvinit script
  + Add systemd related macros
- Remove obsolete/depreciated macros</changelog>
  <changelog author="dimstar@opensuse.org" date="1416398400">- Replace systemd BuildRequires with pkgconfig(systemd): we do not
  require the full installation / dep chain of systemd.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419681600">- fix bashisms in openipmi-helper script</changelog>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1615377600">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security
  [bsc#1183178, OpenIPMI.spec]</changelog>
</package>
<package pkgid="e231f07ee65d8e310ee637c45c590500720380507249f69bc77c8c93680f02e1" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="f89b57ea7131b21a4d1bc98ebe49894e85b235b1ab0c31709e67eddf8e2d1143" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="e0c930ca59ab96274701ed55e1278beb94c2be8b3f32631e666c94e84ff5dedf" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="d6aa2e8260e523e8a75f73145fe697f375b4c1c75e0527e7e54d3d88be2c12a1" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="049648eae9fbb7e0966f3948702b2df0dce7f6e75065405f834db1a15cf83cd7" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="42eb2228203ef226bc1006e8d7f0985d1f2b74dfe9835eeaca5370f5b3058140" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="e8b597e41354ca1cf6fe5da95e194e556e9b627f386e325b043eaac36d20ae64" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="6df1663288993c5120e42f3b85f2007c16495a21c697104aa8a694b2a3a2c099" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="4f9169d13cacb84b0cfbb28d3a9990afced99048dd743b796edcda2cc875f7ee" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="d61060123d84d010c6428d83cf01f35de909fe25515bbeb1c3a630d9ecf5ff49" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="a7fa7da2277961aab6ef89a604c59bbc49aa8b11bded95df1a5bd8d64e13552e" name="PackageKit-backend-dnf-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="3ef2b964b8e3af32c07e6a5fb274d4d2e9430956de90da42d9ab713375d3668c" name="PackageKit-backend-dnf-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="7a869f3906a3cad08da984d4752a57dc053d1bc5793090cafa24cd73bb9becc1" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="a93add8b0ffbda10ba4c02f75661a46081545cfbace0a8547fc308f266d95c98" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="c5f521f54009cd1ff2ba0a992058e4f879d5e175000b060c865ce14e6ea2bbbf" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="090ff652c4067ce621be5228e5707ddc5fe3024c1aabd563cf8fc8ae44570ef2" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="1e59388eacaf5d966cb63a6c95aa6e3cde939329ee8b0c958efa4fb6ce1437b0" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="eb5bee52c479c6e8f360e6ab0aeead2df4f3696b97c479991cb5f7bf7d9c03f5" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="8f11d438f3a844f4e0eb40753d5b4266489481485d9710a5da4c2ed9861bbf63" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="12574ff29190610472abf1d9cbc0dd492606c6b74a1d34983d62b1ca95a2632d" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="7a3b9c4572b62e6806d06cdee5027f58e9ead95e87b07876ebe673dfe670a5c4" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="997dc31591d9d338386a80419a85569256dfeec1f6d31c7a082c9451c94d186c" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="fda713517c0e92453fe39b6f28ac86b7caf61f8798c186141801b48fceefe361" name="PackageKit-backend-zypp-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="c8fba014c761f582111d8a5d1640f678111f40363ea816bfe85e569aec858e5a" name="PackageKit-backend-zypp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="bb315496a05eafb29034386902a55d508bab4cb738e8960bced2b548995c7c1f" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="97b1a9a90541658965d9b552544d8d1280ba83cfc1bfecc9b8d47e44a268b3a4" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="da4d88ef465fd6aa5ee39505cf63993873bd932039904027416c53cf4028b309" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="79820fa766e22a7a7d130fe01a3d5012e2a4bf4c9d133c48a0b17968b10d7c92" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="27d114a1a4a7aca1926b44b5844bb6ac5327175ff58e6047886725ba52218834" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="105d6e91367e59645f3193e039c823d4d516eb55ad6e706b12c5af4a9797c5bd" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="759333f93ff92b944032b6542de3dfc38790cc8b524465487e2c3a1a198509fc" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="9f6b3e2cd888f9d7f88d4e1dd37057a310f7ad416f6c15121f4108e9f7686a55" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="63acd1b8cb81976b9e9b6a27fd6792031142ab715c265a39748c8f16ad4a0157" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="562473c47fccdaeb2669578f5ffbbeb05b5ceaff4b34b4cde41151a264549475" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="714cc2e9f805f8c9842c7bb102e39478b6bc34b9f1164dbcc5780f71ef3388e7" name="PackageKit-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="f52a5055ae33dd0a431a2ee7bebc41fe658f9e488a910da924dd7280389de6f4" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="687de47833d47dbaab35f4ad363be4bbc1ec1809514d0c453d80ceb5b7fbdfa1" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="9e721e97f43a823c526190804360dbfeeb6bb04196db46fc19d7458178a50056" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="98940fc5f2b1232d012e7c8cd40e3b3633156e066aa922ac2d17cf1c33e9d371" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="de23d399ad89e3f744f22b93aeb2df64b65ddfc50b76e2f6ab905402b01d1492" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="851d899bf53b541d9f42c178054699feef973e805df97e67d9e27e63b713a2b9" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="937e83b4646d9aeaefb2373245c7dbdcb478c9f3e1986c8f1b2f2ab55862879c" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="e352b7cb92597d7243d9e3e4ca86f3f80bff82f8937ac2024f8066ab8819f8b5" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="3fb51a58ccac0cecdcae0eda49f2bff6709847bfc003035959a88668d3809a39" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="44c4e1630f4d2f2b4e9efa95aae79f7d45de2b152828141e4baf802f76267857" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="c3c4b67c322beb4bc53657346e0e25dd97cba780a34668e61a67fb414363bb5e" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="528d298bfdebb2a579d513592fdded32583eb9da286ce68221d72a4cf01cbe82" name="PackageKit-debugsource" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="c035da42f164cd901214f149baa34cb7c5f1a51ae9359c73bc61d84a10959b70" name="PackageKit-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="286eb4b4962754380e8a0975af08bcd94c13e7ae9e04bbdc610ec2eae76f421b" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="e49c578511409acc45c719653ab597145a35810083f6ffe86ac8906752926c55" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="a6f46d075e65ad3ebca5597cdf7b55e80f0757c4564a726999687535413ae330" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="34341f41bf1821bf85371ca3e04d8fae7cedb2adff3df6ca153dec003cc0fe7e" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="a13d62f616eafc2440536e79a979aed6b99ae8832c40a0fa6191a4e604551009" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="b5b776a27efe613fe269c2e75681e92342cc8dd956c4b1611b2ef72aecea9e47" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="48cdbed0c2a3c2d30837fec2c152443692e1e2f220f07fe1abf0cf2307d08b10" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="0a29cf294d1489c71894253c22280c74d0605e64b606c187263b85f165471052" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="c2275300c6c0315e902384f1d8b63275df8fe90a6145f88bdceea3911f727f62" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="2c84d6c1ed7ff14914138bcaa422236f207ec1f8998893c138318fafd9e4728c" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="8669d78c54189cace9c4f36efd0f0edc225da705253612ce377ab7e5cec855bc" name="PackageKit-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="091750c625e77ef85740cc83286d511b14de428ab728df2efc75a396923b6403" name="PackageKit-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="d83b837932ccc0585eea5376e5b6f870833d52817b20ca3e39159b104b0e289b" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="fae2a72dda579dcf104882d8b093d7edfdb367eff97303994caa80ddb387b55d" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="0745ec67eda4081e869b4fe5cf8001763393265e5d64de23d3dfd32435235426" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="6c8fe82b0b2c49c99268e30aad01c14a8c1414b1c067b12e2ea56d46d0d9f719" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="16ad98f5675aa06a9923876b94b1b9c48d51c61368396baa6ebf24c0edefd4fe" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="1cce0c3b2a56444ba796ce8a24872c85cbd82ac02a530be043a6b3235274dd59" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="4b536d2cf4671bb944d4258a4c00f48cc020d068a232d4189f32624e06060c96" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="8df0a6ce7a968b1f13db56df68af3e0dc414d4bd19e3451c592bbef9b451b25e" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="42d2b95d5d02882fc98f8bec044e8211364cc23df9a1de8f877e542a4dabe570" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="38d9608a1cec782dbfb3f9dff38431a8d18a096c22a8966791d99aa8f250ef44" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="3299cdf84f448ade0db77b338a4f552437a2b9415c3745eb00216a9c86724b4f" name="PackageKit-gstreamer-plugin-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="600fd88c36eeb6553e714c8619f36433d21cdb5526e72a857aa6f05c71cb89cc" name="PackageKit-gstreamer-plugin-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="a1a56df45fa76ac4f19ff48f4b4693776af98023baf3637d8ba8e337732824fa" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="daceccda272a7a44a98d64db0cc970fb55f8437251ffb2e7482d6b4a0f4d046c" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.11.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
</package>
<package pkgid="2fce8eaec162e10d1d5cb95795f19e90020403b09bda8ba5153a58ff13314ba0" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="728156d2f8b8e6979649170940bd63fec88329c4a488b5c65a1f1067d3dbd4db" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.15.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216000">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
</package>
<package pkgid="706217b84292fc15a4245e321cab47080ed76ecf35468495f71c4c63511e644c" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="4c31f3d8e9f2e89c9758f892dab1c9213074110205839daf217a24c3ac6fa301" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.19.1"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
</package>
<package pkgid="f1809dd427e0df979ee948866fadc009d1cc460491f4199f225744162dc47d80" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="921db417f39636f6ab21627e875193abf961f7c3b78674c919ade324d67dc590" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.23.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1600862400">- Add PackageKit-zypp-set-PATH.patch: zypp: Set PATH variable
  (gh#/hughsie/PackageKit/commit/2fb7fc6e, bsc#1175315).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1604491200">- Update summary and description of gstreamer-plugin and
  gtk3-module subpackages in spec file (bsc#1104313).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
</package>
<package pkgid="44481be833c9aad16d23be9ff714f0098fbf6a82530bc5f741bae6b12ef16270" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="ab600f068e7ec119d6a5c2ac75f9e1858ce4587d9a03b40b0d311ee4413ed480" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.3.1"/>
  <changelog author="Stasiek Michalski &lt;hellcp@mailbox.org&gt;" date="1556020800">- Add zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  to fix switch to upgrade mode in the backend</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
</package>
<package pkgid="5914c46a2fc16c381fe0db37ec5aecf0ebd8ab5a2b716a04cf737d5f32afb2d8" name="PackageKit-gtk3-module-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="ee91d3eb3ff4b9b4296b307c62804b069207f68092748f0a2622e07420b066d3" name="PackageKit-gtk3-module-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.13" rel="lp152.3.7.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1560945600">- Add PackageKit-zypp-fix-newest-filter.patch: zypp: Emit installed
  package for newest filter (bsc#1125434, gh#hughsie/PackageKit#329).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1565784000">- Rename PackageKit-remove-default-thread-check.patch to
  PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch,
  and update it with the one accepted upstream.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1566216000">- Add PackageKit-zypp-fix-what-provides-newest-filter.patch:
  zypp: Add support for newest filter in what-provides(bsc#984865,
  gh#hughsie/PackageKit#335).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566216001">- Refresh patches with quilt.
- Drop PackageKit-cron-without-sleep.patch: Not needed for any
  current version of openSUSE.
- Add PackageKit-drop-gtk2.patch: Port away from gtk2 dependency,
  drop gtk2-devel BuildRequires (gh#/hughsie/PackageKit#333).
- Add autoconf-archive BuildRequires and run autogen.sh, needed as
  above patch touches buildsystem.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1567339200">- Build PackageKit DNF backend
- Add patches to support backend
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Add patch to improve offline updates with plymouth
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Fix Supplements to use modern rich Supplements statements</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1568030400">- Modify PackageKit-systemd-timers.patch: Port the cron
  configuration variables to the script, and add -sendwait
  parameter to mail in the script(bsc#1130306).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1570622400">- Add PackageKit-zypp-get-updates-dup-or-up.patch: Fix get-updates
  in Tumbleweed(gh#hughsie/PackageKit#343).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1571054400">- Remove zypp-Switch-to-doUpgrade-solver-when-required-by-distribution.patch,
  rebase zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch,
  add PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch:
  zypp: Don't set upgrade mode in update-packages
  (gh#hughsie/PackageKit#345).</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add PackageKit-zypp-upgrade-system.patch: zypp: implement
  upgrade-system method (bsc#1155638, bsc#1154973,
  gh#hughsie/PackageKit/commit/d060dd24).
- Add PackageKit-zypp-get-files-string-array.patch: zypp: pass an
  array of strings to pk_backend_job_files()
  (gh#hughsie/PackageKit#351).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574337600">- Add PackageKit-zypp-update-packages-in-all-openSUSE.patch: Handle
  Tumbleweed upgrade in update-packages as well so that it doesn't
  break other components.</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1578830400">- Update to version 1.1.13
  + New APIs for pk-client-helper in packagekit-glib2
  + dnf, zypp: Various fixes related to upgrades
  + Added support for user services
  + New plymouth "system-upgrade" and "reboot" modes used now
  + Add mutex lock to protect EULAs array
  + Correct bug tracker links on website
  + Support non-x86 arches in gstreamer helper
  + List installed, removed and obsoleted packages in pkcon get-updates
  + Properly mark obsoleted packages when simulating upgrade
  + Provide information about obsoleted packages
  + Return directly when its state is going backwards
  + Shrink the progress bar to fit when run in small spaces
  + Improve the 'using' documentation with a link to API
- Remove upstreamed patches:
  + PackageKit-add-mutex-lock-to-protect-backend-priv-eulas.patch
  + PackageKit-return-on-transactions-going-backwards.patch
  + PackageKit-zypp-dont-set-upgrade-mode-on-updating-specific-packages.patch
  + PackageKit-zypp-fix-newest-filter.patch
  + PackageKit-zypp-fix-what-provides-newest-filter.patch
  + PackageKit-zypp-get-files-string-array.patch
  + PackageKit-zypp-get-updates-dup-or-up.patch
  + PackageKit-zypp-upgrade-system.patch
  + zypp-perform-actions-disallowed-by-update-in-upgrade-mode.patch
  + 0001-dnf-Don-t-override-DnfContext-s-release_ver-for-the-.patch
  + 0001-dnf-Invalidate-the-sack-cache-after-downloading-new-.patch
  + 0001-offline-update-Use-new-plymouth-system-upgrade-and-r.patch
- Add new openSUSE specific patches for DNF backend:
  + PackageKit-dnf-Add-openSUSE-vendor.patch
  + PackageKit-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Remove old openSUSE patches for the DNF backend:
  + 1001-dnf-Add-openSUSE-Tumbleweed-vendor.patch
  + 1002-dnf-Add-support-for-AppStream-repodata-basenames-use.patch
- Refresh patches:
  + PackageKit-drop-gtk2.patch</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1579435200">- Fix autotools modifications in openSUSE vendor patch
  + Patch: PackageKit-dnf-Add-openSUSE-vendor.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt;" date="1583582400">- Add patch to stop zypp backend failing on already installed packages (boo#1155624)
  + Patch: PackageKit-zypp-revert-fail-on-already-installed.patch</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1583841600">- Fix source URL in the spec file.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1584014400">- Add PackageKit-zypp-ignore-already-installed-packages.patch,
  remove PackageKit-zypp-revert-fail-on-already-installed.patch:
  zypp: Ignore already installed package when installing
  (bsc#1155624, gh#/hughsie/PackageKit/commit/d9233011).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1587556800">- Remove is_opensuse macro in spec file to sync SLE and openSUSE
  differences(jsc#SLE-11804).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590494400">- Add PackageKit-zypp-ensure-ResPool-before-is_tumbleweed.patch:
  zypp: Ensure ResPool is built before is_tumbleweed()
  (gh#/hughsie/PackageKit/commit/5c0fd7d7).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1592308800">- Add PackageKit-pkcon-exit-with-retval-5.patch: pkcon: exit with
  retval 5 if no packages needed be installed
  (gh#/hughsie/PackageKit#405 bsc#1170562).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1598011200">- Add PackageKit-zypp-cleanup-tmp-files.patch: zypp: Cleanup
  temporary files when PackageKit quits
  (gh#/hughsie/PackageKit/commit/807f410, bsc#1169739).</changelog>
</package>
<package pkgid="7e6707cf82f25b029bb2d35c28281f94f4172b7e0816a03f1765cb862df5f59f" name="Rivet-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="9c1e8a9d036ca30ad2b2927fbd6712480990999620044053e66d66ad5c03131d" name="Rivet-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="1234dcd08ab333aed2baf57b329f59009ff7c2a88d13a5cfc4c030861a053fd9" name="Rivet-plugins-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1414324800">- Update to version 2.2.0:
  + Mark Jet::containsBottom and Jet::containsCharm as deprecated
    methods: use the new methods. Analyses updated.
  + Add Jet::bTagged(), Jet::cTagged() and Jet::tauTagged() as
    ghost-assoc-based replacements for the 'contains' tagging methods.
  + Adding support for 1D and 3D YODA scatters, and helper methods
    for calling the efficiency, asymm and 2D histo divide functions.
  + Adding 5 new ATLAS analyses:
  - ATLAS_2011_I921594: Inclusive isolated prompt photon
    analysis with full 2010 LHC data
  - ATLAS_2013_I1263495: Inclusive isolated prompt photon
    analysis with 2011 LHC data
  - ATLAS_2014_I1279489: Measurements of electroweak production
    of dijets + $Z$ boson, and distributions sensitive to vector
    boson fusion
  - ATLAS_2014_I1282441: The differential production cross
    section of the $\phi(1020)$ meson in $\sqrt{s}=7$ TeV $pp$
    collisions measured with the ATLAS detector
  - ATLAS_2014_I1298811: Leading jet underlying event at 7 TeV
    in ATLAS
  + Adding a median(vector&lt;NUM&gt;) function and fixing the other stats
    functions to operate on vector&lt;NUM&gt; rather than vector&lt;int&gt;.
  + Fix wrong behaviour of LorentzTransform with a null boost
    vector
  + Add calc() methods to Hemispheres as requested, to allow it to
    be used with Jet or FourMomentum inputs outside the normal
    projection system.
  + Improvements to the particles methods on
    ParticleFinder/FinalState, in particular adding the range of
    cuts arguments cf. JetAlg (and tweaking the sorted jets
    equivalent) and returning as a copy rather than a reference if
    cut/sorted to avoid accidentally messing up the cached copy.
  + Creating ParticleFinder projection base class, and moving
    Particles-accessing methods from FinalState into it.
  + Adding basic forms of MC_ELECTRONS, MC_MUONS, and MC_TAUS
    analyses.
- Changes from 2.2.0Beta:
  + See /usr/share/doc/packages/Rivet-devel/ChangeLog for full
    list.
- Packaging changes:
  + Rebase patch 0001-fix_YODA_Histo1D_includes.patch for current
    version; includes dropping the 2nd hunk since it is already
    incorporated upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1435233600">- Add Rivet-boost-configure-for-GCC5.patch to fix autoconf
  boost macros lookup with GCC5; patch taken from boost.m4
  upstream [https://github.com/tsuna/boost.m4].</changelog>
  <changelog author="badshah400@gmail.com" date="1478779200">- Update to version 2.5.2:
  * Add a requirement to DressedLeptons that the FinalState passed
    as 'bareleptons' will be filtered to only contain charged
    leptons, if that is not already the case. Thanks to Markus
    Seidel for the suggestion.
  * Add Simone Amoroso's plugin for hadron spectra
    (ALEPH_1995_I382179)
  * Add Simone Amoroso's plugin for hadron spectra
    (OPAL_1993_I342766)
  * Add CMS ttbar analysis from contrib, mark validated
    (CMS_2016_I1473674)
  * Extend rivet-mkhtml --booklet to also work with pdfmerge
  * Fix make-plots automatic YMax calculation, which had a typo
    from code cleaning (mea culpa!).
  * Fix ChargedLeptons projection, which failed to exclude
    neutrinos!!! Thanks to Markus Seidel.
  * Add templated FN filtering arg versions of the Jet::*Tags()
    and Jet::*Tagged() functions.
  * Add CMS partonic top analysis (CMS_2015_I1397174)
  * Add L3 xp analysis of eta mesons, thanks Simone
    (L3_1992_I336180)
  * Add D0 1.8 TeV jet shapes analysis, thanks Simone
    (D0_1995_I398175)
  * Add has{Ancestor,Parent,Child,Descendant}With functions and
    HasParticle{Ancestor,Parent,Child,Descendant}With functors.
  * Add ATLAS 8TeV ttbar analysis from contrib
    (ATLAS_2015_I1404878)
  * Add particles(GenParticlePtr) to RivetHepMC.hh
  * Add hasParent, hasParentWith, and hasAncestorWith to Particle.
  * Add ATLAS 8TeV dijet analysis from contrib
    (ATLAS_2015_I1393758)
  * Add ATLAS 8TeV 'number of tracks in jets' analysis from
    contrib (ATLAS_2016_I1419070)
  * Add ATLAS 8TeV g-&gt;H-&gt;WW-&gt;enumunu analysis from contrib
    (ATLAS_2016_I1444991)
  * Explicit std::toupper and std::tolower to make clang happy
  * Add ATLAS Run 2 0-lepton SUSY and monojet search papers
    (ATLAS_2016_I1452559, ATLAS_2016_I1458270)
  * Add experimental Cutflow and Cutflows objects for BSM cut
    tracking.
  * Add 'direct' versions of any, all, none to Utils.hh, with an
    implicity bool() transforming function.
  * Add and mark validated B+ to omega analysis
    (BABAR_2013_I1116411)
  * Add and mark validated D0 to pi- analysis
    (BABAR_2015_I1334693)
  * Add a few more particle names and use PID names in recently
    added analyses
  * Add Simone's OPAL b-frag analysis (OPAL_2003_I599181) after
    some cleanup and heavy usage of new features
  * Restructured DELPHI_2011_I890503 in the same manner --- picks
    up a few more B-hadrons now (e.g. 20523 and such)
  * Clean up and add ATLAS 8TeV MinBias (from contrib
    ATLAS_2016_I1426695)
  * Add a static constexpr DBL_NAN to Utils.hh for convenience,
    and move some utils stuff out of MathHeader.hh
  * Add count function to Tools/Utils.h
  * Add and mark validated B0bar and Bminus-decay to pi analysis
    (BELLE_2013_I1238273)
  * Add and mark validated B0-decay analysis (BELLE_2011_I878990)
  * Add and mark validated B to D decay analysis
    (BELLE_2011_I878990)
  * Add C-array version of multi-target Analysis::scale() and
    normalize(), and fix (semantic) constness.
  * Add == and != operators for cuts applied to integers.
  * Add missing delta{Phi,Eta,Rap}{Gtr,Less} functors to
    ParticleBaseUtils.hh
  * Add templated functor filtering args to the Particle
    parent/child/descendent methods.
  * Add ATLAS Run 1 medium and tight electron ID efficiency
    functions.
  * Update configure scripts to use newer (Py3-safe) Python
    testing macros.
  * Add isFirstWith(out), isLastWith(out) functions, and functor
    wrappers, using Cut and templated function/functor args.
  * Add Particle::parent() method.
  * Add using import/typedef of HepMC *Ptr types (useful step for
    HepMC 2.07 and 3.00).
  * Various typo fixes (and canonical renaming) in
    ParticleBaseUtils functor collection.
  * Add ATLAS MV2c10 and MV2c20 b-tagging effs to
    SmearingFunctions.hh collection.
  * Add a PartonicTops projection.
  * Add overloaded versions of the Event::allParticles() method
    with selection Cut or templated selection function arguments.
  * Add rapidity scheme arg to DeltaR functor constructors.
  * Provide an Analysis::bookCounter(d,x,y, title) function, for
    convenience and making the mkanalysis template valid.
  * Improve container utils functions, and provide combined
    remove_if+erase filter_* functions for both select- and
    discard-type selector functions.
  * Bugfix in rivet-mkhtml (NoneType: ana.spiresID() --&gt; spiresid)
  * Added &lt;numeric&gt; include to Rivet/Tools/Utils.h to make gcc6
    happy
  * Add efffilt() functions and Particle/JetEffFilt functors to
    SmearingFunctions.hh
  * Adding filterBy methods for Particle and Jet which accept
    generic boolean functions as well as the Cut specialisation.
  * Add a Jet::particles(Cut&amp;) method, for inline filtering of jet
    constituents.
  * Add 'conjugate' behaviours to container head and tail functions
    via negative length arg values.
  * Add convenience headers for including all final-state and
    smearing projections, to save user typing.
  * Add standard MET functions for ATLAS R1 (and currently copies
    for R2 and CMS).
  * Add lots of vector/container helpers for e.g. container slicing,
    summing, and min/max calculation.
  * Adapt SmearedMET to take *two* arguments, since SET is typically
    used to calculate MET resolution.
  * Adding functors for computing vector &amp; ParticleBase differences
    w.r.t. another vector.
  * Implemented a few more cuts in prompt photon analysis
    (CDF_1993_S2742446) but to no avail, the rise of the data towards
    larger costheta values cannot be reproduced --- maybe this is a
    candidate for more scrutiny and using the boosting machinery such that
    the c.m. cuts can be done in a non-approximate way
  * Rename CDF_2009_S8383952 to CDF_2009_I856131 due to invalid Spires
    entry.
  * Add InspireID to all analysis known by their Spires key
- Even longer list of changes for version 2.2.1 through 2.5.1; see
  ChangeLog file.
- Drop upstream incorporated or otherwise fixed patches:
  * Rivet-compatibility-with-old-boost.patch.
  * 0001-fix_YODA_Histo1D_includes.patch.
  * Rivet-boost-configure-for-GCC5.patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="jengelh@inai.de" date="1486468800">- Correct RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Add sover.diff, enforce versioning as per guidelines</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1498219200">- Update to version 2.5.4:
  * Fix 8 TeV DY (ATLAS_2016_I1467454), EL/MU bits were bissing.
  * Add 13 TeV DY (ATLAS_2017_I1514251) and mark
    ATLAS_2015_CONF_2015_041 obsolete.
  * Add missing install statement for
    ATLAS_2016_I1448301.yoda/plot/info leading to segfault.
  * Slight improvements to Particle constructors.
  * Improvement to Beam projection: before falling back to
    barcodes 1 &amp; 2, try a manual search for status=4 particles.
    Based on a patch from Andrii Verbytskyi.
  * Add CMS_2016_I1430892: dilepton channel ttbar charge asymmetry
    analysis.
  * Add CMS_2016_I1413748: dilepton channel ttbar spin
    correlations and polarisation analysis.
  * Add CMS_2017_I1518399: leading jet mass for boosted top
    quarks at 8 TeV.
  * Add convenience constructors for ChargedLeptons projection.
  * Add FinalState and Cut (optional) constructor arguments and
    usage to DISFinalState. Thanks to Andrii Verbytskyi for the
    idea and initial patch.
  * Add ATLAS_2016_I1448301, Z/gamma cross section measurement at
    8 TeV.
  * Add ATLAS_2016_I1426515, WW production at 8 TeV.
  * Add BELLE measurement of semileptonic B0bar -&gt; D*+ ell nu
    decays. I took the liberty to correct the data in the sense
    that I take the bin widths into account in the normalisation.
    BELLE_2017_I1512299.
    This is a nice analysis as it probes the hadronic and the
    leptonic side of the decay so very valuable for model building
    and of course it is rare as it is an unfolded B measurement.
  * Add ALEPH measurement of hadronic tau decays,
    ALEPH_2014_I1267648.
  * Add ALEPH dimuon invariant mass (OS and SS) analysis,
    ALEPH_2016_I1492968.
  * The latter needed GENKTEE FastJet algorithm so I added that
    FastJets.
  * Protection against logspace exception in histobooking of
    MC_JetAnalysis.
  * Fix compiler complaints about uninitialised variable in
    OPAL_2004.
  * Tidy ALEPH_1999 charm fragmentation analysis and normalise to
    data integral. Added DSTARPLUS and DSTARMINUS to PID.
  * Add ATLAS_2016_CONF_2016_092, inclusive jet cross sections
    using early 13 TeV data.
  * Add ATLAS_2017_I1591327, isolated diphoton + X differential
    cross-sections.
  * Add ATLAS_2017_I1589844, ATLAS_2017_I1589844_EL,
    ATLAS_2017_I1589844_MU:  kT splittings in Z events at 8 TeV.
  * Add ATLAS_2017_I1509919, track-based underlying event at 13
    TeV in ATLAS.
  * Add ATLAS_2016_I1492320_2l2j and ATLAS_2016_I1492320_3l, the
    WWW cross-section at 8 TeV.
  * Add ATLAS_2016_I1449082, charge asymmetry in top quark pair
    production in dilepton channel.
  * Add ATLAS_2015_I1394865, inclusive 4-lepton/ZZ lineshape.
  * Add ATLAS_2013_I1234228, high-mass Drell-Yan at 7 TeV.
  * Add CMS_2017_I1519995, search for new physics with dijet
    angular distributions in proton-proton collisions at
    sqrt{(s) = 13 TeV.
  * Add CMS_2017_I1511284, inclusive energy spectrum in the very
    forward direction in proton-proton collisions at 13 TeV.
  * Add CMS_2016_I1486238, studies of 2 b-jet + 2 jet production
    in proton-proton collisions at 7 TeV.
  * Add CMS_2016_I1454211, boosted ttbar in pp collisions at
    sqrtS = 8 TeV.
  * Add CMS_2016_I1421646, CMS azimuthal decorrelations at 8 TeV.
  * Add CMS_2015_I1380605, per-event yield of the highest
    transverse momentum charged particle and charged-particle jet.
  * Add CMS_2015_I1370682_PARTON, a partonic-top version of the CMS
    7 TeV pseudotop ttbar differential cross-section analysis.
  * Adding EHS_1988_I265504 from Felix Riehn: charged-particle
    production in K+ p, pi+ p and pp interactions at 250 GeV/c.
  * Fix ALICE_2012_I1116147 for pi0 and Lambda feed-down.
  * Add protection against leptons from QED FSR photon conversions
    in assigning PartonicTop decay modes. Thanks to Markus Seidel
    for the report and suggested fix.
  * Reimplement FastJets methods in terms of new static helper
    functions.
  * Add new mkClusterInputs, mkJet and mkJets static methods to
    FastJets, to help with direct calls to FastJet where particle
    lookup for constituents and ghost tags are required.
  * Fix Doxygen config and Makefile target to allow working with
    out-of-source builds. Thanks to Christian Holm Christensen.
  * Improve DISLepton for HERA analyses: thanks to Andrii
    Verbytskyi for the patch!
  * Replace non-template Analysis::refData functions with C++11
    default T=Scatter2D.
  * Allow yes/no and true/false values for LogX, etc. plot options.
  * Add --errs as an alias for --mc-errs to rivet-mkhtml and
    rivet-cmphistos.
  * Added 6 analyses AMY_1990_I295160, HRS_1986_I18502,
    JADE_1983_I190818, PLUTO_1980_I154270, TASSO_1989_I277658,
    TPC_1987_I235694 for charged multiplicity in e+e- at CMS
    energies below the Z pole.
  * Added 2 analyses for charged multiplicity at the Z pole
    DELPHI_1991_I301657, OPAL_1992_I321190.
  * Updated ALEPH_1991_S2435284 to plot the average charged
    multiplicity.
  * Added analyses OPAL_2004_I631361, OPAL_2004_I631361_qq,
    OPAL_2004_I648738 for gluon jets in e+e-, most need fictitious
    e+e- &gt; g g process.
  * Add Cut and functor selection args to HeavyHadrons accessor
    methods.
  * bin/rivet-mkanalysis: Add FastJets.hh include by default --
    it's almost always used.
  * src/Analyses/CMS_2016_I1473674.cc: Patch from CMS to use
    partonic tops.
  * src/Analyses/CMS_2015_I1370682.cc: Patch to inline jet finding
    from CMS.
  * Convert DressedLeptons use of fromDecay to instead veto photons
    that match fromHadron() || fromHadronicTau() -- meaning that
    electrons and muons from leptonic taus will now be dressed.
  * Move Particle and Jet std::function aliases to .fhh files, and
    replace many uses of templates for functor arguments with
    ParticleSelector meta-types instead.
  * Move the canonical implementations of hasAncestorWith, etc. and
    isLastWith, etc. from ParticleUtils.hh into Particle.
  * Disable the event-to-event beam consistency check if the
    ignore-beams mode is active.
  * Add BoolParticleAND, BoolJetOR, etc. functor combiners to
    Tools/ParticleUtils.hh and Tools/JetUtils.hh.
  * Mark ATLAS_2016_CONF_2016_078 and CMS_2016_PAS_SUS_16_14
    analyses as validated, since their cutflows match the
    documentation.
  * Add aggregate signal regions to CMS_2016_PAS_SUS_16_14.
  * Add getEnvParam function, for neater use of environment
    variable parameters with a required default.
  * Add HasBTag and HasCTag jet functors, with lower-case aliases.
  * Use std::function in functor-expanded method signatures on
    JetAlg.
  * Convert FinalState particles() accessors to use std::function
    rather than a template arg for sorting, and add filtering
    functor support -- including a mix of filtering and sorting
    functors. Yay for C++11!
  * Add ParticleEffFilter and JetEffFilter constructors from a
    double (encoding constant efficiency).
  * Add Vector3::abseta().
- Changes from version 2.5.3:
  * Add cut in BZ calculation in OPAL 4 jet analysis. Paper is not
    clear about treatment of parallel vectors, leads to division by
    zero and nan-fill and subsequent YODA RangeError
    (OPAL_2001_S4553896).
  * Fix bugs in SmearedJets treatment of b &amp; c tagging rates.
  * Adding ATLAS_2016_I1467454 analysis (high-mass Drell-Yan at 8
    TeV).
  * Tweak to 'convert' call to improve the thumbnail quality from
    rivet-mkhtml/make-plots.
  * Require Cython 0.24 or later.
  * Adding L3_2004_I652683 (LEP 1 &amp; 2 event shapes) and
    LHCB_2014_I1262703 (Z+jet at 7 TeV).
  * Adding leading dijet mass plots to MC_JetAnalysis (and all
    derived classes). Thanks to Chris Gutschow!
  * Adding CMS_2012_I1298807 (ZZ cross-section at 8 TeV),
    CMS_2016_I1459051 (inclusive jet cross-sections at 13 TeV) and
    CMS_PAS_FSQ_12_020 (preliminary 7 TeV leading-track underlying
    event).
  * Adding CDF_2015_1388868 (ppbar underlying event at 300, 900,
    and 1960 GeV).
  * Adding ATLAS_2016_I1467230 (13 TeV min bias),
    ATLAS_2016_I1468167 (13 TeV inelastic pp cross-section), and
    ATLAS_2016_I1479760 (7 TeV pp double-parton scattering with 4
    jets).
  * Adding ALICE_2012_I1116147 (eta and pi0 pTs and ratio) and
    ATLAS_2011_I929691 (7 TeV jet frag).
  * Fix bash bugs in rivet-buildplugin, including fixing the --cmd
    mode.
  * Add LHC Run 2 BSM analyses ATLAS_2016_CONF_2016_037 (3-lepton
    and same-sign 2-lepton), ATLAS_2016_CONF_2016_054 (1-lepton +
    jets), ATLAS_2016_CONF_2016_078 (ICHEP jets + MET),
    ATLAS_2016_CONF_2016_094 (1-lepton + many jets),
    CMS_2013_I1223519 (alphaT + b-jets), and CMS_2016_PAS_SUS_16_14
    (jets + MET).
  * Provide convenience reversed-argument versions of apply and
    declare methods, to allow presentational choice of declare
    syntax in situations where the projection argument is very
    long, and reduce requirements on the user's memory since this
    is one situation in Rivet where there is no 'most natural'
    ordering choice.
  * Adding pTvec() function to 4-vectors and ParticleBase.
  * Fix --pwd option of the rivet script
  * Add weights and scaling to Cutflow/s.
  * Add Et(const ParticleBase&amp;) unbound function.
  * Fix missing YAML quote mark in rivet-mkanalysis.
  * Fix constness requirements on ifilter_select() and
    Particle/JetEffFilter::operator().
  * src/Analyses/ATLAS_2016_I1458270.cc: Fix inverted particle
    efficiency filtering.
  * Add rough ATLAS and CMS photon reco efficiency functions from
    Delphes (ATLAS and CMS versions are identical, hmmm).
  * Tidying/fixing make-plots custom z-ticks code. Thanks to Dmitry
    Kalinkin.
  * Fix SpiresID -&gt; InspireID in some analyses (show-analysis
    pointed to non-existing web page).
  * Add Luminosity_fb to AnalysisInfo.
  * Added some keywords and Lumi to ATLAS_2016_I1458270.
  * Merge the ATLAS and CMS from-Delphes electron and muon tracking
    efficiency functions into generic trkeff functions -- this is
    how it should be.
  * Fix return type typo in Jet::bTagged(FN) templated method.
  * Add eta and pT cuts to ATLAS truth b-jet definition.
  * Use rounding rather than truncation in Cutflow percentage
    efficiency printing.
  * make-plots bugfix in y-axis labels for RatioPlotMode=deviation.
  * Add vector and scalar pT (rather than Et) to MissingMomentum.
  * Analysis keyword machinery.
  * rivet -a @semileptonic.
  * rivet -a @semileptonic@^bdecays -a @semileptonic@^ddecays.
- Rebase sover.diff.
- This update actually fixes build with GCC 7 (boo#1041183).</changelog>
  <changelog author="badshah400@gmail.com" date="1504180800">- Build with HepMC2-devel, since Rivet does not compile with
  HepMC-devel &gt;= 3 yet.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521806400">- Add _constraints file to avoid OOM build failures</changelog>
  <changelog author="badshah400@gmail.com" date="1528545600">- Update to version 2.6.0:
  * Long long list of changes: see
    %{_docdir}/%{name}-devel/ChangeLog.
- Rebase sover.diff for updated version.
- Fix package groups.
- Add a plugins package containing all the different analysis
  packages:
  * Plugins are unversioned; the need to depend on the version of
    the devel package.
  * Move plugins to %{_libdir}/Rivet-plugins directory
  * Install an ld.so.conf file so that the plugins are found when
    compiling against them.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1566388800">- Update to version 2.7.2
  * Fixes to CMS_2016_I1487288 jet selection and normalisation.
  * Improve Vector3::azimuthalAngle() (also used by FourMomentum
    and FourVector) to use exact rather than fuzzy is-zero check,
    to only check the perpendicular components, and to note that
    IEEE floating point implementations of atan2 should already be
    'safe' unless we decide that this function should throw or
    return NaN in case of null or along-z vectors.
  * Tools/Utils.h: Add isum() functions, and mark other container
    functions as wanting a conversion to use std::function.
  * Add super-generic (i)discardIfAny(particlebases,
    particlebases, bool(pb,pb)) functions.
  * Introduce TTMODE options for MC_TTBAR to pick the decay mode
- Changes from versions 2.7.1 and 2.7.0: See
  %{_docdir}/%{name}-devel/ChangeLog.
- Add Rivet-fix-ambiguous-namespace.patch: Fixed Et -&gt; Kin::Et to
  avoid ambiguous namespace; patch taken from upstream commit
- YODA &gt;= 1.7.4 required for building.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.0 (new upstream recommended version):
  * Projections/EventMixingFinalState.hh: Replace use of
    std::random_shuffle (deprecated in C++14, removed in C++17)
    with std::shuffle and direct access to our thread-safe random
    number generator.
  * Significant revisions to tau jet efficiency functions.
  * Add JET_EFF_ONE/ZERO aliases, cf. the Particle versions.
  * Give precedence to user-supplied cross-section
  * Switch required compiler dialect to C++14, to ensure that
    compiler definitely (?) supports required C++11. C++14 or 17
    is the current standard LCG build dialect.
  * Add decay angle to ARGUS_1989_I268577
  * Add polarization to OPAL_1997_S3608263
  * Fixes to headers and brefi descriptions in various analyses
  * Add CMD3_2019_I1770428 K0S K0S pi+ pi- cross section
  * Fix histogram ids in BELLE_2009_I809630
  * Add TMP to histogram labels in ARGUS_1993_S2669951
  * Formally require YODA &gt;= 1.8.0 in configure.
  * Add new ALEPH analyses
  * Fixes for pointers, booking in TASSO_1990_I284251 and
    TASSO_1982_I177174
  * Added MARKI_1976_I109792, DASP_1979_I132045 particle spectra
    at low energies
  * Added DASP_1979_I132410 eta production at low energies
  * Added BABAR_2006_I719111 particle specta in B decays
  * Added OPAL_2001_I536266 flavour separate charge particle
    multiplicites
  * Added new CLEO and CUSB analyses
  * Added new BELLE lambda polarization and ARGUS D spectra
  * Fix issues with ARGUS_1992_I319102, CLEO_2000_I537236
  * Added new DELPHI analyses
  * Added L3_1995_I381046, B*/B ratio
  * Added new OPAL analyses
  * Added new BES analyses
  * Added new CMD3 analyses
  * Added ARGUS_1988_I261672 for sigmac production
  * Added LHCB_2013_I1243156, ARGUS_1989_I280943,
    BABAR_2010_I867611 helicity angles for excited D meson decays
  * Added TPC_1991_I316132, HRS_1987_I250823 D* polarization at 29
    GeV
  * Added VENUS_1998_I453613, TOPAZ_1997_I454183 charged particles
    at 58 GeV
  * ATLAS_2011_S9128077 ensure all bins outputted in d02,
    otherwise problems with yodamerge
  * ATLAS_2015_I1393758 and ATLAS_2016_I1419070,
  * CMS_2012_I1111014, change numEntries -&gt; effNumEntries to avoid
    issues in NLO runs
  * Change ratio plot label, was wrong way up, in
  * ATLAS_2012_I1203852, ATLAS_2013_I1190187
  * Use rivet normalize not yoda in ATLAS_2018_I1711114 to avoid
    issues if histos empty
  * Avoid crash in ATLAS_2016_I1426523 if host not found
  * Add omega hist in BABAR_2017_I1621593
  * EHS_1988_I265504 fix rapidity calc so in CMS not lab
  * A2_2017_I1486671 fix omega PDG number
  * Re-enable custom Particles and Jets vectors, with moms() and
    other conversion functions.
  * Add default ANY decay mode to TauFinder.
  * Pass HepMC3 path info through to the rivet-config script.
  * Refine testing and printing of UNVALIDATED status in analysis
    listing.
  * Add INF to the list of predefined constants, and rename the
    internal constants header.
  * Improve normalization guidance and fix energy specification in
    mkanalysis .info file template.
- Changes from version 3.0.0 through 3.0.2: See
  https://gitlab.com/hepcedar/rivet/blob/release-3-0-x/ChangeLog.
- Switch to python3:
  * Requires and BuildRequires switched to python3 versions
  * Rename python package to python3-%{name} and provide
    python-%{name} from it; this makes the py3 switch clear to
    users.
  * Explicitly pass PYTHON_VERSION as py3 version to make it build
    against python3
- Build against HepMC3 instead of HepMC2:
  * Adapt BuildRequires for HepMC3.
  * Pass HepMC3 specific parameters to configure.
  * Add Rivet-plugins-use-HepMC3.patch: Port an analysis plugin to
    HepMC3 from HepMC2
- Refresh sover.diff for updated version.
- Drop Rivet-fix-ambiguous-namespace.patch: incorporated upstream
- New BuildRequires: rsync, fastjet-contrib-devel
- Update required version of YODA-devel to 1.8.0.
- Drop conditionals for outdated openSUSE versions.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1579262400">- Add Obsoletes: python-Rivet to python3-Rivet to help migration.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587643200">- Fix python version in hashbangs. #!%{_bindir}/python introduces
  wrong for python3 package dependency on python-base.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1589630400">- Update to version 3.1.1: Long list of changes, see ChangeLog
  file installed in /usr/share/doc/packages/Rivet-devel.
- Drop Rivet-plugins-use-HepMC3.patch: fixed upstream.
- Install COPYING file for all subpkgs.
- Use properly versioned Provides and Obsoletes for python
  subpackage.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.1.2:
  * Submission of ATLAS_2019_I1744201, ATLAS_2019_I1764342.
  * Add a very horrible preprocessor hack to allow use of a
    private method on the HepMC2 WeightContainer, for robust and
    correctly ordered weight name acquisition before HepMC
    2.06.11.
  * Allow several AnalysisHandler objects to run in different
    threads. This is a temporary fix. A permanent fix involves
    changing the Analysis handler to own its own projections.
    Currently each AnalysisHandler need sto be created and run
    completely within the same separate thread.
  * Allow + and - in AO paths.
  * Always skip weights that have "AUX" or "DEBUG" in the name.
  * Add computation of Python versions and passing them to Cython
    as command-line flags.
  * Fix small bug in rivet-cmphistos.
  * Add ATLAS_2018_I163527 (W+jets at 8 TeV).
  * Add InvisibleFinalState projection.
  * HTML sectioning and float/overflow/scrollbar improvements in
    rivet-mkhtml output.</changelog>
</package>
<package pkgid="15a1f9ad1b1d043d79c57b373475c8671f6b312cb4145e1bd85eca8194485205" name="SDL-debugsource" arch="i586">
  <version epoch="0" ver="1.2.15" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove gpg-offline leftovers</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old soundserver support (also arts, after esound).
  Remove --with-pic, building defaults to PIC anyway.
  Use pkgconfig names to slurp in packages.</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Avoid bs_sched computation failure by expanding %power64</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="01aaf8d49130d3532cb66c5270ee014cc9a7f2a67a0017a4ec9b48e78f2dec95" name="SDL-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.15" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1418904000">- Remove gpg-offline leftovers</changelog>
  <changelog author="jengelh@inai.de" date="1418990400">- Drop old soundserver support (also arts, after esound).
  Remove --with-pic, building defaults to PIC anyway.
  Use pkgconfig names to slurp in packages.</changelog>
  <changelog author="jengelh@inai.de" date="1420545600">- Avoid bs_sched computation failure by expanding %power64</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- libspe2 only exists for ppc and ppc64</changelog>
  <changelog author="schwab@suse.de" date="1498737600">- libspe2 doesn't exist any more</changelog>
  <changelog author="qzheng@suse.com" date="1550750400">- Add CVE-2019-7637.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1551355200">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng &lt;qzheng@suse.com&gt;" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1566475200">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).</changelog>
</package>
<package pkgid="1de71d98327bea01687e77cd5e1c601b7d9469c49e3e6a16bb3a8344cee56a20" name="aaa_base-debuginfo" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="0d10c040a898e20ad23fb878dbdbd18a20080b01b56908d54787ffac94303702" name="aaa_base-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="3b8bf0681fbb9812c352e84cfd35c2436281f3c578f2e7bcade83230198006bf" name="aaa_base-debuginfo" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="6d38265044abcb36a79e37979be9cc105bd081cf95529d38c2b334f9bd794e45" name="aaa_base-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="9784fda078a578cb09db71aeeb6cb1afb86a677cbf0de0004ea1f8b215f315ec" name="aaa_base-debugsource" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="8aecbf33913e217186a61952ed191c7a8b0da5d38779af5e7fce724cf78ffef4" name="aaa_base-debugsource" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.3.1"/>
  <changelog author="kukuk@suse.de" date="1517832000">- Update to version 84.87+git20180205.2d2832f:
  * Move /lib/aaa_base/convert_sysctl to /usr/lib/base-scripts/convert_sysctl
    to cleanup filesystem.
  * Don't create /etc/init.d/{boot.local,after.local,halt.local} in
    aaa_base.pre section.
  * Remove dead code from pre/post install sections.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
</package>
<package pkgid="44d27c8fe68fdeb104d4602bea98ea368f10d22544b490d13931b718e2504743" name="aaa_base-debugsource" arch="i586">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="14eb324e123cfa0bc6ba3e4eca16b087bbc8351f324a940e7e7d0a106d798c80" name="aaa_base-debugsource" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="lp152.14.7.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1518091200">- Update to version 84.87+git20180208.8eeab90:
  * Don't call fillup for removed sysconfig.news
  * Adjust path for script converting sysctl config
  * For ksh use builtin keyword 'function' to make sure that the
    keyword 'typeset' really set the variable IFS to be local within
    the function _ls.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1523275200">- Update to version 84.87+git20180409.04c9dae:
  * In bash.bashrc move ssh/sudo source of profile to avoid removing
    the `is' variable before last use (boo#1088524).
  * Avoid the shell code checker stumble over `function' keys word
    in ls.bash (git#54).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1536062400">- Add patch git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  Let bash.bashrc work even for (m)ksh (boo#1104531)
- Add patch git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  No error at login if java system directory is empty (bsc#1102310)</changelog>
  <changelog author="ro@suse.de" date="1551960000">- Add patch git-03-00d332a443062395957f422c89eaed9d0979ec00.patch
  * update logic for JRE_HOME env variable (bsc#1128246)</changelog>
  <changelog author="ro@suse.de" date="1552305600">- Add patch git-04-b66cf03e673e84902ce0330f88f84f4fbdc8c9e9.patch
  * Restore old position of ssh/sudo source of profile
    for bug bsc#1118364 but hopefully do not reintroduce
    bug boo#1088524</changelog>
  <changelog author="ro@suse.de" date="1554465600">- Add patch git-05-ae2a49183ba0ad9dff6b8c1efd4de076bd34ab0f.patch
  * /etc/profile does not work in AppArmor-confined containers
    (bsc#1096191)</changelog>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
</package>
<package pkgid="cae3f535ce2c86b9c4639d4e68477dd30be81077f2e05285ee5f7d97de3388c4" name="adcli-debuginfo" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="e8d5486bcfb26319d03fb1bf9f70917ffa9c077498bd387261bf977440a4591f" name="adcli-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="ec51697192febc57779c3327c5e5766b1142d28a550a13627c2878e00a27fed0" name="adcli-debugsource" arch="i586">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="3fd0b635fdd3c42ffd3f033d1c5f93ba487e8dda13953ff1e0bb4a629b487d0a" name="adcli-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.5.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
</package>
<package pkgid="da5e2e1ec9363ed83acf6808fad52257a4e33b571a5cf1d32384a9c8c8bedbd8" name="aide-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp152.5.3.1"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
</package>
<package pkgid="0d04665caed7c7e83329cb5b17dd2a952838e69f5d6d7e3d251a68f072f66096" name="aide-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16" rel="lp152.5.3.1"/>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- libmhash development was abandoned in 2007, so it is time
  for it to go into the library heaven, use libgcrypt instead.</changelog>
  <changelog author="mmeister@suse.com" date="1366977600">- Removed AC_CONFIG_MACRO_DIR([m4]) from configure.in to fix
  build with new automake: aide-no_m4_dir.patch</changelog>
  <changelog author="meissner@suse.com" date="1389787200">- aide.conf: Move from md5 and sha1 as default to sha256+sha512, also
  to allow FIPS enabling with aide working. FATE#315925</changelog>
  <changelog author="meissner@suse.com" date="1390478400">- seperate a -test package to help with externalized testing.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- aide-xattr-in-libc.patch: Once upon a time, 10 years ago, basic extended
  attribute functionality moved to libc, therefore libattr is most of the
  time, not needed at all.</changelog>
  <changelog author="meissner@suse.com" date="1435838400">- aide-dynamic.patch: avoid overwriting dl* functions, as we might
  load libcrypto.so dynamically in FIPS mode.</changelog>
  <changelog author="meissner@suse.com" date="1484740800">- Updated to 0.16
  - lots of bugfixes
  - including regexp matching within subdirectories of expressions
- aide-0.16-as-needed.patch: replaces aide-0.15.1-as-needed.patch
- aide-no_m4_dir.patch: upstream
- aide.keyring: added from keyserver, cross checked key id on
  http://aide.sourceforge.net/ and a signature from someone
  I signed.</changelog>
  <changelog author="&lt;abergmann@suse.com&gt;" date="1562846400">- Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360).
  Add aide-define_hash_use_gcrypt.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- aide-0.15-syslog-format.patch: Add a syslog_format to aide (bsc#1180165)</changelog>
</package>
<package pkgid="f8966da851c4272da72d7049d8424f744e9cb11b44cb1fd607f71d4536d172d9" name="akonadi-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="02070d4ce00aa1d950371000ac0406ca631bf2b156bc6dc9759877d836d4465b" name="akonadi-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="60bb5aba291f0976460feb509300d35546ac4e0632a7e546dd8be28cf7afed4a" name="akonadi-server-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="d82cc97e8c51d00f41fc9602418bd7cef8e021936db9f59d226297dd0f060531" name="akonadi-server-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="afdcb867ec9b84858ff418f57cea8b01d9b3cadac03e18f615db20233bf21ee5" name="akonadi-server-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="162505fd0e1b77b02e5de966d1f13fedaba5a51b966c3a562633b8b37a3f04fd" name="akonadi-server-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="428ce12187a2a7f5ca73ef99342729d4daf62c73cdc5faef220f08a874b79d25" name="akonadi-server-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="0b6d4ff984ac446e7eb61932edd381e92b93d61ca6a94461666f2b5ab54702ec" name="akonadi-server-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="884301784674cc8ec46e05d851ce6bf8b8c479a5c467b1b8349268a1da32c73b" name="akregator-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix Bug 412182 - Missing date for new articles (kde#412182)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Too many changes since 19.11.80, only listing bugfixes:
  * Fix Bug 177511 - inline article view in new-opened-article
    scrolls to "same" position as previous opened article in same feed (kde#177511)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Make it compile with qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes since 19.12.3, only listing bugfixes:
  * Don't translate file extension (kde#416983)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix clazy warning/cppcheck warning
  * Use correct namespace</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Inform when loading was done
  * Fix display userfeedback config in kontact config dialogbox</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix Bug 422193 - start page don't display properly with qt 5.15 (kde#422193)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1610366400">- Add akregator-fix_systray.patch (fixes boo#1177572)</changelog>
</package>
<package pkgid="733f7a0fbeb6452ee5db8ad551ae5eb9c501ffb3b88f9ffc9b36c8ce1216174d" name="akregator-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix Bug 412182 - Missing date for new articles (kde#412182)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Too many changes since 19.11.80, only listing bugfixes:
  * Fix Bug 177511 - inline article view in new-opened-article
    scrolls to "same" position as previous opened article in same feed (kde#177511)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Make it compile with qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes since 19.12.3, only listing bugfixes:
  * Don't translate file extension (kde#416983)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix clazy warning/cppcheck warning
  * Use correct namespace</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Inform when loading was done
  * Fix display userfeedback config in kontact config dialogbox</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix Bug 422193 - start page don't display properly with qt 5.15 (kde#422193)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1610366400">- Add akregator-fix_systray.patch (fixes boo#1177572)</changelog>
</package>
<package pkgid="a0c76101ef0164460f956fb90f10594c11dcf880b2fba62c8d99f74d4cd6e258" name="alpine-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.24" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add return-values.diff to unbreak build.
- Use more macros for standard dirs in the build recipe.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588852800">- Update to release 2.22
  * Support for XOAUTH2 authentication method in Gmail.
  * NTLM authentication support with the ntlm library.
  * Added the "/tls1_3" flag for servers that support it.
  * Add the "g" option to the select command that works in IMAP
    servers that implement the X-GM-EXT-1 capability (such as the
    one offered by Gmail).
  * Added "/auth=XYZ" to the way to define a server. This allows
    users to select the method to authenticate to an IMAP, SMTP
    or POP3 server. Examples are /auth=plain, or /auth=gssapi,
    etc.
  * When a message is of type multipart/mixed, and its first part
    is multipart/signed, Alpine will include the text of the
    original message in a reply message, instead of including a
    multipart attachment.
  * Added backward search in the index screen.
  * pico: Add -dict option to Pico, which allows users to choose a
    dictionary when spelling.
- Drop /usr/bin/mailutil, it is not built by default anymore.
- Remove alpine-pinepw.patch (merged upstream)
- Add description files for patches 600-616. These live in a
  separate file because (a) upstream does not offer the description
  as part of the patch file, (b) redownloading the patches would
  nuke any added description due to &lt;a&gt;.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add extern.diff.
- Mark license texts as %license.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599480000">- Update to release 2.23
  * Fixes bsc#1173281, CVE-2020-14929: Alpine silently proceeds to
    use an insecure connection after a /tls is sent in certain
    circumstances.
  * Implementation of XOAUTH2 authentication support for Outlook.
  * Add support for the OAUTHBEARER authentication method in Gmail.
  * Support for the SASL-IR IMAP extension.
  * Alpine can pass an HTML message to an external web browser,
    by using the "External" command in the ATTACHMENT INDEX
    screen.
- Drop extern.diff (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 2.23.2
  * Expansion of the configuration screen for XOAUTH2 to include
    username, and tenant.
  * Alpine uses the domain in the From: header of a message
    to generate a message-id and suppresses all information
    about Alpine, version, revision, and time of generation
    of the message-id from this header.
  * Alpine does not generate Sender or X-X-Sender by default by
    enabling [X] Disable Sender as the default.
  * Alpine does not disclose User Agent by default by enabling
    [X] Suppress User Agent by default.
  * When messages are selected, pressing the ';' command to
    broaden or narrow a search, now offers the possibility to
    completely replace the search, and is almost equivalent to
    being a shortcut to "unselect all messages, and select
    again".</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1610712000">- Update to release 2.24
  * A few crash fixes
  * Implementation of XOAUTH2 for Yahoo! Mail.</changelog>
</package>
<package pkgid="0f99ffa42a5fb580f12b3df9abd18931ecb2f85a548f51a3809f3415c96a6c91" name="alpine-debugsource" arch="x86_64">
  <version epoch="0" ver="2.24" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 2.20
  * Upgrade UW-IMAP to Panda IMAP from github.com/jonabbey/panda-imap
  * S/MIME: Add screen to manage certificates.
  * S/MIME: Signatures are validated using the user's certificates
  instead of the ones included in the message. Behavior can be
  disabled by disabling the option "Validate Using Certificate
  Store Only" which is enabled by default.
  * S/MIME: add the sender certificate to the list of certificates
  in encrypted messages to make it possible for the sender to
  decrypt the message they sent.
  * S/MIME: Forwarding a message will include the signed part as part
  of the text and not as a multipart message, just as the reply
  command does.
  * Add support to selective expunge through a subcommand of the
  select-apply commands.
  * Pico: New subcommand of the search command, allows to reverse the
  direction of search.
  * Add /tls1, /tls1_1, /tls1_2 and /dtls1 to the definition of a
  server to use different ways to connect using ssl, for example
  {server.com/tls1} will attempt to connect to server.com at the
  ssl imap port (port 993) and establish a connection using TLSv1.
  These flags can be used in conjunction with the /ssl flag, the
  ssl flag is redundant. Conversely, however, the /ssl flag does
  not imply any of these flags; the /ssl flag means SSLv3 or, if
  not available, SSLv2 in the SSL port.
  * Alpine does not attempt to automatically reopen a collection that
  was not opened due to cancellation by the user. Instead, the user
  must try to open it explicitly.
  * Experimental: Write the content-type of a message in lowercase,
  as some non-compliant servers do not understand uppercase
  content-type.
  * Opening a folder updates recent count in maildrops (this
  already works for other types of folders)
  * Pico: Justification works without need of a predefined quote
  string. This allows justification of blocks of text that are
  indented with spaces.
  * Decode the name of attachment names, so they can be written as
  part of the description of the part.
  * Replace tabs by spaces in From and Subject fields to control for
  size in screen of these fields. Change only in index screen
  display.
- Drop alpine-month_name-utf8.patch (solved differently upstream),
  drop alpine-mime-type-workaround.patch (merged upstream)
- Add lint.diff to workaround new source code problems</changelog>
  <changelog author="olaf@aepfle.de" date="1457092800">- Remove timestamp from binary
  alpine-timestamp.patch</changelog>
  <changelog author="kukuk@suse.de" date="1459771200">- Remove BuildRequires for libgssglue (via libgssapi provides),
  unused since krb5_gssapi is used.</changelog>
  <changelog author="max@suse.com" date="1490097600">- New version 2.21:
  * New SHORTSUBJECT, SHORTSUBJKEY and SHORTSUBJKEYINIT token for
    index format
  * New SMARTTIME24 token for index screen.
  * Added support for RFC 2971 - IMAP ID extension.
  * SMIME: Upgrade the default signature digest from SHA-1 to
    SHA-256.
  * SMIME: Turn off automatic signing and encrypting of a message
    when bouncing.
  * The complete change list can be viewed by pressing "R"
    in the Alpine main menu.
- Updated "Chappa" patches to the latest version.
- Obsolete patches:
  * alpine-no-add-needed.patch
  * chappa-ignoresize.patch
  * chappa-unixnullbug.patch
  * pico-stripwhitespace.diff
  * pine-nonvoid-function.patch</changelog>
  <changelog author="opensuse@dstoecker.de" date="1490097601">- add chappa patch to add own rules (chappa-rules.patch)
- add chappa patch to change from header (chappa-fromheader.patch)
- add chappa patch to better justify paragraphs (chappa-fillpara.patch)
- drop empty lint.diff</changelog>
  <changelog author="jengelh@inai.de" date="1499083200">- imap is bundled with alpine since a while, so there is no need
  for imap-devel anymore (whose removal is planned for
  openSUSE:Factory).</changelog>
  <changelog author="Michal Svec &lt;msvec@suse.com&gt;" date="1541678400">- updated upstream URL</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1556798400">- Fix initialisation of encrypted password store (bsc#1133597,
  alpine-pinepw.patch).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566820800">- Add return-values.diff to unbreak build.
- Use more macros for standard dirs in the build recipe.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1588852800">- Update to release 2.22
  * Support for XOAUTH2 authentication method in Gmail.
  * NTLM authentication support with the ntlm library.
  * Added the "/tls1_3" flag for servers that support it.
  * Add the "g" option to the select command that works in IMAP
    servers that implement the X-GM-EXT-1 capability (such as the
    one offered by Gmail).
  * Added "/auth=XYZ" to the way to define a server. This allows
    users to select the method to authenticate to an IMAP, SMTP
    or POP3 server. Examples are /auth=plain, or /auth=gssapi,
    etc.
  * When a message is of type multipart/mixed, and its first part
    is multipart/signed, Alpine will include the text of the
    original message in a reply message, instead of including a
    multipart attachment.
  * Added backward search in the index screen.
  * pico: Add -dict option to Pico, which allows users to choose a
    dictionary when spelling.
- Drop /usr/bin/mailutil, it is not built by default anymore.
- Remove alpine-pinepw.patch (merged upstream)
- Add description files for patches 600-616. These live in a
  separate file because (a) upstream does not offer the description
  as part of the patch file, (b) redownloading the patches would
  nuke any added description due to &lt;a&gt;.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591531200">- Add extern.diff.
- Mark license texts as %license.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599480000">- Update to release 2.23
  * Fixes bsc#1173281, CVE-2020-14929: Alpine silently proceeds to
    use an insecure connection after a /tls is sent in certain
    circumstances.
  * Implementation of XOAUTH2 authentication support for Outlook.
  * Add support for the OAUTHBEARER authentication method in Gmail.
  * Support for the SASL-IR IMAP extension.
  * Alpine can pass an HTML message to an external web browser,
    by using the "External" command in the ATTACHMENT INDEX
    screen.
- Drop extern.diff (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 2.23.2
  * Expansion of the configuration screen for XOAUTH2 to include
    username, and tenant.
  * Alpine uses the domain in the From: header of a message
    to generate a message-id and suppresses all information
    about Alpine, version, revision, and time of generation
    of the message-id from this header.
  * Alpine does not generate Sender or X-X-Sender by default by
    enabling [X] Disable Sender as the default.
  * Alpine does not disclose User Agent by default by enabling
    [X] Suppress User Agent by default.
  * When messages are selected, pressing the ';' command to
    broaden or narrow a search, now offers the possibility to
    completely replace the search, and is almost equivalent to
    being a shortcut to "unselect all messages, and select
    again".</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1610712000">- Update to release 2.24
  * A few crash fixes
  * Implementation of XOAUTH2 for Yahoo! Mail.</changelog>
</package>
<package pkgid="d48ba70d95b4cc34af3cbed549789253e0ea2c024d47836ff86be6474b90d767" name="alsa-debugsource" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="fda5b3d2a65669e769d07c52d8d0987170b81656a413994f594d4863d2bdae83" name="alsa-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.9.4.1"/>
  <changelog author="tiwai@suse.de" date="1465387200">- Backport upstream fixes: fixing PCM dmix &amp; co suspend/resume,
  namehint parser fixes, stackable async handler:
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-lib v1.1.2:
  * topology API updates
  * support of stacked async handlers
  * new UCM configs: rockchip-i2s, skylake-i2s, chtrt5645,
  * add cset-tlv ucm support
  * fix conversion of TLVs min_db and max_dB value in softvol
  * fix appl pointer in the error path of PCM plugin
  * PCM code cleanup
  * fix suspend/resume of PCM dmix, dsnoop and dshare plugins
  * fix doubly enumerated items via namehint
  * make PCM codes thread-safe
  * API documentation enhancements
  * element-set ctl API
  * Optimization by replacing alloca() usages
- Drop obsoleted patches:
  0001-pcm_plugin-fix-appl-pointer-not-correct-when-mmap_co.patch
  0002-pcm-Clean-up-error-paths-in-snd_pcm_plugin_-helpers.patch
  0003-pcm-Fallback-open-as-the-first-instance-for-dmix-co.patch
  0004-pcm-softvol-fix-conversion-of-TLVs-min_db-and-max_dB.patch
  0005-pcm-Fix-suspend-resume-regression-with-dmix-co.patch
  0006-pcm-dmix-Fix-doubly-resume-of-slave-PCM.patch
  0007-namehint-Don-t-enumerate-as-duplex-if-only-a-single-.patch
  0008-pcm-Define-namehint-for-single-directional-PCM-types.patch
  0009-conf-Add-thread-safe-global-tree-reference.patch
  0010-pcm-Remove-resume-support-from-dmix-co.patch
  0011-pcm-Fix-secondary-retry-in-dsnoop-and-dshare.patch
  0012-pcm-dmix-resume-workaround-for-buggy-driver.patch
  0013-pcm-dmix-Prepare-slave-when-it-s-in-SETUP-too.patch
  0014-pcm-dmix-Return-error-when-slave-is-in-OPEN-or-DISCO.patch
  0015-async-Handle-previously-installed-signal-handler.patch
  alsa-docs-suppress-timestamp.patch</changelog>
  <changelog author="tiwai@suse.de" date="1480420800">- Backport upstream fixes (bsc#1012594):
  - A few PCM bugs have been fixed:
  * Stall of dmix and others in a wrong PCM state
  * Refactoring of PCM locking scheme
  * SHM initialization race fix
  * plug PCM memory leaks
  * Improvement of dshare/dmix delay calculation
  * Fix endless dshare draining
  * Fix semaphore discard race fix of direct plugins
  - UCM fixes and updates for DB410c and skylake-r5286
  - Mixer code cleanup not to install bogus plugin codes
  - Documentation fixes / updates
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch
- smixer module files got removed from the file list as well</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-lib 1.1.3 release;
  just including all previous fixes
- Drop obsoleted patches:
  0001-ucm-Add-ucm-files-for-DB410c-board.patch
  0002-mixer-Fix-rounding-mode-documentation.patch
  0003-pcm-Fix-shm-initialization-race-condition.patch
  0004-pcm-Better-understandable-locking-code.patch
  0005-ucm-fix-crash-when-calling-snd_use_case_geti-with-no.patch
  0006-ucm-docs-typeset-lists-of-identifiers-explicitly.patch
  0007-Update-include-sound-tlv.h-from-4.9-pre-kernel-uapi.patch
  0008-test-use-actual-information-for-TLV-operation.patch
  0009-ctl-improve-API-documentation-for-TLV-operation.patch
  0010-ctl-improve-documentation-about-TLV-related-APIs.patch
  0011-ctl-correct-documentation-about-TLV-feature.patch
  0012-conf-ucm-skylake-add-skylake-rt286-conf-files.patch
  0013-pcm_plug-Clear-plugins-on-all-error-conditions.patch
  0014-mixer-Don-t-install-smixer-modules-unless-python-is-.patch
  0015-pcm_dshare-Do-not-discard-slave-reported-delay-in-st.patch
  0016-pcm-direct-Protect-from-freeing-semaphore-when-alrea.patch
  0017-pcm-dshare-Fix-endless-playback-of-buffer.patch
  0018-pcm-Add-the-PCM-state-checks-to-plugins.patch
  0019-pcm-dmix-Do-not-discard-slave-reported-delay-in-stat.patch</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="kukuk@suse.de" date="1486555200">- Don't require insserv if we don't need it.</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Drop alsa-lib-doxygen-avoid-crash-for-11.3.diff as it was applied
  only in case of 11.3 and never else
- Use Requires(phase) instead of prereq string
- Use official %udevrulesdir macro instead of handbrew udevdir
- Version provides/obsoletes in devel pkg to avoid warning
- Remove hack that allowed build on SLE10</changelog>
  <changelog author="tiwai@suse.de" date="1490788800">- Backport upstream fix patches, including the deadlock fix for
  aplay/arecord (boo#1031525):
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Disable dmix var_periodsize as default (boo#1033179)
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch
- Workaround for binary incompatibility of dmix shm (boo#1033080):
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493812800">- Remove direct_memory_access flag from dmix definition again for
  fixing a regression used with old alsa-lib binary (boo#1037021):
  0096-conf-Remove-dmix.direct_memory_access-setup.patch</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-lib 1.1.4: including most of previous fixes,
  in addition to topology API updates
- Upstream fix for building with old glibc:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
- Obsoleted patches:
  0001-ucm-Add-ATTRIBUTE_UNUSED-for-unused-parameters-of-ex.patch
  0002-ucm-parser-needs-limits.h.patch
  0003-pcm-direct-allow-users-to-configure-different-period.patch
  0004-pcm-dshare-enable-silence.patch
  0005-pcm-rate-fix-the-hw_ptr-update-until-the-boundary-av.patch
  0006-plugin-dynamically-update-avail_min-on-slave.patch
  0007-rate-dynamic-update-avail_min-on-slave.patch
  0008-topology-fix-unused-const-variable-warning.patch
  0009-seq-improve-documentation-about-new-get-pid-card-fun.patch
  0010-pcm-direct-returning-semop-error-code-for-semaphore-.patch
  0011-pcm-direct-Fix-for-sync-issue-on-xrun-recover.patch
  0012-pcm-direct-check-state-before-enter-poll-on-timer.patch
  0013-pcm-direct-don-t-return-bogus-buffer-levels-in-xrun-.patch
  0014-conf-ucm-broxton-add-broxton-rt298-conf-files.patch
  0015-pcm-direct-Fix-deadlock-in-poll_descriptors.patch
  0016-ucm-Assure-the-user-input-card-name-not-to-exceed-ma.patch
  0017-ucm-Load-device-specific-configuration-file-based-on.patch
  0018-ucm-Add-command-get-_file-to-get-the-config-file-nam.patch
  0019-topology-Fix-incorrect-license-in-source-comments.patch
  0020-conf-cards-add-support-for-pistachio-card.patch
  0021-pcm-multi-Drop-the-fixed-slave_map-in-snd_pcm_multi_.patch
  0022-conf-Add-card-config-for-Intel-HDMI-DP-LPE-audio.patch
  0023-pcm-Avoid-lock-for-snd_pcm_nonblock.patch
  0024-pcm-Disable-locking-in-async-mode.patch
  0025-pcm-dmix-Allow-disabling-x86-optimizations.patch
  0026-pcm-dmix_rewind-corrupts-application-pointer-fix.patch
  0027-pcm-direct-fix-race-on-clearing-timer-events.patch
  0028-pcm-file-Enable-file-writing-for-capture-path.patch
  0029-pcm-status-dump-fix-timestamp-formatting.patch
  0030-pcm-extplug-refinement-of-masks-in-extplug.patch
  0031-pcm-rate-Add-capability-to-pass-configuration-node-t.patch
  0032-Drop-ppc64-specific-workaround-for-versioned-symbols.patch
  0033-pcm_plugin-unify-the-snd_pcm_mmap_begin-result-value.patch
  0034-always-handle-return-value-from-snd_config_get_id-co.patch
  0035-pcm-file-plugin-handle-snd_pcm_mmap_begin-error-path.patch
  0036-topology-coverity-remove-dead-code.patch
  0037-ucm-parser-fix-possible-string-overflow-in-uc_mgr_im.patch
  0038-dmix-plugin-fix-drain-for-nonblock-mode.patch
  0039-dmix-plugin-drain-quickfix-for-the-previous-patch.patch
  0040-rawmidi-virtual-fix-reading-into-a-small-buffer.patch
  0041-conf-cards-add-VC4-HDMI-card.patch
  0042-pcm-plug-save-converter-config.patch
  0043-pcm-file-delegate-htimestamping-to-slave-instead-of-.patch
  0096-conf-Remove-dmix.direct_memory_access-setup.patch
  0097-pcm-dmix-Disable-var_periodsize-as-default.patch</changelog>
  <changelog author="tiwai@suse.de" date="1496318400">- Update to alsa-lib 1.1.4.1: it's a bug-fix release, including
  all previous patches:
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * test: add a test for list operation to user-defined element sets
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
- Obsoleted patches:
  0001-build-Define-__USE_UNIX98-for-old-glibc.patch
  0098-dmix-Workaround-for-binary-incompatibility.patch</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-lib 1.1.5:
  * snd_user_file: avoid use wordexp
  * cleanup: fix poll.h includes
  * ctl: deprecate APIs of dimensional information
  * ctl: ext: error at undefined read_event() callback
  * pcm: softvol: add support for S24_LE
  * cleanup: Use uint*_t instead of u_int*_t everythwere
  * cleanup: fix poll.h includes
  * pcm: hw: Call USER_PVERSION ioctl at open
  * pcm: hw: proper mmap and set_appl_ptr handling
  * pcm: code cleanup and refactoring
  * pcm: obsolete 'mmap_emulation' parameter of snd_pcm_hw_open_fd()
  * pcm: dmix: Fix the inconsistent PCM state
  * pcm: dshare: Call snd_pcm_dshare_state() directly
  * pcm: dmix: Workaround for binary incompatibility
  * conf: Check the availability of PTHREAD_MUTEX_RECURSIVE
  * build: Define __USE_UNIX98 for old glibc
  * rawmidi: symbols: use rawmidi_virt only when available
  * seq: fix snd_seq_set_queue_tempo() usage example in the documentation
  * topology: a few fixes
  * conf/ucm: rt565 support
  * conf: HdmiLpeAudio: add support for 3 devices
  * conf: HdmiLpeAudio: remove the "front" pcm definition
  * conf/ucm: DB410c-HiFi: add CIC selection
  * conf: USB-Audio: allow custom definitions for "default" devices
  * conf: USB-Audio: fix dsnoop args for Audiophile USB card</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Backport fix patches from upstream:
  0001-pcm-route-Fix-use_getput-flag-computation-for-3-byte.patch
  0002-conf-ucm-Rearrange-Makefile.am.patch
  0003-conf-ucm-Add-dual-HD-audio-codecs-config-for-Lenovo.patch
  0004-conf-ucm-Add-Gigabyte-mobo-UCM-profile-with-dual-HD-.patch
- Add missing UCM profile for chtcx2072x (bsc#1068546)</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Recover udev 42-hd-audio-pm.rules for TW that was dropped
  mistakenly at the previous change</changelog>
  <changelog author="tiwai@suse.de" date="1516276800">- Upstream fixes:
  * Add the new ucm for Cherrytrail devices (bsc#1068546):
    0005-conf-ucm-Add-chtrt5645-mono-speaker-analog-mic-confi.patch
  * Fix for error code from PCM API functions at unexpected states:
    0006-pcm-Return-the-consistent-error-code-for-unexpected-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix UCM profile parsing with longname (bsc#1091678):
  0101-ucm-adding-the-folder-of-card_long_name-when-finding.patch
- Add Dell WD15 dock UCM profile (bsc#1091678):
  0102-conf-ucm-Add-a-UCM-profile-for-Dell-WD15-Dock-USB-au.patch
  0103-configure-Fix-forgotten-ucm-entry.patch</changelog>
  <changelog author="tiwai@suse.de" date="1539864000">- Fix UCM profile for Dell WD15 dock (bsc#1112292):
  0104-conf-ucm-Dell-WD15-Dock-Fix-incorrect-device-names.patch</changelog>
  <changelog author="tiwai@suse.de" date="1591963200">- Add UCM profile for ASUS Chromebook C300 (bsc#1171246):
  a downstream UCMv1 profile.  The upstream took already UCMv2 one
  instead.</changelog>
</package>
<package pkgid="5842c5119999b57296585baa2044a6b8fb1c2c2a40d45052977ec6721c66a6b9" name="alsa-utils-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="92ac2a340eb8f8a3096ec9211575222a9b10e48976dc9dd96040f0e4210e393a" name="alsa-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="95e63b479be97eb1e00777e28a888c8c54f7c13bc7fdfd19eca4760d00903a79" name="alsa-utils-debugsource" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="5967bb311a35763b1313e99a81497df00b49d07fdd88df85171984e703cdefc3" name="alsa-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="381b0eca53a98f1178fa6c47710f6865d1e9816ee3007137b94b3536d0bb27f1" name="alsabat-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="e55d4aded29d40bcd47afa7ce08d2446e0fda0a992cedbfc1d827e3c81a620c3" name="alsabat-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="lp152.6.3.1"/>
  <changelog author="tiwai@suse.de" date="1422273600">- Backport upstream fixes: fix missing unlock for the error path
  in alsactl, more alsactl init entries, alsaucm build fix
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1424952000">- Update to alsa-utils 1.0.29:
  just a version bump including previous fixes
- Drop obsoleted patches:
  0001-alsactl-save-state-do-not-call-rename-for-stdio.patch
  0002-alsamixer-include-missing-mixer_controls.h.patch
  0003-Add-alsa-info.sh-to-alsa-utils-repo.patch
  0004-Add-missing-alsa-info-entry-to-the-root-Makefile.am.patch
  0005-alsa-info-Make-sure-all-full-script-is-run-even-with.patch
  0006-alsa-info-Refactor-withall-logic.patch
  0007-speaker-test-Add-missing-draining-at-the-end.patch
  0008-alsactl-Fix-the-file-locking-routines-for-the-state-.patch
  0009-alsactl-aded-missing-monitor-prototype.patch
  0010-speaker-text-fix-simple-signess-assignment-warning.patch
  0011-monitor-fix-clang-warning-Declared-variable-length-a.patch
  0012-alsactl-coverity-missing_va_end-va_end-was-not-calle.patch
  0013-Revert-aplay-fix-pcm_read-return-value.patch
  0014-amixer-Make-dB-case-insensitive-in-set-commands.patch
  0015-amixer-Parse-the-value-more-strictly.patch
  0016-alsactl-add-missing-state_unlock-call.patch
  0017-alsactl-init-Change-the-basic-rules-description.patch
  0018-alsactl-init-Add-Line-Out-to-list-of-outputs-to-init.patch
  0019-configure-allow-contitional-compilation-of-alsaucm.patch</changelog>
  <changelog author="tiwai@suse.de" date="1430136000">- Backport upstream fixes, including the fix for alsa-info
  (boo#928394):
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch</changelog>
  <changelog author="tiwai@suse.de" date="1436788800">- Backport upstream fixes for aplay signal handling and alsactl
  possible buffer overflow of readlink():
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Change libudev-devel BuildRequires to pkgconfig(udev): makes us
  less prone to packaging changes, and in the end udev.pc is
  exactly what we need to define _udevdir.</changelog>
  <changelog author="tiwai@suse.de" date="1438689600">- Upstream patch to add -S option to speaker-test
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
- Upstream patch to add alsatplg parser program
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
- Reenable autoreconf call to regenerate after patching</changelog>
  <changelog author="tiwai@suse.de" date="1439208000">- Suppress alsactl invocation on systems without sound cards
  (bsc#940950):
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch</changelog>
  <changelog author="tiwai@suse.de" date="1443528000">- Backport upstream fixes: particularly fixing the inconsistent
  mixer state after service reload (bnc#929619):
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1447070400">- Update to alsa-utils 1.1.0:
  including all previous fixes, update of topology tool, addition
  of BAT (Basic Audio Tool)
- Split bat subpackage containing BAT
- Fix build of bat with old gcc &amp; glibc on SLE11
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
- Dropped patches:
  0001-amixer-Don-t-set-only-the-first-item-in-sset_enum.patch
  0002-amixer-expand-local-storage-for-item-name-according-.patch
  0003-alsa-info-Don-t-try-update-when-wget-isn-t-available.patch
  0004-aplay-Fix-type-for-signal-flag.patch
  0005-aplay-Fix-uninterruptible-aplay.patch
  0006-alsactl-terminate-readlink-result-string.patch
  0007-speaker-test-Add-option-to-specify-signal-scale.patch
  0008-topology-Add-command-line-topology-tool-to-build-top.patch
  0009-alsactl-Add-path-condition-to-alsa-store-and-alsa-re.patch
  0010-speaker-test-fix-option-ordering.patch
  0011-arecord-Remove-only-regular-files.patch
  0012-aplay-fix-VU-meter-for-S24_LE-etc-formats.patch
  0013-alsactl-Manage-both-save-and-restore-in-a-single-uni.patch</changelog>
  <changelog author="tiwai@suse.de" date="1454500800">- Backport upstream fixes: add alsa-info manpage, fix TLV output of
  amixer for ASoC ext ctls, and rename from bat to alsabat
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch
- Rename subpackage from bat to alsabat due to the name conflicts
  with other projects</changelog>
  <changelog author="tiwai@suse.de" date="1459425600">- Update to alsa-utils 1.1.1:
  including previous fixes, more enhancements / fixes of alsabat,
  fix in aplay for parsing parameter values
- Delete obsoleted patches:
  0001-bat-Avoid-local-signal.h-file.patch
  0002-bat-Don-t-pass-incompatible-function-pointers-to-pth.patch
  0003-alsa-info.sh-add-man-page.patch
  0004-amixer-skip-showing-asoc-tlv-byte-controls.patch
  0005-alsabat-rename-to-avoid-naming-conflict.patch</changelog>
  <changelog author="tiwai@suse.de" date="1470225600">- Update to alsa-utils 1.1.2:
  * aplay: fix lurking capture file overwrite bug
  * alsabat: a few bug fixes, add noise detection, etc</changelog>
  <changelog author="tiwai@suse.de" date="1482926400">- Update to alsa-utils 1.1.3:
  * a couple of amidi fixes
  * a few alsabat extensions
  * alsaloop cpu hog fix,
  * a fix for suspend/resume with aplay
  * fix chmap selection in speaker-test WAV mode
  * alsaucm man pages,
  * fix potential NULL dereferences in alsactl daemon mode
- Add python-docutils to build dependency (for rst2man)
- Fix missing alsaucm man page file in the 1.1.3 tarball</changelog>
  <changelog author="tiwai@suse.de" date="1482926401">- Really bump the version number to 1.1.3 (sorry, forgot to change
  in Version tag).</changelog>
  <changelog author="tiwai@suse.de" date="1494936000">- Update to alsa-utils 1.1.4:
  * alsactl: Remove standard output definition in systemd unit
  * alsa-info: provide more DMI information
  * alsa-info: add ACPI device status
  * amidi: optarg might be NULL, fix 't' argument parsing
  * aplay: Introduce and use xwrite helper</changelog>
  <changelog author="jmatejek@suse.com" date="1509969600">- drop unused requirement for python-docutils</changelog>
  <changelog author="tiwai@suse.de" date="1510660800">- Update to alsa-utils 1.1.5:
  * alsactl: Move systemd unit start-up from basic.target to
    sound.target
  * alsatplg: fix topology compiler long option parsing
  * topology: delete output file if parsing fails.
  * aplay: Fix playback for small raw files
  * aplay: Refactor playback code
  * aplay: Add samples argument for playing/recording a given
    number of samples
  * aplay: interrupt streaming via signal in voc_pcm_write
  * aplay: Fix --max-file-time option 32 bits overflow
  * alsabat: fix one uninitialized warning issue
- Fix filelist for the 1.1.5 update</changelog>
  <changelog author="tiwai@suse.de" date="1513598400">- Get rid of superfluous patch for ancient distros:
  alsa-utils-gettext-version-removal.diff
- Remove superfluous file override, which is already included in
  the 1.1.5 tarball:
  alsaucm.rst
- Backport upstream fixes:
  0001-aplay-Adjust-sample-rate-limits-to-support-newer-har.patch
  0002-alsactl-Only-start-restore-service-when-asoundrc-fil.patch
- Cleanup specfile to rip off the too old kludges</changelog>
  <changelog author="tiwai@suse.de" date="1584705600">- remove "Obsoletes: bat &lt;= 0.1.0" - it triggers uninstall of the unrelated
  "bat" (cat clone) package (bsc#1162182)</changelog>
  <changelog author="tiwai@suse.de" date="1607688000">- Fix alsactl restore behavior during locking (boo#1179904):
  0010-alsactl-Fix-double-decrease-of-lock-timeout.patch
  0011-alsactl-Fix-race-at-creating-a-lock-file.patch
- Remove unnecessary condition for alsa-restore.service
  0012-alsactl-Remove-asound.state-file-check-from-alsa-res.patch</changelog>
</package>
<package pkgid="31d0ec11c88a25abaeac9dffa990c5ecda011ed757442cce3563138113cb84b0" name="apache2-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="bd07c2bed173fa01e7ff1797e3d9ac5224598cdbf9e5628242cf61b6fed3d1ea" name="apache2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="6113fed3c6520f2bb5a2ebfccb562f9ca4e07dbcfe42b0b1612c7849517cf42d" name="apache2-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="79dd96340d74c4e27e5877e052d369b5b0fd1aa10682bd33d1d0043716fb45eb" name="apache2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="a9c011a51cce164d77baecf13b3c05a5e54529d0e50399495e8f5f89774ece0d" name="apache2-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="137a3ba9ac1838dafd8e9e948fca32a2878df9e3464235d6a987fe86c2b7d9cb" name="apache2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="5a12eea2d31f9be14f8e1141984e195e2b6e7e50b283b77a13ad3c86c393e480" name="apache2-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="88f3151cd7aa9d05c8a8cd305fba6375fb4e4fc871015238b52ea97917119690" name="apache2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="f11966a4d3dd6d0c4ccc4f237ecc36dc639220381a0e4925e55b1f257c625707" name="apache2-debugsource" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="5ba7ccddd88b1327525de35d46acb3fbe07671722a80b229bc47051a4ae699a7" name="apache2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="ba5bc02a981348083c4cb05d0d40c265cfcdf8fff8fc2b78c147c8509fe7fbbf" name="apache2-debugsource" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="acb6a4f100bbde4fa0005126501ce05f46c5aeeccd31de471c7fa516179a8125" name="apache2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="376e33af18a8fbca477cd88d83f9e0bac49df73006590c0182f341d526ce8f18" name="apache2-debugsource" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="09fdb9d6a9de6f36a87338a932a0c70ceeb1216046114778f6fdae85e84a36df" name="apache2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="9b55d0a7902f789f824d5089eef384c831237f8f4df771acec7092755273af9f" name="apache2-debugsource" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="1ad83f0fee141212921bbc2f6c740849d3e12de665f2b5870bdbcbb1d44c4e4f" name="apache2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="30c6c67b0ab6c754fbfa8547d3f816a4199748564e1875ac3d3dbab11246c8dd" name="apache2-event-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="df862060ec1a3c3faa5cb076384102702770dc424879be5bc688805cfd4e1238" name="apache2-event-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="9cd16d4771715111f66ae3aed8d432a0afa86efd24d3e95bb5db280efcac8f8b" name="apache2-event-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="b3acd456b7aaaf2ee940dc10dd8ae6b511e1e6cd88b230ba5509b8f7137c8596" name="apache2-event-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="4e442a4574d7795328ea80638b54b91af9f036571176d2a3aefac91ed71f0ae9" name="apache2-event-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="f386e15116056a7625becf6b2f112afd477e449c60223cb402af2e6f112c35eb" name="apache2-event-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="c75a6da0d3b65d2b391bc1731b4bc04c30b2a052013b6101c39e9a0b52a79e63" name="apache2-event-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="d308b7fede5bbb37da084e951faefc801f3a75b096a7541334741c8d6f81ed4b" name="apache2-event-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="62107287b605d5bbea20f6d96016e3fab24e953f91cebe214dbfce2c3014dd28" name="apache2-mod_apparmor-debuginfo" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="cf73aac8e3166856bfb9186da31fdb71693292127d90756ddc03a9e413096997" name="apache2-mod_apparmor-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="ce5af12415d50e7bf76ad1f76e037d6e503b2bd022fef2686e785068adff2bf8" name="apache2-mod_php7-debuginfo" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.12.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
</package>
<package pkgid="97d27e3a9266f350fa8ecdef5634a2570e3b6e3e02417fb96e318799a462314b" name="apache2-mod_php7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.12.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
</package>
<package pkgid="5867e8ba1bec7e9cc28755ad508c07ec9d10b6bda7d0e2e84efa3e27335715e7" name="apache2-mod_php7-debuginfo" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.15.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
</package>
<package pkgid="5fa8dead0542703dcfa167d3286f3c89be3931b3084688e8f6d2d645450e1616" name="apache2-mod_php7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.15.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1610366400">- security update
- added patches
  fix CVE-2020-7071 [bsc#1180706], FILTER_VALIDATE_URL accepts URLs with invalid userinfo
  + php7-CVE-2020-7071.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1613044800">- security update
- added patches
  fix CVE-2021-21702 [bsc#1182049], NULL pointer dereference in SoapClient
  + php7-CVE-2021-21702.patch</changelog>
</package>
<package pkgid="c653b2fd55a1207e449c5e74b7571e339211e437e578cf0383913c278542cb48" name="apache2-mod_php7-debuginfo" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.3.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574942400">- update to 7.4.0:
  * Typed Properties
  * Arrow Functions
  * Limited Return Type Covariance and Argument Type Contravariance
  * Unpacking Inside Arrays
  * Numeric Literal Separator
  * Weak References
  * Allow Exceptions from __toString()
  * Opcache Preloading
  * The interbase and wddx extensions are removed and now
    available through PECL
  * PEAR is now packaged separately in php7-pear source package
    (https://externals.io/message/103977)
  * See https://www.php.net/ChangeLog-7.php#7.4.0 for a complete
    list of changes
- deleted patches
  - php-suse-addons.tar.bz
  - php-systzdata-v18.patch
- added patches
  + php-fix-mysqlnd-compression-library.patch
  + php-systzdata-v19.patch
  + mod_php7.conf
- modified files/patches
  % php-no-build-date.patch
  % php-systemd-unit.patch
  % php7.keyring (use keys of the PHP-7.4 release managers)
  % php7.rpmlintrc</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
</package>
<package pkgid="7523a98efa607a07d19c8961acf34990aab90b81e6268a8b5950952e22c4b138" name="apache2-mod_php7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.3.2"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574942400">- update to 7.4.0:
  * Typed Properties
  * Arrow Functions
  * Limited Return Type Covariance and Argument Type Contravariance
  * Unpacking Inside Arrays
  * Numeric Literal Separator
  * Weak References
  * Allow Exceptions from __toString()
  * Opcache Preloading
  * The interbase and wddx extensions are removed and now
    available through PECL
  * PEAR is now packaged separately in php7-pear source package
    (https://externals.io/message/103977)
  * See https://www.php.net/ChangeLog-7.php#7.4.0 for a complete
    list of changes
- deleted patches
  - php-suse-addons.tar.bz
  - php-systzdata-v18.patch
- added patches
  + php-fix-mysqlnd-compression-library.patch
  + php-systzdata-v19.patch
  + mod_php7.conf
- modified files/patches
  % php-no-build-date.patch
  % php-systemd-unit.patch
  % php7.keyring (use keys of the PHP-7.4 release managers)
  % php7.rpmlintrc</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
</package>
<package pkgid="f09c75df2b01a6795d149c8b2f6853cdb3935daa85f6e6b45af82048ff57b92f" name="apache2-mod_php7-debuginfo" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.6.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
</package>
<package pkgid="a5ac102f69eaf9149e515f40731e6ce53baa9b09908d93323d062e6745e1ce59" name="apache2-mod_php7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.6.1"/>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1575547200">- relax systemd restrictions for FPM as they were too strict in
  some applications
- change leftover Requires php7-&lt;extension&gt; to php-&lt;extension&gt;
- remove external libraries from -devel subpackage
- added patches
  + php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
</package>
<package pkgid="ffc154269a15a08c313947268c0fd69c4c6c53ac7b421cacded546b605f0eb82" name="apache2-mod_php7-debuginfo" arch="i586">
  <version epoch="0" ver="7.4.6" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
</package>
<package pkgid="dfdb09431198d52aa719b456d789c8cf8f911ae10660e89c4f947e867a3b857d" name="apache2-mod_php7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.4.6" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1575979200">- php7-devel requires glibc-devel, libxml2-devel, pcre2-devel
  again</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1576670400">- updated to 7.4.1: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.1
- deleted patches
  - php-fix-mysqlnd-compression-library.patch
  - php-fpm-service-fails-to-start.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1579780800">- updated to 7.4.2: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.2</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1582113600">- updated to 7.4.3: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1584014400">- Enable LTO as it works now (boo#1133275).</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1584446400">- updated to 7.4.4: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.4</changelog>
  <changelog author="pgajdos@suse.com" date="1584705600">- build firebird extension in any case</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- remove Berkeley DB Database support [jsc#SLE-12210]</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1586865600">- updated to 7.4.5: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.5</changelog>
  <changelog author="pgajdos@suse.com" date="1589198400">- added to SLE-15-SP2 [jsc#SLE-12482], including fixes for:
  CVE-2020-7063 [bsc#1165289]
  CVE-2020-7062 [bsc#1165280]
  CVE-2019-11046, CVE-2019-11050, CVE-2019-11047, CVE-2019-11045</changelog>
  <changelog author="pgajdos@suse.com" date="1589284800">- spec file usable under SLE12 again and better prepared for
  phpM -&gt; phpMN transition</changelog>
  <changelog author="pgajdos@suse.com" date="1589284801">- added to SLE-12 [jsc#SLE-12474]</changelog>
  <changelog author="pgajdos@suse.com" date="1589371200">- added patches
  build fixes in SLE12
  + php7-arm-build-fixes.patch</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589457600">- updated to 7.4.6: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.6</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1594036800">- added tmpfiles.d for php-fpm to provide a base base for a socket
  (boo#1173786)</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- do not install %{_tmpfilesdir}, %{_tmpfilesdir}/php-fpm.conf in
  test favour</changelog>
  <changelog author="pgajdos@suse.com" date="1594296001">- Use /run/php-fpm instead of /run/php
- modified sources
  % php-fpm.tmpfiles.d</changelog>
  <changelog author="pgajdos@suse.com" date="1597320000">- security update
- added patches
  fix CVE-2020-7068 [bsc#1175223], Use of freed hash key in the phar_parse_zipfile function
  + php7-CVE-2020-7068.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1602244800">- security update
- added patches
  fix CVE-2020-7069 [bsc#1177351], when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is used
  + php7-CVE-2020-7069.patch
  fix CVE-2020-7070 [bsc#1177352], Percent-encoded cookies can be used to overwrite existing prefixed cookie names
  + php7-CVE-2020-7070.patch</changelog>
</package>
<package pkgid="7ef15a9d89e3e4fbe144fc33fba9f6222925396c9b32925254bbf9dd9bdbe933" name="apache2-mod_security2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="thomas.worm@sicsec.de" date="1423915200">- Raised to version 2.9.0
- Updated patch: apache2-mod_security2-no_rpath.diff
  (adapted lines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424779200">- spec, build: Respect optflags
- spec: buildrequire pkgconfig
- modsecurity-fixes.patch: mod_security fails at:
  * building with optflags enabled due to undefined behaviour
    and implicit declarations.
  * It abuses it apr_allocator api, creating one allocator
    per request and then destroying it, flooding the system
    with mmap() , munmap requests, this is particularly nasty
    with threaded mpms. it should instead use the allocator
    from the request pool.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Remove useless comment lines/whitespace</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438171200">- fix build for lua 5.3
  + apache2-mod_security2-lua-5.3.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1498046400">- Update modsecurity-fixes.patch: additionally include netdb.h in
  order to have gethostbyname defined.</changelog>
  <changelog author="kstreitova@suse.com" date="1506945600">- update to 2.9.2
  * release notes
    https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.2
  * refresh apache2-mod_security2-no_rpath.diff
  * remove apache2-mod_security2-lua-5.3.patch that was applied
    upstream
- remove outdated html pages and diagram (they can be accessed
  online at https://github.com/SpiderLabs/ModSecurity/wiki)
  * Reference-Manual.html.bz2
  * ModSecurity-Frequently-Asked-Questions-FAQ.html.bz2
  * modsecurity_diagram_apache_request_cycle.jpg
- don't pack the whole doc directory as it contains also Makefiles
  or doxygen configuration files
- disable mlogc as we don't pack it and it also can't be built for
  curl &lt;=7.34
- add basic and regression test suite (but disabled for now)
  * add apache2-mod_security2_tests_conf.patch for apache2
    configuration file used for tests that was trying to load
    mpm_worker_module (it's static for our apache2 package)
  * add "BuildRequires: perl-libwww-perl" needed for the test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be
  present</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Trim advertisement and filler wording from descriptions.</changelog>
  <changelog author="pgajdos@suse.com" date="1614772800">- modified patches [bsc#1180830]
  % modsecurity-fixes.patch (fix crash caused by our patch)
- added patches
  fix https://github.com/SpiderLabs/ModSecurity/issues/2514
  + modsecurity-2.9.3-input_filtering_errors.patch</changelog>
</package>
<package pkgid="f26d657dcd5b2fec4b786658c9cfde7dcb45148dc3a142c644d758daba17c70b" name="apache2-mod_security2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="lp152.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="thomas.worm@sicsec.de" date="1423915200">- Raised to version 2.9.0
- Updated patch: apache2-mod_security2-no_rpath.diff
  (adapted lines)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1424779200">- spec, build: Respect optflags
- spec: buildrequire pkgconfig
- modsecurity-fixes.patch: mod_security fails at:
  * building with optflags enabled due to undefined behaviour
    and implicit declarations.
  * It abuses it apr_allocator api, creating one allocator
    per request and then destroying it, flooding the system
    with mmap() , munmap requests, this is particularly nasty
    with threaded mpms. it should instead use the allocator
    from the request pool.</changelog>
  <changelog author="tchvatal@suse.com" date="1425297600">- Remove useless comment lines/whitespace</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="pgajdos@suse.com" date="1438171200">- fix build for lua 5.3
  + apache2-mod_security2-lua-5.3.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1498046400">- Update modsecurity-fixes.patch: additionally include netdb.h in
  order to have gethostbyname defined.</changelog>
  <changelog author="kstreitova@suse.com" date="1506945600">- update to 2.9.2
  * release notes
    https://github.com/SpiderLabs/ModSecurity/releases/tag/v2.9.2
  * refresh apache2-mod_security2-no_rpath.diff
  * remove apache2-mod_security2-lua-5.3.patch that was applied
    upstream
- remove outdated html pages and diagram (they can be accessed
  online at https://github.com/SpiderLabs/ModSecurity/wiki)
  * Reference-Manual.html.bz2
  * ModSecurity-Frequently-Asked-Questions-FAQ.html.bz2
  * modsecurity_diagram_apache_request_cycle.jpg
- don't pack the whole doc directory as it contains also Makefiles
  or doxygen configuration files
- disable mlogc as we don't pack it and it also can't be built for
  curl &lt;=7.34
- add basic and regression test suite (but disabled for now)
  * add apache2-mod_security2_tests_conf.patch for apache2
    configuration file used for tests that was trying to load
    mpm_worker_module (it's static for our apache2 package)
  * add "BuildRequires: perl-libwww-perl" needed for the test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- fix build for SLE_11_SP4: BuildRoot and %deffattr have to be
  present</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Trim advertisement and filler wording from descriptions.</changelog>
  <changelog author="pgajdos@suse.com" date="1614772800">- modified patches [bsc#1180830]
  % modsecurity-fixes.patch (fix crash caused by our patch)
- added patches
  fix https://github.com/SpiderLabs/ModSecurity/issues/2514
  + modsecurity-2.9.3-input_filtering_errors.patch</changelog>
</package>
<package pkgid="ea2101f15b5493c872fec508233d85f4ef7bf0cde4f097ec87c24591f1c736e7" name="apache2-prefork-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="2e277539f20020d4dff0fcfcfdf5eea60b8a582dad1ef222d28ac5d80184a7cd" name="apache2-prefork-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="fb01fd24d1bd236e8ebb2537acbde1341736710e26b1779d08ca59a1c2f36572" name="apache2-prefork-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="f384ae9ca311f98f3bde863e3a1849ef30c611e9514255701f2b357e64341cf8" name="apache2-prefork-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="743ac1b946a818fcf49f2a29fe625f35c5add4f4c1d91fb8b8773a1772befcf5" name="apache2-prefork-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="044d1bb1952ffc7834402b43fedff7240c518745f091c93ba28ab9f6b058250a" name="apache2-prefork-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="5898f9b9f92653f21f3aeff665ba1d85eefbffbd1919304b2bdc59c4c86894e3" name="apache2-prefork-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="088e6f5cb35434c4f3e164ddbea133acebb7a6d9ec316e7b2833bac74e13cc51" name="apache2-prefork-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="e342df222965a279603138f55bb71a845b4173f7bac76669c2583e1488856032" name="apache2-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="f345dd743255110f6fe75555dea7fb13e7b50629230cf02ed0eb0c5cd767baeb" name="apache2-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="670cf4fd0003321201ed5120388695b79b01e640ca43abd00099752e189e8dc3" name="apache2-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="130abb968ef57b0e6853bb481587e16b81e97bf74f20ca6d11d41e36a3f0cc94" name="apache2-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="147a7b73e631d2dd4f15753936c3382ba56b606c34c712ef2e385f39f6f5d476" name="apache2-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="841c336c5a1e597b2cc42376fd6b63e78acb34857cb98b67584edb650169008e" name="apache2-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="338fb04bb2b589f36e301baceac58b430971f6198e7167e7dab5399d2559cc1c" name="apache2-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="cc8ffc80e87f424f8033e215cd6c3474f7e02891afc93ad2bd21ba185ef3ed68" name="apache2-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="2b7d5f79be16ed98797ec5a5b5455cb1562e9bf858ec1258883a838e5d909e33" name="apache2-worker-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="0aa547cd8856b0db8b293ff40a092cb1b264ac342273f06cfcbc818d37579cc6" name="apache2-worker-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
</package>
<package pkgid="475459763e6942d07cddd84149ba808d844d3d74c3fe0d0a03ed3a9102fd0aba" name="apache2-worker-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="df42839701cc1d6a968de227bcbe9537a0c3c734ace86841f53e11bb4012274f" name="apache2-worker-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1552910400">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
</package>
<package pkgid="7512114cfbbb73065e86811a4a984bffa31ce643e0f3b6ac800d9c9f5782b61b" name="apache2-worker-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="eebd83470bfa82327894c5f0a779a7dd19968fd91e9a246726c43930dc9688de" name="apache2-worker-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1554206400">- version update to 2.4.39
  * mod_proxy/ssl: Cleanup per-request SSL configuration anytime a
    backend connection is recycled/reused to avoid a possible crash
    with some SSLProxy configurations in &lt;Location&gt; or &lt;Proxy&gt;
    context. PR 63256. [Yann Ylavic]
  * mod_ssl: Correctly restore SSL verify state after TLSv1.3 PHA
    failure. [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;]
  * mod_log_config: Support %{c}h for conn-hostname, %h for
    useragent_host PR 55348
  * mod_socache_redis: Support for Redis as socache storage
    provider.
  * core: new configuration option 'MergeSlashes on|off' that
    controls handling of multiple, consecutive slash ('/')
    characters in the path component of the request URL. [Eric
    Covener]
  * mod_http2: when SSL renegotiation is inhibited and a 403
    ErrorDocument is in play, the proper HTTP/2 stream reset did
    not trigger with H2_ERR_HTTP_1_1_REQUIRED. Fixed. [Michael
    Kaufmann]
  * mod_http2: new configuration directive: `H2Padding numbits` to
    control padding of HTTP/2 payload frames. 'numbits' is a number
    from 0-8, controlling the range of padding bytes added to a
    frame. The actual number added is chosen randomly per frame.
    This applies to HEADERS, DATA and PUSH_PROMISE frames equally.
    The default continues to be 0, e.g. no padding. [Stefan
    Eissing]
  * mod_http2: ripping out all the h2_req_engine internal features
    now that mod_proxy_http2 has no more need for it. Optional
    functions are still declared but no longer implemented. While
    previous mod_proxy_http2 will work with this, it is
    recommeneded to run the matching versions of both modules.
    [Stefan Eissing]
  * mod_proxy_http2: changed mod_proxy_http2 implementation and
    fixed several bugs which resolve PR63170. The proxy module does
    now a single h2 request on the (reused) connection and returns.
    [Stefan Eissing]
  * mod_http2/mod_proxy_http2: proxy_http2 checks correct master
    connection aborted status to trigger immediate shutdown of
    backend connections. This is now always signalled by mod_http2
    when the the session is being released. proxy_http2 now only
    sends a PING frame to the backend when there is not already one
    in flight. [Stefan Eissing]
  * mod_proxy_http2: fixed an issue where a proxy_http2 handler
    entered an infinite loop when encountering certain errors on
    the backend connection. See
    &lt;https://bz.apache.org/bugzilla/show_bug.cgi?id=63170&gt;. [Stefan
    Eissing]
  * mod_http2: Configuration directives H2Push and H2Upgrade can
    now be specified per Location/Directory, e.g. disabling PUSH
    for a specific set of resources. [Stefan Eissing]
  * mod_http2: HEAD requests to some module such as mod_cgid caused
    the stream to terminate improperly and cause a HTTP/2
    PROTOCOL_ERROR. Fixes
    &lt;https://github.com/icing/mod_h2/issues/167&gt;. [Michael
    Kaufmann]
  * http: Fix possible empty response with mod_ratelimit for HEAD
    requests. PR 63192. [Yann Ylavic]
  * mod_cache_socache: Avoid reallocations and be safe with
    outgoing data lifetime. [Yann Ylavic]
  * MPMs unix: bind the bucket number of each child to its slot
    number, for a more efficient per bucket maintenance. [Yann
    Ylavic]
  * mod_auth_digest: Fix a race condition. Authentication with
    valid credentials could be refused in case of concurrent
    accesses from different users. PR 63124. [Simon Kappel
    &lt;simon.kappel axis.com&gt;]
  * mod_http2: enable re-use of slave connections again. Fixed
    slave connection keepalives counter. [Stefan Eissing]
  * mod_reqtimeout: Allow to configure (TLS-)handshake timeouts. PR
    61310. [Yann Ylavic]
  * mod_proxy_wstunnel: Fix websocket proxy over UDS. PR 62932
    &lt;pavel dcmsys.com&gt;
  * mod_ssl: Don't unset FIPS mode on restart unless it's forced by
    configuration (SSLFIPS on) and not active by default in
    OpenSSL. PR 63136. [Yann Ylavic]
- deleted patches
  - apache2-mod_http2-issue-167.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
</package>
<package pkgid="b737a61a4477e091cf5561f01fa725550c1b54204c3fad9b32c869dae6773eb5" name="apache2-worker-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="39bab398ecd54e03c22d04f28e5ba816baeb0d4f73be757f6f629bbb12eef48d" name="apache2-worker-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.43" rel="lp152.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1557748800">- revive apache-22-24-upgrade [bsc#1134294] (internal)
- added sources
  + apache-22-24-upgrade</changelog>
  <changelog author="pgajdos@suse.com" date="1561550400">- fix typo
- modified sources
  % apache2-README-instances.txt</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1565870400">- version update to 2.4.41 with security fixes:
  * low: Limited cross-site scripting in mod_proxy
    error page (CVE-2019-10092)
  * low: mod_rewrite potential open redirect (CVE-2019-10098)
  * moderate: mod_http2, read-after-free in h2
    connection shutdown (CVE-2019-10082)
  * moderate: mod_http2, memory corruption on
    early pushes (CVE-2019-10081)
  * moderate: mod_http2, DoS attack by exhausting
    h2 workers. (CVE-2019-9517)
  * moderate: mod_remoteip: Stack buffer overflow and
    NULL pointer dereference (CVE-2019-10097)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566561600">- Remove redundant metadata from summary.</changelog>
  <changelog author="Yunhe Guo &lt;i@guoyunhe.me&gt;" date="1570276800">- Add custom log files to logrotate according to apache2-vhost.template</changelog>
  <changelog author="pgajdos@suse.com" date="1571745600">- load private keys and certificates from pkcs11 token [SLE-7653]
- added patches
  load certificates from openssl engine
  + apache2-load-certificates-from-pkcs11.patch
  load private keys from openssl engine
  + apache2-load-private-keys-from-pkcs11.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- use %license [bsc#1156171]</changelog>
  <changelog author="pgajdos@suse.com" date="1576670400">- add openssl call to DEFAULT_SUSE comment [bsc#1159480]
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1579521600">- apache2-devel now provides httpd-devel [bsc#1160100]</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1580472000">- define DEFAULT_LISTENBACKLOG=APR_INT32_MAX. We want apache
  to honour net.core.somaxconn sysctl as the mandatory limit.
  the old value of 511 was never used as until v5.4-rc6 it was
  clamped to 128, in current kernels the default limit is 4096.
  Cannot use the apr_socket_listen(.., -1) idiom because the function
  expects a positive integer argument.</changelog>
  <changelog author="pgajdos@suse.com" date="1581508800">- fix build for older distributions</changelog>
  <changelog author="pgajdos@suse.com" date="1581595200">- build mod_proxy_http2 extension</changelog>
  <changelog author="pgajdos@suse.com" date="1582027200">- require just libbrotli-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1582718400">- use r1874196 [SLE-7472] [bsc#1164820c#6]
- modified patches
  % apache2-load-private-keys-from-pkcs11.patch (upstream 2.4.x port)
- deleted patches
  - apache2-load-certificates-from-pkcs11.patch (merged to above)</changelog>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="Jacek Tomasiak &lt;jtomasiak@suse.com&gt;" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
</package>
<package pkgid="7c402401fcaac6023a2bf10c991890443d8acd114d66713b89fd1ce93132537e" name="apparmor-debugsource" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="964add44a3bd38f8d00f3b5f84821c2bf93c246b3a8169de22b0a935fc0348eb" name="apparmor-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="a44470b436cce463a1f802098e002dd1c61b6efa7e81a1e58a220cc105c9853f" name="apparmor-parser-debuginfo" arch="i586">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="7f384e9785193b489e4667518e8e52e50533f078a38ed2565d24387a9648cdf5" name="apparmor-parser-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13.4" rel="lp152.2.3.1"/>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546430400">- add profile_filename_cornercase.diff: drop check that lets aa-logprof
  error out in a corner-case (log event for a non-existing profile while
  a profile file with the default filename for that non-existing profile
  exists) (boo#1120472)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1546776000">- add apparmor-lessopen-nfs-workaround.diff: allow network access in
  lessopen.sh for reading files on NFS (workaround for boo#1119937 /
  lp#1784499)</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1548331200">- add dnsmasq-libvirtd.diff: allow peer=libvirtd in the dnsmasq profile
  to match the newly added libvirtd profile name (boo#1118952#c3)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551268800">- add dnsmasq-revert-alternation.diff: revert path alternation in
  dnsmasq profile and re-add peer=/usr/sbin/libvirtd rules to avoid
  breaking libvirtd (boo#1127073)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1551960000">- add usrmerge-fixes.diff: fix test failures when /bin/sh is handled by
  update-alternatives (boo#1127877)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1555243200">- update lessopen.sh profile for usrMerge (bash and tar) (boo#1132350)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556020800">- Disable LTO (boo#1133091).</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1559736000">- add upstream libapparmor-swig-4.diff: fix libapparmor tests with swig
  4.0 (boo#1135751)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1560859200">- update to 2.13.3
  - profile updates for dnsmasq, dovecot, identd, syslog-ng
  - new "lsb_release" profile (only used when using "Px -&gt; lsb_release")
  - fix buggy syntax in tunables/share
  - several abstraction updates
  - parser: fix "Px -&gt; foo-bar" (the "-" was rejected before)
  - several bugfixes in aa-genprof and aa-logprof
  - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.3
    for the detailed upstream changelog
- drop upstream(ed) patches:
  - apparmor-nameservice-resolv-conf-link.patch
  - profile_filename_cornercase.diff
  - dnsmasq-libvirtd.diff
  - dnsmasq-revert-alternation.diff
  - usrmerge-fixes.diff
  - libapparmor-swig-4.diff
- re-number remaining patches</changelog>
  <changelog author="Luiz Angelo Daros de Luca &lt;luizluca@tre-sc.jus.br&gt;" date="1569585600">- add apparmor-krb5-conf-d.diff for kerberos client</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1569672000">- add abstractions-ssl-certbot-paths.diff - add certbot paths to
  abstractions/ssl_certs and abstractions/ssl_keys</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570449600">- add usr-etc-abstractions-authentification.diff to allow reading
  /usr/etc/pam.d/* and some other authentification-related files (boo#1153162)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1572696000">- add libapparmor-python3.8.diff to fix building the libapparmor python
  bindings (deb#943657)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1574078400">- Properly pull in full python3 interpreter</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1579953600">- add usr-etc-abstractions-base-nameservice.diff to adjust
  abstractions/base and nameservice for /usr/etc/ (boo#1161756)</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1584014400">- update to AppArmor 2.13.4
  - several abstraction updates (including boo#1153162)
  - disallow writing to fontconfig cache in abstractions/fonts
  - some bugfixes in the aa-* tools
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_2.13.4
    for the detailed upstream changelog
- drop upstreamed patches:
  - abstractions-ssl-certbot-paths.diff
  - apparmor-krb5-conf-d.diff
  - libapparmor-python3.8.diff
  - usr-etc-abstractions-authentification.diff
- refresh usr-etc-abstractions-base-nameservice.diff</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1585396800">- fix build with make 4.3 by backporting some commits from upstream
  master (boo#1167953):
  - make-4.3-capabilities.diff
  - make-4.3-capabilities-vim.diff
  - make-4.3-network.diff
  - make-4.3-fix-utils-network-test.diff</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1586433600">- Add abstractions-add-etc-mdns.allow-to-etc-apparmor.d-abstractions-mdns.patch
  (bsc#1168306)</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1591704000">- Add UI_Showfile so Yast may show the file correctly (bsc#1172040)
  - Split-out-UI_ShowFile-from-UI_Changes.patch
  - Fix-showing-the-local-inactive-profile-in-json-mode.patch</changelog>
</package>
<package pkgid="b24294c30a049cf843c7a0bc283c098462a01c5c34fdaae6fea61a7627b40c9b" name="ark-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563451200">- Use kf5_debugdir macro for specifying the logging categories location</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="af805befc8c8d73e0b9ec60aced19b507b3b9d77b15e7f69f6d934893811f56a" name="ark-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="2eb5bb804fc8bfa947ceca4530e5028a72587741ce75309eb3f5e7eceda50fc8" name="ark-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1563451200">- Use kf5_debugdir macro for specifying the logging categories location</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
</package>
<package pkgid="e5d45f1518816b618bea92c61e0c40311e6f8a7b3f0cfc3f6299a9480148589a" name="ark-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Add missing include
  * Remove unused includes
  * Fix ECM version comparison
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration
  * ReadWriteLibarchivePlugin: always return false if jobs are killed
  * Part: reset UI after aborting creation of new archives
  * ReadWriteLibarchivePlugin: call archive_write_fail on fail
  * Simplify kill logic
  * Part: call updateWithDefaults() instead of setting an invalid index
  * ReadWriteLibarchivePlugin: stop calling QSaveFile::commit() on fail
  * ReadWriteLibarchivePlugin: bring back an old TODO
  * Promote m_operationMode as protected member of ReadWriteArchiveInterface
  * CMake: use proper construct to compare versions
  * Make it compile without foreach
  * clirar: Use switch-case instead of if-else
  * ReadWriteLibarchivePlugin: simplify error check
  * ReadWriteLibarchivePlugin: move declaration near to usage
  * ReadWriteLibarchivePlugin: rename variable
  * ReadWriteLibarchivePlugin: remove stale comment
  * BatchExtract: improve error reporting when a job fails</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Fix build with cmake &lt; 3.7</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * fall back to nummerical owner and group if no text representation exists</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Prevent drops from non-local URLs (kde#409835)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.
- Remove outdated minimum versions in spec</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Drop ark.cliexample debug category
  * Update HACKING file
  * Translate MIME type description</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.
- Add patch to allow building with libarchive 3.3.2:
  * 0001-Support-building-against-libarchive-3.3.2-again.patch
- Dropped patches for obsolete distribution versions:
  * lower-libarchive-minimum-version.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Forward errors from archive interface when batch-extracting
  * libzip: Enable progress when batch-extracting</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * libarchive: Improve error-handling when loading archive</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1596456000">- Add upstream patch to prevent directory traversal (boo#1174773, CVE-2020-16116)
  * 0001-Fix-vulnerability-to-path-traversal-attacks.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1598529600">- Add patch to prevent path traversal (boo#1175857, CVE-2020-24654):
  * 0001-Pass-the-ARCHIVE_EXTRACT_SECURE_SYMLINKS-flag-to-lib.patch</changelog>
</package>
<package pkgid="da9d579845c215941cbcae4e293602d7a14165575aa74c28cb58d63d074b3744" name="arpwatch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.3.1"/>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
</package>
<package pkgid="674e546e9279cbc8c646e6f26d73417de4b3f63fa1f19d97dd8d41747de798b8" name="arpwatch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
</package>
<package pkgid="606b9d2e7acb62161805678a7f747d0b4c0e102fc07b540856ef2e07c2eae2dc" name="arpwatch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.3.1"/>
  <changelog author="draht@suse.de" date="1342612800">- arpwatch-2.1a11-drop-privs.dif: call initgroups() with pw-&gt;pw_gid,
  not NULL, to not have groupid 0 initialized. [bnc#764521]</changelog>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
</package>
<package pkgid="82117f3ebd7c3346de2b0dfe0e1006ae121e26b59e0b047fa92531d638b309dc" name="arpwatch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1a15" rel="lp152.6.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1363262400">- Drop sysvinit support and add systemd support for opensuse &gt; 11.4</changelog>
  <changelog author="rmilasan@suse.com" date="1389096000">- Rework arpwatch.service file to properly support multiple network
  interfaces and arpwatch sysconfig file. (bnc#853384).</changelog>
  <changelog author="meissner@suse.com" date="1400068800">- added missing %pre/%service_add_pre section</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from arpwatch@.service file.</changelog>
  <changelog author="lmuelle@suse.com" date="1434715200">- Deal with added two whitespaces in more recent oui.txt versions.
  + arpwatch-2.1a15-massagevendor.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1502539200">- Remove initscript support. Fix the service initialization to\
  either allow single full client or user has to symlink the instance
  and make sure he can run only one of them. bsc#737527
- Make sure rcarpwatch is working
- Use install commands for installation of files
- Format with spec-cleaner
- Generate temp files using systemd</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jsegitz@suse.com" date="1549368000">- added getnameinfo.patch to prevent memory leak in gethname
  (bsc#1119851)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1611835200">- Include arp2ethers script (jsc#SLE-17224)</changelog>
  <changelog author="Johannes Segitz &lt;jsegitz@suse.com&gt;" date="1612872000">- Fix arp2ethers script (bsc#1181936). Added arp2ethers.patch to
  inline the awk fragments.</changelog>
</package>
<package pkgid="4677ce95c7ce23e28ea4a16bc4214aab98cf45f6fc4c74e224a0d58613079841" name="atftp-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="df6d696d9fd04337dc793405a52b408bd2a8ba6d02d5d3d4a60bc496f6b7ee8e" name="atftp-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="b56e03db17adcbcc28ac0fd46bd0a1b05f4b6d125b7f5ee28afdeea9c8af17d6" name="atftp-debugsource" arch="i586">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="8bdc0604e6012580dcafe87bcd236fca89484282081e50b7f86e17969923cb73" name="atftp-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424088000">- Add systemd support for openSUSE &gt;= 12.1</changelog>
  <changelog author="mpluskal@suse.com" date="1426680000">- Do not install service and socket file as executable
  * change to 0644
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1432468800">- Fix atftpd.socket (boo#932161)</changelog>
  <changelog author="mpluskal@suse.com" date="1432641600">- Move autoreconf to %prep section as it better fits there</changelog>
  <changelog author="schwab@suse.de" date="1433764800">- Force gnu89 inline semantics</changelog>
  <changelog author="mpluskal@suse.com" date="1434369600">- Use ATFTPD_BIND_ADDRESSES in init script (boo#921219)
- Move autoreconf back to %buils as it causes issues with quilt</changelog>
  <changelog author="vcizek@suse.com" date="1481025600">- honor --user and --group options in non-daemon mode (bsc#1013565)
  * add atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504872000">- Changed permissions of /srv/tftpboot to be readable [bsc#940608]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556107200">- Update to version 0.7.2 [bsc#1133114, CVE-2019-11365][bsc#1133145, CVE-2019-11366]
  * atftpd.c: Fixed a potential DoS bug (introduced by the IPv6 patch)
  * Fix Debian Bug deb#613582 and deb#258998 atftpd: does not reply properly when there's more than 1 interface
  * Fix Debian Bug deb#622840 atftpd: Forgets port if both --port and --bind-address are used
  * Fix Debian Bug deb#606969 atftp exits with no error after a get when disk is full
  * Fix Debian Bug deb#575831 atftp: error return value when tftp put file
  * Fix missing default port from Ubuntu bug lp#972834
  * Merged patches to improve debugging and warning messages
  * Merged patch from Gentoo distribution:
    add support for proprietary password extension necessary for
    transferring files to linksys routers (atftp client)
  * Added patch from Gentoo bug #322601: client fails for filenames containing spaces
  * Listening Address configuration fixed
  * Added Patch "Blksize option can be smaller than SEGSIZE"
  * Fix Debian Bug deb#609813 Apply patch listen on requested port when in daemon mode.
  * Fix Debian Bug deb#598474 Fixed use of sendto() over a connected datagram socket on FreeBSD
  * Fix Debian Bug deb#580473 Apply IPv6 support patch by Ben Hutchings.
    Add AC_GNU_SOURCE to configure.ac to address FTBFS.
  * Fix Debian Bug deb#536295 Updated config.sub .guess.
  * Fix Debian Bug deb#535604 Make sure we have the --daemon option before starting atftpd
  * Fix Debian Bug deb#514521 Crash fix
  * Fix Debian Bug deb#484739 Added support for logging to stdout.
  * Fix Debian Bug deb#484932 inetd.conf: change udp to udp4
  * Fix Debian Bug deb#436310 Fixed the FTBFS.
  * Fix Debian Bug deb#420900 Use CLOCKS_PER_SEC instead of CLK_TCK. Fixed a FTBFS.
  * Fix Debian Bug deb#271816 Random segfaults fixed
  * Fix Debian Bug deb#291829 Segfault fixed on AMD64.
  * Fix Debian Bug deb#290062 Copyright fixed.
  * Fix Debian Bug deb#275052 Data corruption bug in multicast mode fixed.
  * New Project home: https://sourceforge.net/projects/atftp/
- Removed patches fixed upstream:
  * atftp-0.7.dif
  * atftp-CLK_TCK.diff
  * atftp-0.7_compiler_warnings.patch
  * atftp-0.7_thread_crash.patch
  * atftp-0.7_sol_ip.patch
  * atftp-0.7_bug-213384_OPT_NUMBER.patch
  * atftpd-0.7_unprotected_assignments_crash.patch
  * atftpd-0.7_circumvent_tftp_size_restrictions.patch
- Rebased patches:
  * atftp-0.7-ack_heuristic.patch
  * atftp-0.7-default_user_man.patch
  * atftp-0.7-server_receive_race.patch
  * atftp-0.7-sorcerers_apprentice.patch
  * atftp-drop_privileges_non-daemon.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1556280000">- Removed old initscript conditionals and atftpd.init file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1562328000">- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
  firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1603281600">- Security fix: [bsc#1176437, CVE-2020-6097]
  * A specially crafted sequence of RRQ-Multicast requests can
    trigger an assert() call resulting denial-of-service.
- Add atftp-CVE-2020-6097.patch</changelog>
</package>
<package pkgid="536a903c078b09ce95951955b8f79fe7a30d869dfe0ea4414e37d3d71551a8fe" name="audacity-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="lp152.4.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="8c3d3e73aa0521d6c91c9f7e1894447251ec069e769aebd6f3f868cbd3033f63" name="audacity-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="lp152.4.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1430308800">- Use libsoxr for resampling instead of libsamplerate.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437220800">- Update to 2.1.1:
  + Changes and Improvements:
  * Built-in effects now support presets.
  * New Limiter effect replaces Hard Limiter effect.
  * New Crossfade Clips effect to apply a simple crossfade to a
    selected pair of clips in a single audio track.
  * Can now add/remove effects from Generate and Effects menus.
  * New version of Vocal Removal Effect.
  * Classic Filters now included as an opt-in effect.
  * Much faster editing with larger projects, thanks to a faster
    method for storing the autosave recovery file.
  * Performance improvements for Draw Tool and zooming of
    Spectrogram views.
  * Zero-padding Spectrograms Preference smooths the image for
    short window sizes.
  * Scrubbing and Seeking, including backwards play.
  * Quick-Play from Timeline enhancements, particularly for
    looping.
  * More VI usability enhancements for track focus &amp; navigation.
  * Upgraded to Nyquist 3.0.9 and libflac 1.3.1.
  * Upgraded LV2 libs, LV2 GUIs on Linux, LV2 factory Presets.
  * Crash report integration.
  * Modules can be enabled in Preferences. Mod-nyq-bench
    available as an experimental module (but not in the default
    download).
  + Bug fixes:
  * Crash using Undo while dragging sample points
  * Crash using File &gt; Close on project window when
    Screenshot Tools was open.
  * FFmpeg Custom Export: Crashes importing presets.
  * TAL VST (but not other VST's) crashed if previewing built-in
    effect.
  * SPACE could not be used/could crash in context menus that
    have a checkbox.
  * LV2 effects did not use parameters when using Chains.
  * Built-in Generators were not usable in Chains.
  * Plot Spectrum could not change values without losing focus.
  * Track dropdown menu settings could affect other tracks.
  * Slight mismatch of vertical scale with linear spectrogram
    view.
  * RTP effect Play/Stop button remained deactivated after
    built-in preview ended.
  * Contrast: "Move forward or backward through active windows"
    did not refocus Contrast.
  * LADSPA and LV2 generate plug-ins failed when white space
    selected.
- Rebase audacity-no_buildstamp.patch.
- Add audacity-fix-nonsense.patch to fix build regressions
  introduced in Audacity 2.1.1.
- Audacity now requires libsoxr without an option.
- Specify a version of wxWidgets Audacity requires.</changelog>
  <changelog author="tiwai@suse.de" date="1437393600">- Drop sf.net download URL as the download host was changed</changelog>
  <changelog author="olaf@aepfle.de" date="1442923200">- Use pkgconfig for ffmpeg BuildRequires</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445774400">- Fix audacity-flac_assert.h.patch up a little.
- Build with ffmpeg support in openSUSE Leap 42.1 and newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461499200">- Add audacity-2.1.1-fix-tempdir.patch from upstream: fix usage of
  custom temp directories (boo#976964).</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Add audacity-gcc6.patch: Fix GCC6 warnings.</changelog>
  <changelog author="davejplater@gmail.com" date="1467028800">- Update to audacity-2.1.2 which builds with wxWidgets-3_0-nostl
  and can use rpm's internal dependency generator. This enables it
  to provide appdata.xml and desktop files and fixes boo#952324 and
  duplicate boo#963592.
- Refreshed patches.
- Removed audacity-2.1.1-fix-tempdir.patch incorporated in this
  version.
- Upstream changes:
  Changes and Improvements:
  * Interface:
  * Spectrogram settings are now available per track.
  * Clearer (sharper) display of pitch (EAC).
  * New 'Spectral Reassignment' option in spectrogram.
  Bug fixes:
  * Crashes
  * Crash using 'space' in Selection toolbar context menu fixed.
  * Crash setting equalization effect parameters in chains fixed.
  * Crash pressing both mouse buttons over toolbar buttons fixed.
  * (Rare) crash or freeze in sound activated recording fixed.
  * (Rare) crash on using plot spectrum for first time fixed.
  * Interface
  * Equalization effect settings are now saved.
  * Oversized Export Options window now OK on smaller screens.
  * FLAC import/export fast again.
  * Can now set undefined frequency in Spectral Selection bar.
  * Imported presets on custom FFmpeg export fixed.
  * Text input boxes working with VAMP
  * Keyboard playback commands now work again.
  * Import Raw Data now works when in Polish language.</changelog>
  <changelog author="davejplater@gmail.com" date="1489838400">- Update to release 2.1.3
- Recreated audacity-no_buildstamp.patch with 2.1.3 release date
  and time.
- Added audacity-flacversion.patch to fix minimum version in m4
  macro.
- Rebased audacity-fix-nonsense.patch
- Deleted audacity-ffmpeg.patch, audacity-flac_assert.h.patch and
  audacity-gcc6.patch
- Upstream changes:
  * Interface:
  * Pinned option on waveform so waveform moves and
    recording/playing head stays still.
  * Timer Record options to save/export/exit after recording.
  * Scrub Ruler and optional Scrub Toolbar.
  * New shortcuts ALT+RIGHT and ALT+LEFT (move to labels without
    editing).
  * Effects:
  * Effects no longer grayed out when paused.
  * New Distortion effect (replaces Leveller).
  * SBSMS (higher quality but slower) option on Change
    Tempo/Change Pitch effects.
  * New Rhythm Track generator (replaces Click Track).
  * New Generator for Sample Data Import.
  * Nyquist effects now significantly faster.
  * Other Changes:
  * Upgraded the PortAudio library to v19 rev r1966.
  * Bug fixes:
  * Over 60 bugs fixed, including five longstanding bugs.</changelog>
  <changelog author="davejplater@gmail.com" date="1490184000">- Added requires for flac &gt; 1.3.0.</changelog>
  <changelog author="olaf@aepfle.de" date="1496750400">- Adjust usage of gccN-c++ for Leap42 and SLE12</changelog>
  <changelog author="olaf@aepfle.de" date="1503662400">- Remove conditionals for ffmpeg, lame, mad, twolame.</changelog>
  <changelog author="davejplater@gmail.com" date="1503662401">- Restore conditionals for lame, mad and twolame.</changelog>
  <changelog author="aloisio@gmx.com" date="1509883200">- Update to version 2.2.0
  Improvements:
  * Four Selectable themes provided, with new 'Light' theme as
    default, plus option to customize
  * Many menu changes:
    + Menus Reorganized
    + Extended menu bar provided
    + New keyboard commands for working with clips
  * Help buttons ? in Preferences, Effects, Generators and
    Analyzers - and other places
  * Non-Greying out of effects when no selection (and explanatory
    dialog with help button)
  * Playback of MIDI (and Allegro) files imported into Note Tracks
    is now available.
  * 'Center' option in Selection Toolbar
  * Stem plots
  * Major overhaul to documentation/manual including many new
    images and streamlined text on landing pages for in-program
    help.
  Other Changes:
  * Append-record is now the default (use Shift + Record for old
    behavior, to record on a new track)
  * The Esc key now cancels all click-and-drag actions. It also
    chooses among overlapping mouse click targets, which is
    especially useful in the Multi-Tool.
  * Sync-Lock button removed (use menu item or keyboard shortcut
    instead)
  * New preferences and preference pages
  * Overhaul of much code:
    + Overhaul of envelope handling code to deal with some
    anomalies
    + Overhaul of exception handling for greater safety
  * New Logo
  Bug Fixes:
  * Major work on bug fixing. 198 bugs that were in 2.1.3 fixed
    for 2.2.0.
    + The most serious bug fixed this time round was bug 437 which
    was about what happens when Audacity is recording and runs
    out of storage.
    + The problems of incomplete support for macOs Sierra have
    been resolved (including bug 290, bug 1567, bug 1702, and bug
    1703).
    + Most of the bugs fixed were more minor, such as bug 463
    which was about a case in which the numbering on the timeline
    could display incorrect times.
- Added audacity-no_return_in_nonvoid.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1509883201">- Enabled mad, twolame and lame for 42.3</changelog>
  <changelog author="davejplater@gmail.com" date="1516017600">- Update to maintenance release version 2.2.1
- Upstream changes and fixes:
  * Waveform colorways:
  You can optionally change the colorway of the waveforms
  displayed in your project. The setting is per track and not per
  project so you can have multiple colorways in the same project.
  * "Save Other" reverts to "Export" in the File menu:
  When we made the menu changes for 2.2.0 we introduced an entry
  into the File menu called "Save Other" which led to a sub-menu
  for exporting various audio formats.
  Many users were confused by this change and found it hard to
  find where they could export.
  * Bug #1770 - Crash applying certain chain files
  * Bug #1783 - Preview fails when selection extends before zero
  * Bug #1787 - Auto-scroll stopped working in 2.2.0
  * Bug #1765 - Using File &gt; Open to import audio gives wrong zoom
  level and no scroll bar slider.</changelog>
  <changelog author="jengelh@inai.de" date="1516017601">- Trim redundant parts from summary.</changelog>
  <changelog author="davejplater@gmail.com" date="1516968000">- Build with gcc7 for Leap:42.3 and -fstack-clash-protection</changelog>
  <changelog author="davejplater@gmail.com" date="1519300800">- Update to release version 2.2.2.
- Rebase audacity-no_buildstamp.patch.
- Removed incorporated audacity-fix-nonsense.patch.
- Added audacity-misc-errors.patch to fix various errors picked
  up by rpmlint.
- Added to audacity-no_return_in_nonvoid.patch.
- Upstream changes:
  * Easier zooming in and out with mousewheel, new Zoom Toggle
  command, and context menu for vertical rulers.
  * Easy access to change keyboard bindings of menu commands
  by holding Shift key.
  * Detection of dropout errors while recording with
  overburdened CPU.
  * Improved contrasts in Light and Dark themes
  * Half-wave display option
  * Several bugs/annoyances in 2.2.1 are now fixed</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1607083200">- Created audacity-CVE-2020-11867.patch to prevent other users
  reading sensitive data. boo#1179449</changelog>
</package>
<package pkgid="34799409cfce7a57a7d4f6f74bccd48de1d5ce92837b66afaecaaab55b5120a1" name="audit-audispd-plugins-debuginfo" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="375b6dbe040452c4605bb26e71852f242294a62c3edcfeebf8de0e5ddb702cb2" name="audit-audispd-plugins-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="f812c8cf529916f791af1f813ce5782bfdb98aa15e942309334fdfe197af2dfd" name="audit-debuginfo" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="b226f7cbf8f2269f74093fc2e2eaae25c6e07ffa41c862dd693fa08059b9d5dc" name="audit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="91205adf2a466d0eb602b75653d5fcd58e6d633dded27028df56809be6f1fcc9" name="audit-debugsource" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="a6a6f5a45da7e096aa34f92834ba312790b6a86830e9897d7b75f6bdcb9a55ef" name="audit-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="mq@suse.cz" date="1416830400">- Update to version 2.4.1
  Changelog 2.4.1
  - Make python3 support easier
  - Add support for ppc64le (Tony Jones)
  - Add some translations for a1 of ioctl system calls
  - Add command &amp; virtualization reports to aureport
  - Update aureport config report for new events
  - Add account modification summary report to aureport
  - Add GRP_MGMT and GRP_CHAUTHTOK event types
  - Correct aureport account change reports
  - Add integrity event report to aureport
  - Add config change summary report to aureport
  - Adjust some syslogging level settings in audispd
  - Improve parsing performance in everything
  - When ausearch outputs a line, use the previously parsed values (Burn Alting)
  - Improve searching and interpreting groups in events
  - Fully interpret the proctitle field in auparse
  - Correct libaudit and auditctl support for kernel features
  - Add support for backlog_time_wait setting via auditctl
  - Update syscall tables for the 3.18 kernel
  - Ignore DNS failure for email validation in auditd (#1138674)
  - Allow rotate as action for space_left and disk_full in auditd.conf
  - Correct login summary report of aureport
  - Auditctl syscalls can be comma separated list now
  - Update rules for new subsystems and capabilities
- Drop patch audit-add-ppc64le-mach-support.patch (already upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4 (bsc#941922, CVE-2015-5186)
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build
- Require pkgconfig for build
  Changelog 2.4.4
  - Fix linked list correctness in ausearch/report
  - Add more cross compile fixups (Clayton Shotwell)
  - Update auparse python bindings
  - Update libev to 4.20
  - Fix CVE-2015-5186 Audit: log terminal emulator escape sequences handling
  Changelog 2.4.3
  - Add python3 support for libaudit
  - Cleanup automake warnings
  - Add AuParser_search_add_timestamp_item_ex to python bindings
  - Add AuParser_get_type_name to python bindings
  - Correct processing of obj_gid in auditctl (Aleksander Zdyb)
  - Make plugin config file parsing more robust for long lines (#1235457)
  - Make auditctl status print lost field as unsigned number
  - Add interpretation mode for auditctl -s
  - Add python3 support to auparse library
  - Make --enable-zos-remote a build time configuration option (Clayton Shotwell)
  - Updates for cross compiling (Clayton Shotwell)
  - Add MAC_CHECK audit event type
  - Add libauparse pkgconfig file (Aleksander Zdyb)
  Changelog 2.4.2
  - Ausearch should parse exe field in SECCOMP events
  - Improve output for short mode interpretations in auparse
  - Add CRYPTO_IKE_SA and CRYPTO_IPSEC_SA events
  - If auditctl is reading rules from a file, send messages to syslog (#1144252)
  - Correct lookup of ppc64le when determining machine type
  - Increase time buffer for wide character numbers in ausearch/report (#1200314)
  - In aureport, add USER_TTY events to tty report
  - In audispd, limit reporting of queue full messages (#1203810)
  - In auditctl, don't segfault when invalid options passed (#1206516)
  - In autrace, remove some older unimplemented syscalls for aarch64 (#1185892)
  - In auditctl, correct lookup of aarch64 in arch field (#1186313)
  - Update lookup tables for 4.1 kernel</changelog>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="c11ade589ec7db511b7c7e3ed4b82d67f6844e69fdcb74c7e7734ee0300b0563" name="audit-secondary-debugsource" arch="i586">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="fafe5b698ff9ee3a12cd1648015be36a6213822137b3c20e88e8a5d4c502680b" name="audit-secondary-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="lp152.7.3.1"/>
  <changelog author="tonyj@suse.com" date="1440158400">- Update to version 2.4.4. See audit.spec (libaudit1) for upstream
  changelog
- Add python3 bindings for libaudit and libauparse
- Remove patch 'audit-no_m4_dir.patch'
  (added Fri Apr 26 11:14:39 UTC 2013 by mmeister@suse.com)
  No idea what earlier 'automake' build error this was trying to fix but
  it broke the handling of "--without-libcap-ng". Anyways, no build error
  occurs now and m4 path is also needed in v2.4.4 to find ax_prog_cc_for_build</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5. See audit.spec (libaudit1) for upstream
  changelog
- Cleanup with spec-cleaner
- Sort out bit /sbin /usr/sbin/ installation
- Install the rules as documentation
- Remove needless %py_requires from python subpkgs</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7. See audit.spec (libaudit1) for upstream
  changelog
  Since commit 6cf57d27 (2.7.4) audit is now started as an non-forking
  service (bsc#1042781).
  Add config: audit-stop.rules
  Refresh patch: audit-allow-manual-stop.patch
  Refresh patch: audit-no-gss.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="dimstar@opensuse.org" date="1503057600">- Add audit-implicit-writev.patch: include sys/uio.h to ensure
  readv and writev are declared.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1. See audit.spec (libaudit1) for upstream
  changelog
- Remove audit-implicit-writev.patch (fixed upstream across 2
  commits)
  * 3b30db20ad983274989ce9a522120c3c225436b3
  * 07132c22314e9abbe64d1031fd8734243285bb3f
- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510228800">- Rename python binding packages to match current python packaging
  standards
- Update python build dependencies to resolve future split of
  python2/3</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Add conditions around python plugins to allow us to conditionalize
  them in enviroment without python2</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Change openldap dependency to client only (bsc#1085003)</changelog>
  <changelog author="Tony Jones &lt;tonyj@suse.com&gt;" date="1581076800">- Resolve build errors when using glibc-devel-5.3 (bsc#1163040)
  New patch: audit-make-audit_filter_exclude-definition-optional.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515)</changelog>
</package>
<package pkgid="04c258b111389154f23ea77daa91ff1fdd95a42eabe2c677ad62d5c333bf3434" name="avahi-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="b009fcb00637592c77fdeb918ace0dafd11b5e0e28850b448a324b9dedd72ec9" name="avahi-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="390adb61e8eda3d79a8671cc639aa3173be9434df22c77edc673f6a4600036c7" name="avahi-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2c1cdebb7c759af7c9ec6f8b6e1ac36b28dbe3fc8b4bcea3e4655f3b7e152b18" name="avahi-autoipd-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="f93b9a35895c030e27b10dd4ca7587885bea29fd217d316365afd8216afad5ac" name="avahi-autoipd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="c4643dc79a51c0bae46dbbf43459aafbca3c3c3f69fc7f54e4764fe991d14a4b" name="avahi-autoipd-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="3b171b931b0395fcff45354f3121e39285c9976c60f514a8b8a1df4b8411a019" name="avahi-autoipd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="e120f2e6cd43282f88bb35b3a783a4a8e6557d458399d7ddc7832cc0f08b189d" name="avahi-autoipd-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="3fb191812c279caea80be2b0a409f0986f448014047e2ed8b923f6fe9cf280e4" name="avahi-autoipd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="8ab0036b912011b3e42ba6e6923b764e44039855e29f00331ab6ef08bff6d0ee" name="avahi-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="2a682b07ade0273c1e9683368a42e6a3aecffc4d5c8e232163b9fe76285794c3" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="6375b8b9e822e33ce2fbc34d69de7643cddc78aa4225341c7e0fbfb46e7c759c" name="avahi-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="2b5ae5d53beff436ab36acdf74300249fc756b73042c1ef529e3173b263f0bc3" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="bdbc9f3a42df7c90032d814c6ff945ad720e43d47f1eb2dbe46434a977471416" name="avahi-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="bbd975e80bf186895d4b7712d9dfb536b0113fc8280123c13a297738ec4f6a3c" name="avahi-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="97b59bf7c3b08a13a63c94f3c3eab5ba78e22e7ac4cb9306f545c8c7bac09f4b" name="avahi-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="cf1edfcdb49f0eb60037aeb9dac95020480ccc5c509c5903cf85db3a45b7dcf4" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="6a4ac6fcdea23bd2aeb1e983a8b837ea4e8dcb51d85eedbd771f8d900383ab6b" name="avahi-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="262781e044f2ca11e0e93c12b1eaf496698b0b2f4d2a4fe3c973f7acddda8e8e" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="281039e0a26390e40942c571d280c2954b358c4d39882317d137693c868a1aca" name="avahi-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="037907e592559c5ab53c46f34156dc0b105d8a4155dd7d9ddde37682f4275df6" name="avahi-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="c12ff404f9bf68d89f002504b02ccb7595502d3c162b4ca25f5f32faa428f9d6" name="avahi-glib2-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b8242024680118c00359972524e748df10f3ba61fea271ae3ee5ac16fbeab849" name="avahi-glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="30974ec4490d9a998cb85df8a08550dcf9fa30cbd22764a8ae7f56b21c9ae0ed" name="avahi-glib2-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="daaa61b2163437c76194c30b99329850229cd9d02a91e05e4b772b2973696f6c" name="avahi-glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="3ab60cef4ff9a8689789ef585d3c0d7e4f25da2856b088ccf15927b19888cce9" name="avahi-glib2-debugsource" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="ed589c6c11eff0b471751c69c8b2ea32ac0143c5b5f465b2afe3f30fa173d226" name="avahi-glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="5028d541bfe79a0bfd2eea3a2f993e30fc252856ef29e040e36281a6298dbe21" name="avahi-qt4-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="078958ffd164e6a2f2c572a40be446f8fe65862908ad978c597e51d5cb0a2ba9" name="avahi-qt4-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="418d44f12628b936a780c00776855c89ee5c6faf10f004e4ac1250889617170c" name="avahi-qt4-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1204718400">- Create new spec file to avoid dependency of avahi core on Qt.</changelog>
  <changelog author="coolo@suse.de" date="1210507200">- fix rename of xxbit packages</changelog>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313150400">- Fixed typo in avahi-qt4.spec.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="d7abd517b53a12314a8f0426467211655fa74ad7366ee13b419efed37f081c1d" name="avahi-utils-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="6235ff5f5d311e660d298b33ee2589b84f585f717ab7051b21ce61c0d94a5c9d" name="avahi-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1453723200">- No longer install sysv services: the systemd services have been
  installed for a long time already and are masking the sysv
  scripts; those scripts existance only add confusion (boo#959908).</changelog>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
</package>
<package pkgid="0f80025f46749dde2e65f83379fc96d0f235f8dcdcd4b1e2a6e04e2637cbdd59" name="avahi-utils-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="ecc70765a0d29662d1165fd647fe8ff465afe58e000194a8ac7750deeeb7b8b3" name="avahi-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
</package>
<package pkgid="0d985bb5af592d6304d346553fe8537f9ca452ea0fcf61e5f9b1d67fb4891bcb" name="avahi-utils-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="6851058e0b75fbc5918b74d83780ec25581a76624829b8d2b7db3473487855ab" name="avahi-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="alarrosa@suse.com" date="1463745600">- Update to GNOME 3.20.2 (Fate#318572)
- Added License field in spec file.</changelog>
  <changelog author="mgorse@suse.com" date="1466683200">- Add avahi-0.6.31-systemd-order.patch: start after NM/wicked, to
  ensure resolv.conf is present (bsc#982317, gh#lathiat/avahi#59).</changelog>
  <changelog author="dimstar@opensuse.org" date="1466683201">- Update to version 0.6.32:
  + Don't log warnings about invalid packets, commonly triggered by
    Windows 10 systems.
  + Fix issue with bad packet size estimation, causing probes to
    continuously be sent when hosting large numbers of services.
  + Fix build on Solaris/SmartOS (filio.h issue).
  + Fix build on FreeBSD (PCAP_D_IN issue).
  + Fix debug output with libdaemon &gt;= 0.14.
  + avahi_server_set_browse_domains now correctly uses the provided
    list, instead of re-using the list from the configuration file.
  + Set nl_pid to 0, this will automatically assign the value and
    prevent conflicts per netlink(7). (Bug #334).
  + Check for netlink pid=0 (kernel) instead of uid=0, which works
    correctly with network &amp; user namespaces.
  + Fix reversed IFA_LOCAL and IFA_ADDRESS checks (Avahi#355).
  + Don't fail the build on deprecated GTK/GLIB usage.
  + Gracefully fail if SO_REUSEPORT is not available.
  + Minor Python 3 update for the python ServiceTypeDatabase test
    usage of print, should be backwards compatible.
  + avahi-autoipd: Fix incorrect usage of IFLA_RTA instead of
    IFA_RTA which could crash on ARM (Closes: gh#lathiat/avahi#42).
- Drop upstream fixed patches:
  + avahi-unicastdomains.patch
  + avahi-gtk_box_new.patch
  + avahi-fix-mkdir.diff
  + avahi-enable-ipv6.patch
  + avahi-reserve-space-for-record-data-when-size-e.patch
- Rebase avahi-0.6.31-invalid-packet.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="zaitor@opensuse.org" date="1511956800">- Update to version 0.7:
  + The Avahi 0.7 release brings two new features, binary TXT
    records in XML service files and the ability to start the
    gobject client in a custom context.
  + New Features:
  - Add support for binary values in TXT records in XML service
    files by specifying
    value-format="text|binary-hex|binary-base64". If not
    specified, defaults to the normal value of "text" (thus
    backwards compatible).
  - avahi-gobject: Allow starting the client in a custom
    GMainContext by passing context to ga_client_start_in_context
    instead of ga_client_start (avahi-gobject minor version has
    been incremented).
  + Notable Changes:
  - avahi-daemon: Remove all default rlimits from
    avahi-daemon.conf, as two main problems happened with firstly
    rlimit-nproc causing avahi to fail when started in a
    container without user namespaces and secondly because memory
    rlimits were causing avahi to crash in some cases. Leave it
    up to the init system to impose any modified limits instead.
    It is recommend to ship this change in distribution default
    config files.
  - avahi-common: Fix watch cleanup issue in watch_free
  - avahi-discover (python): Updated for Python3 &amp; GTK3
  - avahi-autoipd:
    . Clear previously set address before binding a new one.
    . Fix dhclient hooks to check for avahi-autoipd before
    running.
  - build: Move default rundir from /var/run to /run as per
    modern system setups.
  + Other Changes:
  - build:
    . Fix the printed value of "Building libavahi-client" in
    ./configure.
    . autogen.sh improved to work when called from another
    directory.
    . Fix warnings when compiling against musl libc.
  - avahi-compat-libdns_sd: Fix incorrect URL in warnings.
  - service-type-database: Add new service Types: _ipps._tcp,
    _xpra._tcp.
  - avahi-dnsconfd: Update manpage with the correct action script
    name.
  - avahi-gobject:
    . Use the correct shared library name in AvahiCore-0.6.gir
    . Fix build failing under some locales.
  - avahi-common/dbus-watch-glue.c: remove Unneeded semicolon.
  - Update gentoo init scripts for newer openrc version.
  + Updated translations.
- Drop avahi-empty-share-dir.patch, avahi-gir-fixup.patch,
  avahi-move-everything-to-run.patch and avahi-outdated-URL.patch:
  Fixed upstream.
- Drop systemd_requires macro: on a machine managed by systemd, we
  don't have to require it. If the machine/container is not managed
  by systemd, we don't want to require it.
- Add pkgconfig(pygobject-3.0) BuildRequires: New dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519041600">- Use SPDX3.0 license tags and package COPYING as %license.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Modernize spec file by calling spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Rename %*soname to %*sover to better reflect its use.</changelog>
  <changelog author="mgorse@suse.com" date="1521028800">- Add avahi-0.7-python3.patch: Port to python 3 (bsc#1076402).
- Build python bindings against python 3, rather than python 2;
- Python-avahi is now python3-avahi, and python-avahi-gtk is now
  python3-avahi-gtk
- Obsolete the python 2 packages
- Replace python_sitelib with python3_sitelib in %files, and add
  __pycache__.</changelog>
  <changelog author="tchvatal@suse.com" date="1521720000">- Drop the qt3 parts</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1546603200">- Replace avahi-0.7-python3.patch with avahi-0.7-dbm.patch: use
  what is upstream (boo#1110668).
- Add avahi-0.7-encode-strings-as-utf8.patch: encode strings as
  UTF-8 (boo#1110668).
- Add avahi-0.7-python3-bookmarks.patch: make bookmarks python 3
  compatible (boo#1110668).
- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).
- Drop avahi-0.6.31-invalid-packet.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1546862400">- Drop avahi-daemon-increase-rlimit.patch: rlimits are no longer
  set by default.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="9f6419e1e0b43bdfca5fb71367a0c97301d0d83adfe9095ff0acebaeb2d00864" name="avahi-utils-gtk-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="5b9e3303f941a24addb309aa71a702e1781a932a3b090ce76d3a2d24e617f933" name="avahi-utils-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="cf7b955a57aa437091292c4cce05f534988bfc3af3ebaadcab03b22579c4dbc6" name="avahi-utils-gtk-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="c5fcd28910d5041816d513c9a8f8cf9670aa4c6aa4b72639219083540431daef" name="avahi-utils-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="9fc97600d1ad9f94e65bb19fe6a30ff16cddd70df93aa7614448d90912b16c32" name="avahi-utils-gtk-debuginfo" arch="i586">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="fb8b9af8a0d2bd8384538703867eea1bb21162ac6b5c1b59b8da33557a8577ae" name="avahi-utils-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7" rel="lp152.3.9.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="4bf270cad8035c78ebacb7d4c315a5c2bdf2001fb773bbdffe2705b611bc4bcc" name="barrier-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp152.3.3.1"/>
  <changelog author="oholecek@suse.com" date="1471521600">- Update to 1.8.2
  * Bug #3044 - Unable to drag-select in MS Office
  * Bug #4768 - Copy paste causes 'server is dead' error on switching
  * Bug #4792 - Server logging crashes when switching with clipboard data
  * Bug #2975 - Middle click does not close Chrome tab on Mac client
  * Bug #5087 - Linux client fails to start due to invalid cursor size
  * Bug #5471 - Serial key textbox on activation screen overflows on Mac
  * Bug #4836 - Stop button resets to Start when settings dialog canceled
  * Enhancement #5277 - Auto restart service when synwinhk.dll fails on Windows
  * Enhancement #4913 - Future-proof GUI login by using newer auth URL
  * Enhancement #4922 - Add --enable-crypto argument to help text
  * Enhancement #5299 - High resolution App icon on Mac
  * Enhancement #4894 - Improve grammar in connection notification dialog
- Drop patch synergy-1.5.0-test.patch
- Remove src/test/CMakeLists.txt to disable tests building</changelog>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove gtest-devel dependency and use bundled one</changelog>
  <changelog author="oholecek@suse.com" date="1471608001">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
</package>
<package pkgid="ca5dc37257d300a7d0c77fbe64a87f7ff641e9216c605cd5b3373ee5abcbec5c" name="barrier-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.3" rel="lp152.3.3.1"/>
  <changelog author="oholecek@suse.com" date="1471521600">- Update to 1.8.2
  * Bug #3044 - Unable to drag-select in MS Office
  * Bug #4768 - Copy paste causes 'server is dead' error on switching
  * Bug #4792 - Server logging crashes when switching with clipboard data
  * Bug #2975 - Middle click does not close Chrome tab on Mac client
  * Bug #5087 - Linux client fails to start due to invalid cursor size
  * Bug #5471 - Serial key textbox on activation screen overflows on Mac
  * Bug #4836 - Stop button resets to Start when settings dialog canceled
  * Enhancement #5277 - Auto restart service when synwinhk.dll fails on Windows
  * Enhancement #4913 - Future-proof GUI login by using newer auth URL
  * Enhancement #4922 - Add --enable-crypto argument to help text
  * Enhancement #5299 - High resolution App icon on Mac
  * Enhancement #4894 - Improve grammar in connection notification dialog
- Drop patch synergy-1.5.0-test.patch
- Remove src/test/CMakeLists.txt to disable tests building</changelog>
  <changelog author="oholecek@suse.com" date="1471608000">- Remove gtest-devel dependency and use bundled one</changelog>
  <changelog author="oholecek@suse.com" date="1471608001">- Remove support for old versions
- Remove hack to disable tests and use bundled gmock</changelog>
  <changelog author="sflees@suse.de" date="1485172800">- Update to 1.8.7
  - 1.8.7 changes
  * Bug #5784 - Edition changes when reopening GUI
  - 1.8.6 changes
  * Bug #5186 - Cursor stuck on client when using multi-DPI server
  * Bug #5722 - Malformed serial key in registry will crash GUI on startup
  * Bug #5752 - Tab order is incorrect on Settings dialog
  - 1.8.5 changes
  * Bug #5680 - Server crashes when disconnecting SSL clients
  * Feature #5707 - User upgrade statistics
  - 1.8.4 changes
  * Bug #4420 When XRandR adds a screen, it is inaccessible
  * Bug #5603 Activation notification depends on existence of /etc/os-release
  * Bug #5624 Update notification sometimes requests a downgrade
  * Bug #5329 Current date is shown for build date in the about dialog
  * Bug #5640 Synergy branding is inconsistent across platforms
  * Enhancement #5617 Remove redundant plugin infrastructure
  * Enhancement #5627 Move SSL certificate generation to main window
  * Enhancement #5628 Move SSL implementation into core binary
  * Enhancement #5629 Move activation from wizard into new dialog window
  - 1.8.3 changes
  * Bug #4740 - Linux client crashes with "Assertion '!m_open' failed"
  * Bug #4879 - Memory leak caused by IpcReader
  * Bug #5373 - Tab behaves like shift tab on client
  * Bug #5502 - Copy and paste from server to client doesn't work
  * Enhancement #123 - Option to disable clipboard sharing</changelog>
  <changelog author="oholecek@suse.com" date="1485864000">- Remove source URL synergy prefix</changelog>
  <changelog author="martin.wilck@suse.com" date="1486382400">- Fix screen size calculation with XRandR enabled (boo#1023635)
  * Added 0001-XRandR-fix-screen-size-calculation.patch</changelog>
  <changelog author="werner@suse.de" date="1493812800">- Update to 1.8.8
  * Bug #5196 - Some keys on Korean and Japanese keyboards have the same keycode
  * Bug #5578 - Pressing Hangul key results in alt+'a'
  * Bug #5785 - Can't switch screens when cursor is in a corner
  * Bug #3992 - macOS: Dragging is broken in Unity 3D
  * Bug #5075 - macOS: Build fails on macOS 10.9 due to unknown compiler flag
  * Bug #5809 - macOS: No version number is shown in the App Info dialog
  * Bug #3197 - Linux: switchDoubleTap option is not working
  * Bug #4477 - Linux: Mouse buttons higher than id 10 result in crash
  * Bug #5832 - Linux: Screen size misdetected on multi-monitor display
  * Enhancement #4504 - Improved Korean language description
  * Enhancement #5525 - Added support for precise screen positioning in config file
  * Enhancement #4290 - Windows: Removed annoying alt+print screen functionality
- Remove patch 0001-XRandR-fix-screen-size-calculation.patch
  as now upstream</changelog>
  <changelog author="oholecek@suse.com" date="1514980800">- Add patch 0001-OpenSSL-1.1.0-build-fix.patch taken from upstream</changelog>
  <changelog author="aloisio@gmx.com" date="1519128000">- Switched build to Qt5
- Enabled PIE</changelog>
  <changelog author="robert.munteanu@gmail.com" date="1519473600">- Add add-support-for-latin-s-and-t-with-comma-below.patch,
  submitted upstream at https://github.com/symless/synergy-core/pull/6261</changelog>
  <changelog author="oholecek@suse.com" date="1528804800">- Update to 1.9.1
  * Fixed issue with screen resolution detection during sleep on macOS
  * Updated OpenSSL to v1.0.2o
- Update to 1.9.0
  * Ported UI to Qt 5
  * Moved GUI build script to CMake
  * Build with MSVC 2015
  * Removal of deprecated 'hm.sh' script and toolchains
- Add Provides and Obsoletes synergy-core (new upstream name)
- Remove patch 0001-OpenSSL-1.1.0-build-fix.patch as now upstream
- Add patch qt5_fixes.patch to fix building under QT5.11
- Refresh patch synergy-1.5.0-pthread.patch
- Refresh patch synergy-1.5.0-disable-version-check.patch</changelog>
  <changelog author="oholecek@suse.com" date="1528891200">- Fix source download URL
  - s/synergy/synergy-core/</changelog>
  <changelog author="oss@c-mauderer.de" date="1537099200">- Adapt package for barrier.</changelog>
  <changelog author="oss@c-mauderer.de" date="1541246400">- Update to 2.1.2.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1563278400">- Update to 2.3.0</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1575979200">- Update to 2.3.2
  + Re-implement patch for horizontal scrolling and extra mouse
    buttons
  + Fix memory leak during SSL socket shutdown
  + Fix retry timer not being unregistered properly
  + Use standard mutex APIs instead of the home-grown wrapper
  + Use explicit memory ownership in SocketMultiplexer
  + Merged mouse drift fix from synergy-core</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1586260800">- Drop SUSE Firewall declarations
- Do not use service but just utilize the download URL
- Provide and obsolete synergy as we actual fork of it</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1587124800">- Drop Provides and Obsoletes for synergy (for now) not quite ready
  to migrate users yet.</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1605268800">- Updated to version 2.3.3:
  * This release fixes a lot of bugs, and adds several
    enhancmeents, such as testing. Specific mentions
    (gh#debauchee/barrier#488 and gh#debauchee/barrier#487).
- Add ChangeLogs to package.
- Add gmock and gtest to build requires.
- Add barrier-use-system-includes.patch: Use the system gtest and
  gmock files for testing.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1605528000">- Fix url for Source</changelog>
</package>
<package pkgid="56e9806a681dc71594f8bbe6a43f2caa4af93fe632cf94c3e024c1e57aae7a63" name="bash-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bf08d588df21a0d02b61e04eca8ce2addef4deb2cd379eca71fa103d755b6f6d" name="bash-debuginfo" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="00a3d83a35eb3dbab2b088b192aa253f1379b8f35cf2f3bea224695207b99a7d" name="bash-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="f62c1bb69ded69b721a670cefd487b178d5f414287bb47ac97b08685b991069e" name="bash-debugsource" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="6434fd32edd70ae6807b3ee15af215e75d435674b6c1d85296da578c7112f8d9" name="bash-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="e27f1f1383840cf8557a52d293dba92b1cfc445f82339e05a35e9978ded9be1e" name="bash-loadables-debuginfo" arch="i586">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="cac2dcc905fd2663ee76d4b187b2974d85db364bbe0e9dd71bfcc56558a865b8" name="bash-loadables-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4" rel="lp152.12.3.1"/>
  <changelog author="werner@suse.de" date="1493121600">- Do not throw info and manual pages away</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Simplify patch readline-5.2-conf.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1495627200">- Allow to disable do_profiling in builds (related to boo#1040589)</changelog>
  <changelog author="bwiedemann@suse.com" date="1495713600">- Make build reproducible in spite of profile based optimizations (boo#1040589)</changelog>
  <changelog author="werner@suse.de" date="1506340800">- Modify patch bash-4.4.dif to let bashline.h install as well as
  this header file is included by general.h due to the same patch
  (boo#1060069)</changelog>
  <changelog author="werner@suse.de" date="1512734400">- Enable multibyte characters by default</changelog>
  <changelog author="werner@suse.de" date="1516795200">- Modify patch bash-4.3-pathtemp.patch to avoid crash at full
  file system (boo#1076909)</changelog>
  <changelog author="avindra@opensuse.org" date="1517313600">- Add patches 13-18 to bash-4.4-patches.tar.bz2
  * 13: If a here-document contains a command substitution, the
    command substitution can get access to the file descriptor used
    to write the here-document.
  * 14: Under some circumstances, functions that return via the
    `return' builtin do not clean up memory they allocated to keep
    track of FIFOs.
  * 15: Process substitution can leak internal quoting to the
    parser in the invoked subshell.
  * 16: Bash can perform trap processing while reading command
    substitution output instead of waiting until the command
    completes.
  * 17: There is a memory leak when `read -e' is used to read a
    line using readline.
  * 18: Under certain circumstances (e.g., reading from /dev/zero),
    read(2) will not return -1 even when interrupted by a signal.
    The read builtin needs to check for signals in this case.
- partial cleanup with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="f7dff08b1a494a953e2389d2161bcbeca0a09a5a6bd2c258ef15802e050a6841" name="bbswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="751b254fe01896a09e0afce35eab38c1ef6e2fd90ed660b9451406927d9d004e" name="bbswitch-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="b5ce577c7c26fded4199802a143364a91d00a54074956aa4cda4a8b9985e8e52" name="bbswitch-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="fc18cd0f7d22d45c3b22a6a1dc4b9c1b9a0de95627b84300544a31d783fbcf03" name="bbswitch-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.69" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="5798fa4e73c7fe1eefc06e1e7ac1f7e690d0c72b8db4163dc9f6906ca48c87d4" name="bbswitch-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="53409615b0411e4b253187302ed0286ec1dfee8666ffdb205b9acfe9aaa77f39" name="bbswitch-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8_k5.3.18_lp152.69" rel="lp152.6.6.1"/>
  <changelog author="tchvatal@suse.com" date="1401883200">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585915200">- Add patch to build with kernel 5.6
  * 0001-Update-proc_create_call-for-5.6-kernel.patch</changelog>
</package>
<package pkgid="abdb4a2829bc218cd2977e1e05747db147fb51892b1bff7aef927f84e34dfc2c" name="bcache-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="95c545f97db6cf39ce98eeeacf4e70ba9763fda23a033178dc9d93a39041d82c" name="bcache-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="be850c4d21cf3e062e9f49ed1c6a40820be74cea5d7744db1c3775fcfa2c3349" name="bcache-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="fa4eccc8941c45924ed6caaf77c5129474addf6e200d25c093dcd305aa470b48" name="bcache-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="3f062f852ca5eaffeaa1870f652dfbd6f8a6b05e5df6a4a0f32eab595bffb824" name="bcache-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="7b9a7e1890d6b3bd37847635f1c2e1767dfed50c6937ede334aee3bb4d5f44c7" name="bcache-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="6cf884e42e8b21f4b812bb340107daa71dee59dc04a3e8e3ce1f2e16e014fea4" name="bcache-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="742c94714a4919bbb0bdea6272d217fbae47db2304a3db3e1e026494796f5bcb" name="bcache-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="1be16d6895bc579ce9eaab1c1cc8cdd7445767a1881c6838b8b515e30a9540c7" name="bcache-tools-debugsource" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="b9650179f31597e1067031a53d4a5f5a440b7bc41c7d068d028ec3142d5b0b46" name="bcache-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.12.1"/>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1614168000">- bcache-tools: Update super block version in bch_set_feature_*
  routines (jsc#SLE-9807)
  0028-bcache-tools-Update-super-block-version-in-bch_set_f.patch</changelog>
</package>
<package pkgid="65c4f7af81ee7bdb8b362a35fab83b47809b6b6c61c266af9b60f39d566007af" name="bcache-tools-debugsource" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="7cd86b924edbb82886a356f50cee4594c71dd8170c63f10989855b033b61bd99" name="bcache-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1375876800">- Update to new snapshot 0.1.g71
  * Support for superblocks up to version 4</changelog>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
</package>
<package pkgid="c0b0c643f7165a960af2bbd145db73a5a6ceefab71cd7ab8e4650c99a96383f3" name="bcache-tools-debugsource" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="312ba48db0ee76669d1bd5d76643b7ff9f7f93b0256c42a4a330a6f9d92fe6c8" name="bcache-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.6.1"/>
  <changelog author="oneukum@suse.com" date="1395230400">- Move bcache rule from position 61 to position 74
  (bnc#868938)</changelog>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
</package>
<package pkgid="00f87054999bb8ea713db4b5d4fac305bcd33f16af37a453ffe4eaedd8dd03b5" name="bcache-tools-debugsource" arch="i586">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="f0434dde3219ab8ba641abad58a776f6a6215c8309ee62b21b9d433c53ff0817" name="bcache-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1" rel="lp152.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1396612800">- Update to new upstream release 0.9
  * Run probe-bcache a little later in the udev rule sequence
  (moving from position 61 to 69), fixing a machine hang on
  bcache reassemble (bnc#868938)
- Add 0001-build-remove-inline-keyword-from-crc64.patch, this is
  a build fix.</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- removed unnecessary openssl-devel buildrequires</changelog>
  <changelog author="jengelh@inai.de" date="1427457600">- Update to new upstream release 1.0.8
  * bcache-register is now a C program
- Add 0001-udev-do-not-rely-on-DRIVER-variable.patch to entirely
  disable /dev/bcache symlinks for now, rather than have it
  half-working [bnc#880858]</changelog>
  <changelog author="colyli@suse.com" date="1536926400">- Update bcache-tools to 1.0.9, this is required by yast2 bcache module
  development. In this version a new program named "bcache" is added,
  by this program people may avoid many operations on sysfs entries.
  (bsc#1109460)
- Remove the following patche since it is in upstream,
  - 0001-build-remove-inline-keyword-from-crc64.patch
- Rename prefix of
  0001-udev-do-not-rely-on-DRIVER-variable.patch
  to a SUSE specific patch prefix
  1001-udev-do-not-rely-on-DRIVER-variable.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566475200">- Add a _service file for the tarball from outer space.
- Shift the version number to 1.0.8+suse5 because there has never
  been a 1.0.9 release.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1579003200">- Update to tag 1.1
  * add blkdiscard for cache dev
  * add 'label' field
  * allow users to set label for device</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1599566400">- Cure fallout from %_libexecdir change [boo#1174075, boo#1176244]</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1602590400">- Remove dependence of smartcols bcache-tools.spec, bcache-tools
  code doesn't need it now. (jsc#SLE-9807)
- Remove 1001-udev-do-not-rely-on-DRIVER-variable.patch because
  we have 0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
  to provide static UUIDs. (jsc#SLE-9807)
- bcache-tools: add man page bcache-status.8 (jsc#SLE-9807)
  0017-bcache-tools-add-man-page-bcache-status.8.patch
- bcache-tools: add bcache-status (jsc#SLE-9807)
  0016-bcache-tools-add-bcache-status.patch
- bcache-tools: make: permit only one cache device to be
  specified (jsc#SLE-9807)
  0015-bcache-tools-make-permit-only-one-cache-device-to-be.patch
- bcache-tools: Remove the dependency on libsmartcols
  (jsc#SLE-9807)
  0014-bcache-tools-Remove-the-dependency-on-libsmartcols.patch
- bcache-tools: Export CACHED_UUID and CACHED_LABEL
  (jsc#SLE-9807)
  0013-bcache-tools-Export-CACHED_UUID-and-CACHED_LABEL.patch
- bcache-tools: Fix potential coredump issues (jsc#SLE-9807)
  0012-bcache-tools-Fix-potential-coredump-issues.patch
- bcache-tools: add print_cache_set_supported_feature_sets()
  in lib.c (jsc#SLE-9807)
  0011-bcache-tools-add-print_cache_set_supported_feature_s.patch
- bcache-tools: add large_bucket incompat feature (jsc#SLE-9807)
  0010-bcache-tools-add-large_bucket-incompat-feature.patch
- bcache-tools: upgrade super block versions for feature sets
  (jsc#SLE-9807)
  0009-bcache-tools-upgrade-super-block-versions-for-featur.patch
- bcache-tools: define separated super block for in-memory and
  on-disk format (jsc#SLE-9807)
  0008-bcache-tools-define-separated-super-block-for-in-mem.patch
- bcache-tools: add to_cache_sb() and to_cache_sb_disk()
  (jsc#SLE-9807)
  0007-bcache-tools-add-to_cache_sb-and-to_cache_sb_disk.patch
- bcache-tools: list.h: only define offsetof() when it is
  undefined (jsc#SLE-9807)
  0006-bcache-tools-list.h-only-define-offsetof-when-it-is-.patch
- bcache-tools: bitwise.h: more swap bitwise for different
  CPU endians (jsc#SLE-9807)
  0005-bcache-tools-bitwise.h-more-swap-bitwise-for-differe.patch
- bcache-tools: add struct cache_sb_disk into bcache.h (jsc#SLE-9807)
  0004-bcache-tools-add-struct-cache_sb_disk-into-bcache.h.patch
- bcache-tools: convert writeback to writethrough mode for zoned
  backing device (jsc#SLE-9807)
  0003-bcache-tools-convert-writeback-to-writethrough-mode-.patch
- bcache-tools: add is_zoned_device() (jsc#SLE-9807)
  0002-bcache-tools-add-is_zoned_device.patch
- bcache-tools: set zoned size aligned data_offset on backing device
  for zoned devive (jsc#SLE-9807)
  0001-bcache-tools-set-zoned-size-aligned-data_offset-on-b.patch</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1605441600">- Makefile: install bcache-status (jsc#SLE-9807, bsc#1178725)
  0018-Makefile-install-bcache-status.patch
- bcache-tools.spec: add '_sbindir/bcache-status' for the new added
  bcache-status python script (jsc#SLE-9807, bsc#1178725)</changelog>
  <changelog author="Coly Li &lt;colyli@suse.com&gt;" date="1609848000">- bcache.h: fix typo from SUUP to SUPP (jsc#SLE-9807)
  0019-bcache.h-fix-typo-from-SUUP-to-SUPP.patch
- bcache-tools: only call set_bucket_size() for cache device
  (jsc#SLE-9807)
  0020-bcache-tools-only-call-set_bucket_size-for-cache-dev.patch
- bcache.h: add BCH_FEATURE_INCOMPAT_LARGE_BUCKET to
  BCH_FEATURE_INCOMPAT_SUPP (jsc#SLE-9807)
  0021-bcache.h-add-BCH_FEATURE_INCOMPAT_LARGE_BUCKET-to-BC.patch
- bcache-tools: check incompatible feature set (jsc#SLE-9807)
  0022-bcache-tools-check-incompatible-feature-set.patch
- bcache-tools: introduce BCH_FEATURE_INCOMPAT_LOG_LARGE_BUCKET_SIZE
  for large bucket (jsc#SLE-9807)
  0023-bcache-tools-introduce-BCH_FEATURE_INCOMPAT_LOG_LARG.patch
- bcache-tools: display obsoleted bucket size configuration
  (jsc#SLE-9807)
  0024-bcache-tools-display-obsoleted-bucket-size-configura.patch
- bcache-tools: recover the missing sb.csum for showing bcache device
  super block (jsc#SLE-9807)
  0025-bcache-tools-recover-the-missing-sb.csum-for-showing.patch
- bcache-tools: only call to_cache_sb() for bcache device
  in may_add_item() (jsc#SLE-9807)
  0026-bcache-tools-only-call-to_cache_sb-for-bcache-device.patch
- bcache-tools: improve column alignment for "bcache show
  - m" output (jsc#SLE-9807)
  0027-bcache-tools-improve-column-alignment-for-bcache-sho.patch</changelog>
</package>
<package pkgid="0c61ad47f9d3b65046099be25e4bf24b4820a521d7fc83d87fe02697014b560d" name="bcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="cf55af0da421d23c599f96e3cab3595c76f447b0cdbf1abd8a83a21bb8362579" name="bcc-debugsource" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="e6cb0471bf0e665f90544993da57b41988ff7355e7cdd03789cefd3b68c471fa" name="bcc-lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1519214400">- Add bcc-bsc1080085-backport-bytes-strings.patch and
  bcc-bsc1080085-fix-cachetop-py3-str.patch to fix the python3
  compatibility issue (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521115200">- Add bcc-bsc1080085-import-readline-from-lib.patch to read the
  symbol "readline" from libreadline. (bsc#1080085)
- Add bcc-bsc1080085-detect-slab-for-slabratetop.patch to detect
  the current memory allocator and include the correct header.
  (bsc#1080085)
- Make bcc-tools require audit since syscount.py needs ausyscall
  to get the syscall list. (bsc#1080085)</changelog>
  <changelog author="glin@suse.com" date="1521547200">- Only enable bcc-lua for openSUSE (bsc#1085810)
- Amend the spec file to enable bps only for Tumbleweed
  (bsc#1085403)</changelog>
  <changelog author="glin@suse.com" date="1522152000">- Add bcc-bsc1080085-fix-syscount-str.patch to convert ausyscall
  output to string (bsc#1080085)</changelog>
  <changelog author="msrb@suse.com" date="1523016000">- Add bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  to fix build with LLVM6.</changelog>
  <changelog author="glin@suse.com" date="1529409600">- Update to 0.6.0
- Add upstream patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Drop upstreamed patches
  + bcc-fix-build-for-llvm-5.0.1.patch
  + bcc-fix-a-compilation-error-with-latest-llvm-clang-trunk.patch
  + bcc-bsc1080085-backport-bytes-strings.patch
  + bcc-bsc1080085-detect-slab-for-slabratetop.patch
  + bcc-bsc1080085-fix-cachetop-py3-str.patch
  + bcc-bsc1080085-fix-syscount-str.patch
- Refresh bcc-python3.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1539259200">- Update to 0.7.0
- Refresh bcc-python3.patch
- Drop upstreamed patches
  + bcc-bpf_probe_read-fixes.patch
  + bcc-fix-ext4slower.patch
  + bcc-fix-tcpaccept.patch
  + bcc-prevent-bpf_probe_read-MemberExpre-rewrite.patch
- Remove bcc-bsc1065593-llvm4-hack.patch and set ENABLE_LLVM_SHARED
- Remove COPYRIGHT.txt which was dropped by upstream</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543147200">- Switch to %license over %doc for licenses.
- Add upstream patch for bpftrace builds. boo#1117223
  + bsc-install-additional-headers.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1547553600">- Update to 0.8.0.
- Remove upstreamed patches, and un-needed ones.
  - bcc-check_int128.patch
  - bcc-python3.patch (replaced with sed pipeline)
  - bcc-install-additional-headers.patch (bpftrace has fixes now)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547726400">- Remove unnecessary use of xargs.
- Remove idempotent %if..%endif guards.
- Update descriptions for grammar.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1551960000">- Correct the library version</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552305600">- Update to 0.9.0
- Add libbpf-5beb8a2ebffd.tar.gz since libbpf became a submodule
  of bcc
- Drop bcc-bsc1080085-import-readline-from-lib.patch
  + Upstream provide an additional argutment for the shared
    readline</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1556020800">- Add upstream patches to improve python3 compatibility
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1559649600">- Update to 0.10.0
  + Support for kernel up to 5.1
  + corresponding libbpf submodule release is v0.0.3
  + support for reading kernel headers from /proc
  + libbpf.{a,so} renamed to libcc_bpf.{a,so}
  + new common options for some tools
  + new tool: drsnoop
  + s390 USDT support
- Update libbpf to 0.0.3
  + Also add the source url of libbpf
- Drop upstreamed patches
  + 0001-fix-string-re-being-used-on-bytes-for-Python-3.patch
  + 0001-Convert-bytes-to-string-for-re-in-get_tracepoints.patch
  + 0001-tools-don-t-mix-print-end-with-printb.patch
- Drop bcc-libbpf0 since upstream dropped the so file
- Enable SMP build flags since we don't need static clang anymore</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571054400">- Update to 0.11.0
  + Support for kernel up to 5.3
  + Corresponding libbpf submodule release is v0.0.5
  + Fix USDT issue with multi-threaded applications
  + Fixed the early return behavior of lookup_or_init
  + Support for nic hardware offload
  + Fixed and Enabled Travis CI
  + A lot of tools change with added new options, etc.
- Update libbpf to 0.0.5
  + bpf_btf_get_next_id() API to iterate over system's BTF objects
  + libbpf_set_print() now returns previously set print callback
  + libbpf versioning, build, and packaging improvements
  + convenience helpers for working with BTF types
  + experimental BPF CO-RE relocation support
  + various AF_XDP fixes and enhancements
  + BTF-defined maps
  + tracing attachment APIs and bpf_link abstraction
  + perf buffer API
  + BTF-to-C conversion API
  + btf__parse_elf API for loading .BTF from ELF files
  + libbpf_num_possible_cpus() added
  + passing through prog_flags through bpf_object__open
  + new attach types detection added
- Use version for REVISION instead of libversion</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572523200">- Add support-clang9.patch and apply it for llvm &gt;= 9
- Fix sed call for python</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1574164800">- Enable USDT for s390x since 0.10.0 already supports it</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1576497600">- Update to 0.12.0
  + Support for kernel up to 5.4
  + klockstat tool to track kernel mutex lock statistics
  + cmake option CMAKE_USE_LIBBPF_PACKAGE to build a bcc shared
    library
  + linking with distro libbpf_static.a
  + new map.lookup_or_try_init() API to remove hidden return in
    map.lookup_or_init()
  + BPF_ARRAY_OF_MAPS and BPF_HASH_OF_MAPS support
  + support symbol offset for uprobe in both C++ and python API,
    kprobe already has the support
  + bug fixes for trace.py, tcpretrans.py, runqslower.py, etc.
- Update libbpf to 0.0.6
  + New features
  - new extensible bpf_object__open_{file,mem} APIs and
    DECLARE_LIBBPF_OPTS() macro to go with them
  - bpf_helpers.h, bpf_endian.h, and bpf_tracing.h are now
    distributed with libbpf
  - BPF CO-RE: added field size, field existence, and bitfield
    relocation support
  - BPF CO-RE: BPF_CORE_READ(), bpf_core_field_exists(),
    bpf_core_field_size() and other BPF CO-RE related helpers
    available through bpf_core_read.h header
  - bpf_object__open() API now auto-detects program type from
    its section name
  - BPF_PROG_TRACING programs support (incuding BTF-typed raw
    tracepoints, fentry/fexit programs)
  - mmap() support for BPF global variables
  - declarative map pinning support added
  - probe_read_{user,kernel}[_str]() BPF helpers added
  - bpf_get_link_xdp_info() function to get more XDP information
    added
  - a bunch of other AF_XDP changes
  + Usability improvements
  - no need for int version SEC('version') = 1; anymore
  - raw_tp/tp and uprobe/uretprobe section prefixes added
  - new bpf_program__get_{type,expected_attach_type} getters
  - preserve error code on program load failure
  + Fixes
  - btf_dump padding handling
  - bpf_object__name() returning name, not path
  - ELF section handling off-by-one bug fix
  - mem leak/double free fix in BPF program relocation code
- Replace lua51-luajit-devel with luajit-devel to reflect the
  recent change in Factory (bsc#1159191)
- Add bcc-fix-test_map_in_map.patch to fix the build error in the
  test case</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1591272000">- Add bcc-bsc1172493-Make-reading-blacklist-optional.patch to make
  reading kprobe blacklist optional so that the bcc scripts can
  work with the locked down kernel (bsc#1172493)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617019200">- Add bcc-bsc1183399-make-no-pie-optional.patch and set
  ENABLE_NO_PIE to "OFF" to enable PIE for bcc-lua if lua support
  is enabled (bsc#1183399)</changelog>
</package>
<package pkgid="0095ea1712b76b1477fa10250442853727701da85d27fbd064a81947ab57f173" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="5f5cf43c025060dba31da9b932423d07bcbd5f4adddedfa160bda2058065e56f" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="b62a96e1ff2a7d83472ba635684d8f44b0e3da77c663b7d29148b52f07554c6d" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="bef783c28444172162a42bba70dd1d85bd5b52ab23fd97f3b25e16db06cd62bc" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="2f5b9d713741cc78539477ea127086a79a0d694bba39d4006651bffad729f04d" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="935a0d13b1124f236e06c1794a8f4622783a5d9e0d936c99367142e54ef9b3f9" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ea0336347e50ce0314a5e206c47b0f2a7f69ef93b430f28c34a7ef9ef5968c44" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="a3b61857e263a4528b2c95df81a584904fb0cde82e4024f7df248252f2d4b7d5" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="ff513bc17c66496cc9a5d49b2bbcb3e7b2594a6b2772459f95f99149f54c1dc6" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="e2ad8655b27269ebacd4af8b9eeb08f48fa636dd24937fe4affe0704ffaff55f" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2b3c18867c97a02a7176f17727d962132e26ca5164381c10edd9f5cddaf1c668" name="bind-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="37b05545061035d4c55c24e445ec598384eb244432e43f503a6b4c810435414e" name="bind-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="a0e882cd4495478997c72b2c37162e68118f6089274b6991751814d23f9855f3" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="882b98a410680ccefd582d69dfae4ab4f1c596e4246977c404b86d3f8b777b8a" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="df342c6f0f4089985508bd21c5fb4b591aec2bf3874222c85e2c1f6a89a49da9" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="aae42d429717b30c081accbeaef5c7c7ab72a2cfb5b84f98c85b69f6bc78ec5f" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="00f4037c5adc06f3c01b2a2e2d101c838d6a82da7c058692632c3d3fe4d89821" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="30c57c88a50830b55f77e40d7f265f6971d49c9bc109b9236b1fd59b28b135b8" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f5c8a503a7b5622943b08794dcbf1ca58fcc9259983a20543a25d785a098e3c2" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="9d79176a47b2cd83b7b96b6d21e26c841f3431ccfc465c398aa7abc4f8d00fd3" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="8fed33ca01b882db975526d088a1ff01d8762b4666183ff3a3e51a1bf0fc9166" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="4d92528d320a7a1640a913d746062d17d8b5bb74b22b68e5fe452ff14f6113b4" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="93ddad28f47bd97720fdc627526b6d022900eb587c4328e36834c84374a4ced3" name="bind-debugsource" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="265a77ec6aef813e2b422959cc21360d02744babc3594ec99fc104bcd7f7a9ff" name="bind-debugsource" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="9c490b0c452d78ccb09fc81d8a41d5f5e12f0168e3138315b2b0aff219fb244d" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="ad057e057fd740ee430e71d6e3c9aa2d73bf785c0795207f87559c8755fdd771" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.12.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
</package>
<package pkgid="249a782d9a045f9cae5b397b75b292901a68393303cfcb59ea7f0e1386bd3d15" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="bc6ca13210c93830e16f42f67e9cc62d4198942bea3a8645999ae468aee0719a" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.13.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
</package>
<package pkgid="98ce75ab69574d4d05e646fa82828bf0d6c8b49015ea35de802a7f958bf42647" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c2810b93e59ecc5399809544e966665d6711f58c38815f8ddf430a17686a61ab" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.19.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="eeb188c134715ee05cee2c5223f46fa9b85116494c6878b72721d3c699d6d7af" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="6d4aefc4e9ff9d45fb20058de20714a001c2df6dd85f1ef13bf59ccb5f56360d" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1562932800">- removal of SuSEfirewall2 service from Factory, since SuSEfirewall2 has been
  replaced by firewalld, see [1].
  [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="439c3a0995c4ca04488b881efb8f8fbd864a30097128183cfbf46ca44486dfc9" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="f359eef900eda7b5f2b52cb55854c5053b213864a2843f5fdabec43407a8d170" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.6.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1573214400">- Upgrade to version 9.14.7
  * removed dnsperf, idn, nslint, perftcpdns, query-loc-0.4.0,
    queryperf, sdb, zkt from contrib as they are not supported
    any more
  * Added support for the GeoIP2 API from MaxMind
  * See CHANGES file in the source RPM.
  * obsoletes bind-CVE-2018-5745.patch (bsc#1126068)
  * obsoletes bind-CVE-2019-6465.patch (bsc#1126069)
  * obsoletes bind-CVE-2018-5743.patch (bsc#1133185)
  * obsoletes bind-CVE-2019-6471.patch (bsc#1138687)
  [bsc#1111722, bsc#1156205, bsc#1126068, bsc#1126069, bsc#1133185,
  bsc#1138687, CVE-2019-6476, CVE-2019-6475,
  CVE-2019-6471, CVE-2018-5743, CVE-2019-6467, CVE-2019-6465,
  CVE-2018-5745, CVE-2018-5744, CVE-2018-5740, CVE-2018-5738,
  CVE-2018-5737, CVE-2018-5736, CVE-2017-3145, CVE-2017-3136,
  configure.in.diff, bind-99-libidn.patch, perl-path.diff,
  bind-sdb-ldap.patch, bind-CVE-2017-3145.patch,
  bug-4697-Restore-workaro]und-for-Microsoft-Windows-T.patch,
  bind-fix-fips.patch, bind-CVE-2018-5745.patch,
  bind-CVE-2019-6465.patch, bind-CVE-2018-5743.patch,
  bind-CVE-2019-6471.patch, CVE-2016-6170, bsc#1018700,
  bsc#1018701, bsc#1018702, bsc#1033466, bsc#1033467, bsc#1033468,
  bsc#1040039, bsc#1047184, bsc#1104129, bsc#906079, bsc#918330,
  bsc#936476, bsc#937028, bsc#939567, bsc#977657, bsc#983505,
  bsc#987866, bsc#989528, fate#320694, fate#324357, bnc#1127583,
  bnc#1127583, bnc#1109160]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
</package>
<package pkgid="2d12ab9e90dbc43ec4159b38fc4c372a336a14300d7f7efc8ac5ae690cf3d387" name="bind-utils-debuginfo" arch="i586">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="f6a6bbd009dff39ad3e89d5ea79c8f0198f6c1c552b95e058b1a730853a39069" name="bind-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="lp152.14.9.1"/>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1574164800">- Upgrade to version 9.14.8:
  * Set a limit on the number of concurrently served pipelined TCP
    queries.
  * Some other bug fixing, see CHANGES file.
  [CVE-2019-6477, bsc#1157051]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1578484800">- Upgrade to bind-9.14.9
  bug fixes and feature improvements</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1582200000">- Upgrade to version 9.16.0
  Major upgrade, see
  https://downloads.isc.org/isc/bind9/9.16.0/RELEASE-NOTES-bind-9.16.0.html
  and
  CHANGES file in the source tree.
  Major functional change:
  * What was set with --with-tuning=large option in older BIND9
    versions is now a default, and a --with-tuning=small option was
    added for small (e.g. OpenWRT) systems.
  * A new "dnssec-policy" option has been added to named.conf to
    implement a key and signing policy (KASP) for zones.
  * The command (and manpage) bind9-config have been dropped as the
    BIND 9 libraries are now purely internal.
  No patches became obsolete through the upgrade.
  [bind-9.16.0.tar.xz]</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1582372800">- Update download urls
- Do not enable geoip on old distros, the geoip db was shut down
  so we need to use geoip2 everywhere</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1584705600">- Upgrade to version 9.16.1
  * UDP network ports used for listening can no longer simultaneously
    be used for sending traffic.
  * The system-provided POSIX Threads read-write lock implementation
    is now used by default instead of the native BIND 9 implementation.
  * Fixed re-signing issues with inline zones which resulted in records
    being re-signed late or not at all.
  [bind-9.16.1.tar.xz]</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584705601">- coreutils are not used in %post, remove Requires.
- Use systemd_ordering instead of hard requiring systemd</changelog>
  <changelog author="Thorsten Kukuk &lt;kukuk@suse.com&gt;" date="1584792000">- Use sysusers.d to create named user
- Have only one package creating the user</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1588939200">- bind needs an accurate clock, so wait for the time-sync.target
  to be reached before starting bind.
  [bsc#1170667, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1589544000">- Upgrade to version bind-9.16.3
  Fixing two security problems:
  * Further limit the number of queries that can be triggered from
    a request.  Root and TLD servers are no longer exempt
    from max-recursion-queries.  Fetches for missing name server
    address records are limited to 4 for any domain. (CVE-2020-8616)
  * Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. (CVE-2020-8617)
  Also
  * Add engine support to OpenSSL EdDSA implementation.
  * Add engine support to OpenSSL ECDSA implementation.
  * Update PKCS#11 EdDSA implementation to PKCS#11 v3.0.
  * Warn about AXFR streams with inconsistent message IDs.
  * Make ISC rwlock implementation the default again.
  For more see CHANGS file in source RPM.
  [CVE-2020-8616, CVE-2020-8617, bsc#1171740, bind-9.16.3.tar.xz]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
</package>
<package pkgid="e532cb5b18e386f09306fc65108eacfc97d2cfecabf3a25b413adfbdb1e46605" name="binutils-debuginfo" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0704bed6dd3c5fe03c63e2a097b231eefa348687365ce1ef4e601c55d61223fd" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="e0295456a244ba31195253d91d3a2490ceba1c7a8aaccfbae098c1b273080898" name="binutils-debuginfo" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="bace18ab6324a788ab3d98309656172a2aac2972a7da34ec511bba096e4099c8" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="72e2c4a867f2eee093692c4808cfa3c7357a716d50f0a5b5d428943b131d1b1a" name="binutils-debugsource" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="257d787fafdca610ea5d80ac99e3715831a1a18093b00740dc3e96707f9db6bd" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="77e0d706e185156d540b9c9225ccef6b58a66f56c20c33c1cee4433df8e115d7" name="binutils-debugsource" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="88a79163be492d6ee8323ac2d21a2e9fee0a46be38826b871097ce26224ef1f2" name="binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="052a7f72ac9c80ed742af4e4cb495fcffa19576d83d82630de339ee3b2a210eb" name="binutils-gold-debuginfo" arch="i586">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b5c7bbe336a78d9962c424c673fc4723ecd070375013c1472fd0c71992ef4a91" name="binutils-gold-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f79ac0659e4afdb3894d3403f2cf8f75e38fa07b55f4200cb17946f03ad12c83" name="binutils-gold-debuginfo" arch="i586">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="420aad067f25cca0d5804f700bbdf190a508e9d3423cb8036fbfee72258d61ca" name="binutils-gold-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0127bc9364e48b4284e6cb31b04ac5982f0f9cd351495fe6eb0f66c9b0ba4fe8" name="biosdevname-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="fb4984db7f510c11f9a28fbab90d36d30d0df0421476f1f7d964f9b87bb7bcdd" name="biosdevname-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="f8e52721ec4e170bd7897ef03793fdfcb91d84688b05f0ffb76ab8c382341179" name="biosdevname-debugsource" arch="i586">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="d1de50ed45c5838394afcd642d57442c9a04e7ba8e1ac18c5b5f8048c9f67ea8" name="biosdevname-debugsource" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp152.6.3.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="dc1557755ea2e8d1b7652beb108ffcf7e8f0d2bc24afefe7f6bf1caa21e7a700" name="blosc-debugsource" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="lp152.4.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1432036800">- Update to version 1.6.1:
  * Fixed a subtle, but long-standing bug in the blosclz codec that
    could potentially overwrite an area beyond the output buffer.
  * Support for runtime detection of AVX2 and SSE2 SIMD
    instructions, allowing running AVX2 capable c-blosc libraries
    to run on machines with no AVX2 available (will use SSE2
    instead).
  * A new blocksize computation allows for better compression
    ratios for larger typesizes (&gt; 8 bytes), without not penalizing
    the speed too much (at least on modern CPUs).
- changes from version 1.6.0:
  * Support for AVX2 is here!  The benchmarks with a 4-core Intel
    Haswell machine tell that both compression and decompression are
    accelerated around a 10%, reaching peaks of 9.6 GB/s during
    compression and 26 GB/s during decompression (memcpy() speed for
    this machine is 7.5 GB/s for writes and 11.7 GB/s for reads).
    Many thanks to @littlezhou for this nice work.
  * Support for HPET (high precision timers) for the `bench` program.
    This is particularly important for microbenchmarks like bench is
    doing; since they take so little time to run, the granularity of a
    less-accurate timer may account for a significant portion of the
    runtime of the benchmark itself, skewing the results.  Thanks to
    Jack Pappas.
- changes from version 1.5.4:
  * Updated to LZ4 1.6.0 (r128).
  * Fix resource leak in t_blosc.  Jack Pappas.
  * Better checks during testing.  Jack Pappas.
  * Dynamically loadable HDF5 filter plugin. Kiyo Masui.
- changes from version 1.5.3:
  * Use llabs function (where available) instead of abs to avoid
    truncating the result.  Jack Pappas.
  * Use C11 aligned_alloc when it's available.  Jack Pappas.
  * Use the built-in stdint.h with MSVC when available.  Jack Pappas.
  * Only define the __SSE2__ symbol when compiling with MS Visual C++
    and targeting x64 or x86 with the correct /arch flag set. This
    avoids re-defining the symbol which makes other compilers issue
    warnings.  Jack Pappas.
  * Reinitializing Blosc during a call to set_nthreads() so as to fix
    problems with contexts.  Francesc Alted.
- changes from version 1.5.2:
  * Using blosc_compress_ctx() / blosc_decompress_ctx() inside the
    HDF5 compressor for allowing operation in multiprocess scenarios.
    See: https://github.com/PyTables/PyTables/issues/412
    The drawback of this quick fix is that the Blosc filter will be only
    able to use a single thread until another solution can be devised.
- changes from version 1.5.1:
  * Updated to LZ4 1.5.0.  Closes #74.
  * Added the 'const' qualifier to non SSE2 shuffle functions. Closes
    [#75].
  * Explicitly call blosc_init() in HDF5 blosc_filter.c, fixing a
    segfault.
  * Quite a few improvements in cmake files for HDF5 support.  Thanks
    to Dana Robinson (The HDF Group).
  * Variable 'class' caused problems compiling the HDF5 filter with
    g++.  Thanks to Laurent Chapon.
  * Small improvements on docstrings of c-blosc main functions.
- changes from version  1.5.0:
  * Added new calls for allowing Blosc to be used *simultaneously*
    (i.e. lock free) from multi-threaded environments.  The new
    functions are:
  - blosc_compress_ctx(...)
  - blosc_decompress_ctx(...)
    See the new docstrings in blosc.h for how to use them.  The previous
    API should be completely unaffected.  Thanks to Christopher Speller.
  * Optimized copies during BloscLZ decompression.  This can make
    BloscLZ to decompress up to 1.5x faster in some situations.
  * LZ4 and LZ4HC compressors updated to version 1.3.1.
  * Added an examples directory on how to link apps with Blosc.
  * stdlib.h moved from blosc.c to blosc.h as suggested by Rob Lathm.
  * Fix a warning for {snappy,lz4}-free compilation.  Thanks to Andrew
    Schaaf.
  * Several improvements for CMakeLists.txt (cmake).
  * Fixing C99 compatibility warnings.  Thanks to Christopher Speller.
- specfile:
  * update copyright year</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1438948800">- Add two patches dragged from fedora to support non-intel archi
  0001-Fix-cmake-system-check.patch
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="mkravec@suse.com" date="1455537600">- Replaced long syntax with macros %cmake, %cmake_install, %ctest</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to 1.7.1
  * Fixed a bug preventing bitshuffle to work correctly on getitem().
    Now, everything with bitshuffle seems to work correctly.
  * Fixed the thread initialization for blosc_decompress_ctx().  Issue
    [#158].  Thanks to Chris Webers.
  * Fixed a bug in the blocksize computation introduced in 1.7.0.  This
    could have been creating segfaults.
  * Allow bitshuffle to run on 1-byte typesizes.
  * New parametrization of the blocksize to be independent of the
    typesize.  This allows a smoother speed throughout all typesizes.
  * lz4 and lz4hc codecs upgraded to 1.7.2 (from 1.7.0).
  * When calling set_nthreads() but not actually changing the number of
    threads in the internal pool does not teardown and setup it anymore.
    PR #153.  Thanks to Santi Villalba.
- Update to 1.7.0
  * Added a new 'bitshuffle' filter so that the shuffle takes place at a
    bit level and not just at a byte one, which is what it does the
    previous 'shuffle' filter.
  * New acceleration mode for LZ4 and BloscLZ codecs that enters in
    operation with complevel &lt; 9.  This allows for an important boost in
    speed with minimal compression ratio loss.  Francesc Alted.
  * LZ4 codec updated to 1.7.0 (r130).
  * PREFER_EXTERNAL_COMPLIBS cmake option has been removed and replaced
    by the more fine grained PREFER_EXTERNAL_LZ4, PREFER_EXTERNAL_SNAPPY
    and PREFER_EXTERNAL_ZLIB.  In order to allow the use of the new API
    introduced in LZ4 1.7.0, PREFER_EXTERNAL_LZ4 has been set to OFF by
    default, whereas PREFER_EXTERNAL_SNAPPY and PREFER_EXTERNAL_ZLIB
    continues to be ON.
  * Implemented SSE2 shuffle support for buffers containing a number of
    elements which is not a multiple of (typesize * vectorsize).  Jack
    Pappas.
  * Added SSE2 shuffle/unshuffle routines for types larger than 16
    bytes.  Jack Pappas.
  * 'test_basic' suite has been split in components for a much better
    granularity on what's a possibly failing test.  Also, lots of new
    tests have been added.  Jack Pappas.
  * Fixed compilation on non-Intel archs (tested on ARM).  Zbyszek
    Szmek.
  * Modifyied cmake files in order to inform that AVX2 on Visual Studio
    is supported only in 2013 update 2 and higher.
  * Added a replacement for stdbool.h for Visual Studio &lt; 2013.
  * blosclz codec adds Win64/Intel as a platform supporting unaligned
    addressing.  That leads to a speed-up of 2.2x in decompression.
  * New blosc_get_version_string() function for retrieving the version
    of the c-blosc library.  Useful when linking with dynamic libraries
    and one want to know its version.
  * New example (win-dynamic-linking.c) that shows how to link a Blosc
    DLL dynamically in run-time (Windows only).
  * The `context.threads_started` is initialized now when decompressing.
    This could cause crashes in case you decompressed before compressing
    (e.g. directly deserializing blosc buffers).  @atchouprakov.
  * The HDF5 filter has been removed from c-blosc and moved into its own
    repo at: https://github.com/Blosc/hdf5
  * The MS Visual Studio 2008 has been tested with c-blosc for ensuring
    compatibility with extensions for Python 2.6 and up.
- Remove update-included 0001-Fix-cmake-system-check.patch and
  0002-Fix-compilation-on-unknown-archs.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467892800">- Update to 1.9.2
  * Check whether Blosc is actually initialized before blosc_init(),
    blosc_destroy() and blosc_free_resources().  This makes the library
    more resistant to different initialization cycles
    (e.g. https://github.com/stevengj/Blosc.jl/issues/19).
- Update to 1.9.1
  * The internal copies when clevel=0 are made now via memcpy().  At the
    beginning of C-Blosc development, benchmarks where saying that the
    internal, multi-threaded copies inside C-Blosc were faster than
    memcpy(), but 6 years later, memcpy() made greats strides in terms
    of efficiency.  With this, you should expect an slight speed
    advantage (10% ~ 20%) when C-Blosc is used as a replacement of
    memcpy() (which should not be the most common scenario out there).
  * Added a new DEACTIVATE_AVX2 cmake option to explicitly disable AVX2
    at build-time.  Thanks to James Bird.
  * The ``make -jN`` for parallel compilation should work now.  Thanks
    to James Bird.
- Update to 1.9.0
  * New blosc_get_nthreads() function to get the number of threads that
    will be used internally during compression/decompression (set by
    already existing blosc_set_nthreads()).
  * New blosc_get_compressor() function to get the compressor that will
    be used internally during compression (set by already existing
    blosc_set_compressor()).
  * New blosc_get_blocksize() function to get the internal blocksize to
    be used during compression (set by already existing
    blosc_set_blocksize()).
  * Now, when the BLOSC_NOLOCK environment variable is set (to any
    value), the calls to blosc_compress() and blosc_decompress() will
    call blosc_compress_ctx() and blosc_decompress_ctx() under the hood
    so as to avoid the internal locks.  See blosc.h for details.  This
    allows multi-threaded apps calling the non _ctx() functions to avoid
    the internal locks in C-Blosc.  For the not multi-threaded app
    though, it is in general slower to call the _ctx() functions so the
    use of BLOSC_NOLOCK is discouraged.
  * In the same vein, from now on, when the BLOSC_NTHREADS environment
    variable is set to an integer, every call to blosc_compress() and
    blosc_decompress() will call blosc_set_nthreads(BLOSC_NTHREADS)
    before the actuall compression/decompression process.  See blosc.h
    for details.
  * Finally, if BLOSC_CLEVEL, BLOSC_SHUFFLE, BLOSC_TYPESIZE and/or
    BLOSC_COMPRESSOR variables are set in the environment, these will be
    also honored before calling blosc_compress().
  * Calling blosc_init() before any other Blosc call, although
    recommended, is not necessary anymore.  The idea is that you can use
    just the basic blosc_compress() and blosc_decompress() and control
    other parameters (nthreads, compressor, blocksize) by using
    environment variables (see above).
- Update to 1.8.1
  * Disable the use of __builtin_cpu_supports() for GCC 5.3.1
    compatibility.
- Update to 1.8.0
  * The code is (again) compatible with VS2008 and VS2010.  This is
    important for compatibility with Python 2.6/2.7/3.3/3.4.
  * Introduced a new global lock during blosc_decompress() operation.
    As the blosc_compress() was already guarded by a global lock, this
    means that the compression/decompression is again thread safe.
    However, when using C-Blosc from multi-threaded environments, it is
    important to keep using the *_ctx() functions for performance
    reasons.  NOTE: _ctx() functions will be replaced by more powerful
    ones in C-Blosc 2.0.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1474027200">- Update to 1.11.1
  - Fixed a bug introduced in 1.11.0 and discovered by pandas test suite. This
    basically prevented to decompress buffers compressed with previous versions of
    C-Blosc. See: https://github.com/Blosc/python-blosc/issues/115
- Update to 1.11.0
  - Internal Zstd codec upgraded to 1.0.0.
  - New block size computation inherited from C-Blosc2. Benchmarks are saying that
    this benefits mainly to LZ4, LZ4HC, Zlib and Zstd codecs, both in speed and in
    compression ratios (although YMMV for your case).
  - Added the @rpath flag in Mac OSX for shared libraries.  Fixes #175.
  - Added a fix for VS2008
  - License changed from MIT to 3-clause BSD style.
- Update to 1.10.2
  - Force the use of --std=gnu99 when using gcc.  Fixes #174.
- Update to 1.10.1
  - Removed an inconsistent check for C11 (__STDC_VERSION__ &gt;= 201112L and
    _ISOC11_SOURCE) as this seem to pose problems on compilers doing different
    things in this check (e.g. clang). See
    https://github.com/Blosc/bloscpack/issues/50.
- Update to 1.10.0
  - Initial support for Zstandard (0.7.4). Zstandard (or Zstd for short) is a new
    compression library that allows better compression than Zlib, but that works
    typically faster (and some times much faster), making of it a good match for
    Blosc.
- Update to 1.9.3
  - Reverted a mistake introduced in 1.7.1.  At that time, bit-shuffling
    was enabled for typesize == 1 (i.e. strings), but the change also
    included byte-shuffling accidentally.  This only affected performance,
    but in a quite bad way (a copy was needed).  This has been fixed and
    byte-shuffling is not active when typesize == 1 anymore.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492516800">- Update to 1.11.2
  - Enabled use as a CMake subproject, exporting shared &amp; static library targets
    for super-projects to use. See PRs #178, #179 and #180.  Thanks to Kevin
    Murray.
  - Internal LZ4 codec updated to 1.7.5.
  - Internal Zstd codec updated to 1.1.2.</changelog>
  <changelog author="mpluskal@suse.com" date="1514116800">- Update to version 1.12.1:
  * Backported BloscLZ parameters that were fine-tuned for
    C-Blosc2.
- Packaging changes:
  * Run spec-clener
  * Use shared libraries with compression codecs instead of bundled
    ones
  * Use more of cmake macros
  * Build in parallel</changelog>
  <changelog author="jengelh@inai.de" date="1514462400">- Fix RPM group. Compact descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1517918400">- Update to version 1.13.5:
  * Fixed a buffer overrun that happens when compressing small
    buffers and len(destination_buffer) &lt; (len(source_buffer) +
    BLOSC_MAX_OVERHEAD). Reported by Ivan Smirnov.
  * Tests work now when external compressors are located in
    non-system locations. Fixes #210. Thanks to Leif Walsh.
  * Fixed a bug uncovered by the python-blosc test suite: when a
    buffer is to be copied, then we should reserve space for the
    header, not block pointers.
  * Serious optimization of memory copy functions (see new
    blosc/fastcopy.c). This benefits the speed of all the codecs,
    but specially the BloscLZ one. As a result of the above, the
    BloscLZ codec received a new adjustment of knobs so that you
    should expect better compression ratios with it too.</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Update to version 1.14.3:
  * Fixed a bug that caused C-Blosc to crash on platforms
    requiring strict alignment.
  * Fixed a piece of code that was not C89 compliant.</changelog>
  <changelog author="mpluskal@suse.com" date="1534852800">- Update to version 1.14.4:
  * Added a new DEACTIVATE_SSE2 option for cmake that is useful for
    disabling SSE2 when doing cross-compilation (see #236).
  * New check for detecting output buffers smaller than
    BLOSC_MAX_OVERHEAD.
  * The complib and version parameters for blosc_get_complib_info()
    can be safely set to NULL now. This allows to call this
    function even if the user is not interested in these parameters
    (so no need to reserve memory for them).
  * In some situations that a supposedly blosc chunk is passed to
    blosc_decompress(), one might end with an Arithmetic exception.
    This is probably due to the chunk not being an actual blosc
    chunk, and divisions by zero might occur. A protection has been
    added for this.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559649600">- Update to version 1.16.3:
  * Fix for building for clang with -march=haswell. See PR #262.
  * Fix all the known warnings for GCC/Clang. Still some work to do for MSVC in this front.
  * Due to some problems with several CI systems, the check for library symbols are deactivated now by default. If you want to enforce this check, use: cmake .. -DDEACTIVATE_SYMBOLS_CHECK=ON to re-activate it.
  * Correct the check for the compressed size when the buffer is memcpyed. This was a regression introduced in 1.16.0. Fixes #261.
  * Fixed a regression in 1.16.0 that prevented to compress empty buffers (see #260).
  * Now the functions that execute Blosc decompressions are safe by default for untrusted/possibly corrupted inputs.
  * The previous functions (with less safety) checks are still available with a '_unsafe' suffix. The complete list is:
  * Also, a new API function named blosc_cbuffer_validate(), for validating Blosc compressed data, has been added.
  * For details, see PR #258. Thanks to Jeremy Maitin-Shepard.
  * Fixed a bug in blosc_compress() that could lead to thread deadlock under some situations. See #251. Thanks to @wenjuno for the report and the fix.
  * Fix data race in shuffle.c host_implementation initialization. Fixes #253. Thanks to Jeremy Maitin-Shepard.
  * Add workaround for Visual Studio 2008's lack of a stdint.h file to blosclz.c.
  * Replaced //-comments with /**/-comments and other improvements for compatibility with quite old gcc compilers. See PR #243. Thanks to Andreas Martin.
  * Empty buffers can be compressed again (this was unadvertedly prevented while fixing #234). See #247. Thanks to Valentin Haenel.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is depricated replaced by %cmake_build</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580990400">- Update to version 1.17.1:
  * BloscLZ codec updated to 2.0.0.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585656000">- Update to version 1.18.1:
  * Fixed the copy of the leftovers of a chunk when its size is not
    a multiple of the typesize.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1592913600">- Update to version 1.19.0:
  * The length of automatic blocksizes for fast codecs (lz4, blosclz) has been incremented quite a bit (up to 256 KB) for better compression ratios.
  * The performance in modern CPUs (with at least 256 KB in L2 cache) should be better too (for older CPUs the performance should stay roughly the same).
  * For small buffers that cannot be compressed (typically &lt; 128 bytes), blosc_compress() returns now a 0 (cannot compress) instead of a negative number (internal error). See #294.
  * blosclz codec updated to 2.1.0. Expect better compression ratios and performance in a wider variety of scenarios.
  * blosc_decompress_unsafe(), blosc_decompress_ctx_unsafe() and blosc_getitem_unsafe() have been removed because they are dangerous and after latest improvements, they should not be used in production.</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597147200">- Enable support for SNAPPY compression.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1598616000">- Stop assuming that %{_libexecdir} == /usr/lib (boo#1174075).</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 1.20.1 boo#1179914 CVE-2020-29367:
  * More saftey checks have been implemented so that potential flaws discovered by new fuzzers in OSS-Fuzzer are fixed now
  * BloscLZ updated to 2.3.0. Expect better compression ratios for faster codecs. For details, see our new blog post: https://blosc.org/posts/beast-release/
  * Fixed the _xgetbv() collision. Thanks to Micha? Górny (@mgorny).</changelog>
</package>
<package pkgid="a18a9aaa64760719bd3fdd4880ceb81ef18b166d763cb69f77bc23fafae7a6c2" name="blueman-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="lp152.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532692800">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542628800">- Enable appindicator support. Needed for the newer xfce4-status-notifier.
  No longer breaks system tray</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1549281600">- update to version 2.0.8
  * Fix name resolution of unknown device classes
- changes in  2.0.7
  * This release fixes DUN support in blueman through NetworkManager
  and bluemans own implementation with pppd. It has been broken due
  to lack of hardware as DUN is usually not available on newer devices.
  * Added default polkit rules file that allows users in group wheel
  to perform administrative actions.
  * Support iproute2 and make it the default
  * Fix icon name in the device menu
  * Several commits backported from master for various RFCOMM
  and Serial related bugs.
  * Fix icon and caption in manager for LE devices
- moved new polkit rules in docs to keep default security untouched
  (boo#1124339)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560168000">- Update to version 2.1
  * Support for BlueZ 4 and Python 2.7 and 3.2 got dropped
  * dbus-python and libnotify aren't dependencies anymore
  * libnm is now used for interaction with NetworkManager (&gt;= 1.0)
  * Compatibility with gnome-icon-theme, mate-icon-theme, adwaita-icon-theme, elementary-xfce, and Papirus
  * Information dialog on devices' services
  * Compose and send notes to devices
  * Default PIN code database
  * Support for the ip command
  * udhdpd support
  * Lots of improvements for blueman-sendto
  * Lots of bug fixes and smaller or invisible improvements
  * See CHANGELOG.md for a complete list of changes
- Several spec file cleanups and adaptations</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1562673600">- Update to version 2.1.1
  * Using recent connections did not work
  * Swichting adapters did not work
  * Errors when removing a device
  * Error tracebacks from info dialog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1580904000">- Update to version 2.1.2
  * Signal bar updates with multiple adapters
  * Pairing with pincode</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1594555200">- Update to version 2.1.3
  * Force cython to use python language version 3
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (boo#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
</package>
<package pkgid="3b6497232a46aa97aa6c6c78ee18f333c8dfd4d49e31d8f8fc42e8cf1e6ea90f" name="blueman-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.4" rel="lp152.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1532692800">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1542628800">- Enable appindicator support. Needed for the newer xfce4-status-notifier.
  No longer breaks system tray</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1549281600">- update to version 2.0.8
  * Fix name resolution of unknown device classes
- changes in  2.0.7
  * This release fixes DUN support in blueman through NetworkManager
  and bluemans own implementation with pppd. It has been broken due
  to lack of hardware as DUN is usually not available on newer devices.
  * Added default polkit rules file that allows users in group wheel
  to perform administrative actions.
  * Support iproute2 and make it the default
  * Fix icon name in the device menu
  * Several commits backported from master for various RFCOMM
  and Serial related bugs.
  * Fix icon and caption in manager for LE devices
- moved new polkit rules in docs to keep default security untouched
  (boo#1124339)</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1560168000">- Update to version 2.1
  * Support for BlueZ 4 and Python 2.7 and 3.2 got dropped
  * dbus-python and libnotify aren't dependencies anymore
  * libnm is now used for interaction with NetworkManager (&gt;= 1.0)
  * Compatibility with gnome-icon-theme, mate-icon-theme, adwaita-icon-theme, elementary-xfce, and Papirus
  * Information dialog on devices' services
  * Compose and send notes to devices
  * Default PIN code database
  * Support for the ip command
  * udhdpd support
  * Lots of improvements for blueman-sendto
  * Lots of bug fixes and smaller or invisible improvements
  * See CHANGELOG.md for a complete list of changes
- Several spec file cleanups and adaptations</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1562673600">- Update to version 2.1.1
  * Using recent connections did not work
  * Swichting adapters did not work
  * Errors when removing a device
  * Error tracebacks from info dialog</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1580904000">- Update to version 2.1.2
  * Signal bar updates with multiple adapters
  * Pairing with pincode</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1594555200">- Update to version 2.1.3
  * Force cython to use python language version 3
  * Fix tooltip not updating when bluetooth is disabled
  * Fix dbus timeout in DhcClient
  * Call the right method when pulseaudio crashes
  * Handle os.remove failing</changelog>
  <changelog author="Maurizio Galli &lt;maurizio.galli@gmail.com&gt;" date="1604404800">- Update to version 2.1.4
  * Security Release for CVE-2020-15238 (boo#1178196)
  * Force cython to use python language version 3
  * Do not use exitcode 1 when we expect to fail
  * Mark more strings translatable
  * Unstranslated strings
  * Fix searching (with Ctrl+F in manager device list) did not work
  * Default PIN lookup
  * Fix device removal handling
  * Only use LaunchContext when we have proper event time</changelog>
</package>
<package pkgid="c87ece524c81be4b1c44e83bf5559c424f9c44d03334a5b57763a8b7450b390e" name="bluez-cups-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="bf3dd7a7c8f9a5a7b1fff433fa42663022c0ecfc39d327a472d54493fe503191" name="bluez-cups-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="4002d14e513dfae260f7c7e94de5caf90c5fc66d5162ea9f6d0354b4035dfa19" name="bluez-cups-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="5f362349783abb33e815d24cf95e4320e52b23f33b78dce7b03c06202a8ce2de" name="bluez-cups-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="e072f4969176a7cbe5f56f4befbc69d4ab557461898659877ea1c2364ffbc1e4" name="bluez-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="c87f29a360d6b0ff9eea089d6868560126b494630dbb5554b72bc0cf06767335" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="b8252c6fbb60300d1cc172a6b5b2bf22118fc77114c312858edaa9c649750375" name="bluez-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="bf568ce4b14475147d92d91b7385ba42aa38fc695d18fa05ee5085739d236573" name="bluez-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="cf87ad8f356b2d91630c43ace40d4c77423af7b509cded9ca9614f599524ecab" name="bluez-debugsource" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="c506a5aa72ca7b31175075f1bb7dc86e1a3280a73c9e195c21057ec077061cb4" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="3872c166eaeff91a00c73fec4e8a6f0952d2a47923c79c7881e5caadc1b07fef" name="bluez-debugsource" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="0e93fed9f64936208e3ee6ef4703fc05ff290431550b259b369facd26373f54f" name="bluez-debugsource" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="b00de9f5f8a6331c4776e57611ad25a67682bae1edafedceee5a3aa888b1a2b8" name="bluez-test-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="3a8211d872f545b9f112e3af2c79b43c2e56a42e8d5e8d5f3ba6191037d0e5fa" name="bluez-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
</package>
<package pkgid="76af07af77e14872ab91ca2d87dc26eb527766509dcc1591de749c896d9995ba" name="bluez-test-debuginfo" arch="i586">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="aba80b073bb41db05de63d3ed8badd7086bd323ad428ef6f6c8193d3cf319c19" name="bluez-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp152.12.6.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1584532800">- Add
  HOGP-must-only-accept-data-from-bonded-devices.patch
  HOGP 1.0 Section 6.1 establishes that the HOGP must require
  bonding.(bsc#1166751)(CVE-2020-0556)
  HID-accepts-bonded-device-connections-only.patch
  This change adds a configuration for platforms to choose a more
  secure posture for the HID profile.(bsc#1166751)(CVE-2020-0556)
  input-hog-Attempt-to-set-security-level-if-not-bonde.patch
  Attempt to set security level if not bonded.
  (bsc#1166751)(CVE-2020-0556)
  input-Add-LEAutoSecurity-setting-to-input.conf.patch
  Add LEAutoSecurity setting to input.conf.
  (bsc#1166751)(CVE-2020-0556)</changelog>
  <changelog author="Al Cho &lt;acho@suse.com&gt;" date="1603368000">- Add shared-att-Fix-possible-crash-on-disconnect.patch
  * Fix possible crash on disconnect.(bsc#1177895)(CVE-2020-27153)</changelog>
</package>
<package pkgid="cb73408cf59d6e20ac5bba4d2b57d104e3bd68cda9e3deed9fdda2a4382792eb" name="brlapi-java-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="b6a3fc0a14ae65646f3e2567e826635cf95edaf0da65723025a5fda438120155" name="brltty-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="fd156686710a66f765161ab59c53a29102277fdf8c34a4403dc7f2117f50b397" name="brltty-debugsource" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="ca58ce0a525a979dc9b00e525058e01605d64426557e6ac04007152994f2073c" name="brltty-driver-at-spi2-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="68d239e3c7422acf467fd3b4ff6ba088573bdbce4c238187dc93bd7cbc9cc311" name="brltty-driver-brlapi-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="b63839490409959783f9c01b3088d49c551219463d82c3736e65a25aa5927226" name="brltty-driver-espeak-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="328cd2c2ab59de4398a9cb3f1d06581d91aa7ae030d78683f31a5787a73b2498" name="brltty-driver-libbraille-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="e9b31bc862b04d8fb1d50de98394263c8d774b15d9491e03ab0ef66ab890aeed" name="brltty-driver-speech-dispatcher-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="d4e8d5ef71639c1f29fbe85ff26c8fdd95a2443f5b39a05f54fca6b40630443d" name="brltty-driver-xwindow-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="480c4da713187db4ce515a681593df7832321eacceab11f508194aa56ee9b133" name="brltty-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.0" rel="lp152.2.3.1"/>
  <changelog author="mgorse@suse.com" date="1473940800">- Install polkit file (bsc#930242).
- Add brltty-5.3.1-udev-systemd.patch: fix udev rules to work with
  systemd. From upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1474027200">- Update to version 5.4
  + Too many changes; please read ChangeLog :
- Drop b40-1.patch, brltty-polkit.patch, and
  brltty-5.3.1-udev-systemd.patch: fixed upstream.
- Add brltty-5.4-latex-tables-executable.patch: LaTeX tables
  should be executable.
- API version is now 0.6.5
- Install rules file into %{_udevdir}/rules.d
- Install systemd files via the Makefile
- Make polkit a conditional.</changelog>
  <changelog author="olaf@aepfle.de" date="1478520000">- Fix syntax error in rule files
  brltty-udev-rule.patch</changelog>
  <changelog author="mgorse@suse.com" date="1487073600">- Disable udev rule for generic FTDI devices to avoid taking
  USB-to-serial converters (boo#1007652). Add an update
  message if one of these devices is detected.
- Add a README.SUSE.
- Add brltty-polkit-fixes.patch:  don't delay brltty if waiting
  for polkit initialization, and fix polkit+key authentication
  (bsc#930242).
- Add brltty-braillenote-usb.patch: autodetect BrailleNote via
  USB.
- Always enable polkit (intention of the conditional was to
  disable on 13.2 and 42.1, but it was being disabled under 42.2
  as well).</changelog>
  <changelog author="olaf@aepfle.de" date="1490097600">- Add -Wformat to work around build failure (boo#1030240)
  Add brltty.format-error.patch
  Add brltty.makedev.patch</changelog>
  <changelog author="mgorse@suse.com" date="1490097601">- Replace brltty.format-error.patch with the upstream fix; our
  current patch doesn't appear to be sufficient (boo#1030240).</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-devel &gt;= 1.6 to not fail during bootstrapping</changelog>
  <changelog author="olaf@aepfle.de" date="1500379200">- Provide caml__frame with brltty.ocaml.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mgorse@suse.com" date="1504267200">- Update to version 5.5
  +  HandyTech's Actilino is supported.
  +  HumanWare's Braille Note Touch is supported.
  +  The Orbit 20 is supported.
  + Various other changes; please read ChangeLog :
- Drop brltty-udev-rule.patch, brltty-polkit-fixes.patch,
  brltty-5.0-speechd.diff,
  brltty-5.4-latex-tables-executable.patch,
  brltty-braillenote-usb.patch, brltty.format-error.patch,
  brltty.makedev.patch, and brltty.ocaml.patch: fixed upstream.
- Add brltty-5.5-systemd-install.patch: fix systemd service
  directory on lib64
- polkit policy is now named org.a11y.brlapi.policy
- API version is now 0.6.6
- Don't create rcbrltty (why were we symlinking a systemd unit
  file here? Seems wrong)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512475200">- Drop python2 dependency (fate#323526)</changelog>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
</package>
<package pkgid="b519916752d3288dcdb9067fcf0bf865b2c0adb6a4ee2504f77b6197f7f8a846" name="brotli-debuginfo" arch="i586">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="128c8292bd2bb00f95abee3b4c7a25a51632d066937913fe9ef8551ea386bada" name="brotli-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="8f6fb2be7acc8ffc584b355e899c4b16ad17d0da4a6689e67ea57661ece76830" name="brotli-debugsource" arch="i586">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="c1d26debdd0224f2483069862ad38208a03f0daa7076edcc486b60981ae588be" name="brotli-debugsource" arch="x86_64">
  <version epoch="0" ver="1.0.9" rel="lp152.2.3.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1574164800">- %make_jobs is deprecated and replaced by %cmake_build</changelog>
  <changelog author="andy great &lt;andythe_great@pm.me&gt;" date="1597233600">- Fix W: shared-lib-calls-exit /usr/lib64/libbrotlienc.so.1.0.7
  exit@GLIBC_2.2.5.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598529600">- Update to 1.0.9
  * Fix integer overflow when input chunk is longer than
    2GiB [boo#1175825]
  * `brotli -v` now reports raw / compressed size
  * decoder: minor speed / memory usage improvements
  * encoder: fix rare access to uninitialized data in ring-buffer
- Drop brotli_Ensure-decompression-consumes-all-input.patch,
  brotli_Verbose-CLI+Shared-Brotli.patch (merged)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598961600">- Add 0001-Revert-Add-runtime-linker-path-to-pkg-config-files-7.patch</changelog>
</package>
<package pkgid="1429302bcac1e444f39d03970e5c7669f85b3c1cbd1118498633a143aa6858e6" name="btcflash-debuginfo" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="7a9c0298f5785f1392ac7438e0b22dadfa49e2a50f29809fd7d9e9e12d04bcb3" name="btcflash-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="4bf60e439ac53d1773b15633462a3dbd7f3758c5e897e69066b5be69b2d6ea4e" name="btrfsprogs-debuginfo" arch="i586">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="80038fa50a51b2b1b25838c9d8ab672f8b3ba0afa71b9a83a2bdf36464038a9e" name="btrfsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="24d50debb5d6a021316b5a1ddc2a6158754b65958707970f63e95e895577209f" name="btrfsprogs-debugsource" arch="i586">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="0684bf9cf2a0a209dd674cf59a189da8abfb7e37e1b0e9d20a6c2b08d7afe742" name="btrfsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="4.19.1" rel="lp152.6.3.1"/>
  <changelog author="jeffm@suse.com" date="1511352000">- Add dependencies for libreiserfscore0 3.6.27 or newer (bsc#1071085).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wqu@suse.de" date="1513684800">- Fix rollback regression which can lead to data corruption
  Added patches: rollback-regression-fix.patch (bsc#1069478)</changelog>
  <changelog author="dsterba@suse.cz" date="1515326400">- update to version 4.14.1
  * dump-tree: print times of root items
  * check: fix several lowmem mode bugs
  * convert: fix rollback after balance
  * other
  * new and updated tests, enabled lowmem mode in CI
  * docs updates
  * fix travis CI build
  * build fixes
  * cleanups
- update to version 4.14
  * build: libzstd now required by default
  * check: more lowmem mode repair enhancements
  * subvol set-default: also accept path
  * prop set: compression accepts no/none, same as ""
  * filesystem usage: enable for filesystem on top of a seed device
  * rescue: new command fix-device-size
  * other
  * new tests
  * cleanups and refactoring
  * doc updates
- Removed patches:
  - rollback-regression-fix.patch - upstreamed
- spec: disable static build, missing libzstd-devel-static
- spec: disable zstd support for non-Tumbleweed distros</changelog>
  <changelog author="dsterba@suse.cz" date="1515326401">- spec: fix distro version condition</changelog>
  <changelog author="dsterba@suse.cz" date="1517486400">- update to version 4.15
  * mkfs --rootdir reworked, does not minimize the final image but can be still
    done using a new option --shrink
  * fix allocation of system chunk, don't allocate from the reserved area
  * other
  * new and updated tests
  * cleanups, refactoring
  * doc updates</changelog>
  <changelog author="dsterba@suse.cz" date="1518782400">- use documentation shipped by upstream tar, reduce dependencies</changelog>
  <changelog author="dsterba@suse.cz" date="1522929600">- update to version 4.16
  * libbtrfsutil - new LGPL library to wrap userspace functionality
  * several 'btrfs' commands converted to use it:
  * properties
  * filesystem sync
  * subvolume set-default/get-default/delete/show/sync
  * python bindings, tests
  * build
  * use configured pkg-config path
  * CI: add python, musl/clang, built dependencies caching
  * convert: build fix for e2fsprogs 1.44+
  * don't install library links with wrong permissions
  * fixes
  * prevent incorrect use of subvol_strip_mountpoint
  * dump-super: don't verify csum for unknown type
  * convert: fix inline extent creation condition
  * check:
  * lowmem: fix false alert for 'data extent backref lost for snapshot'
  * lowmem: fix false alert for orphan inode
  * lowmem: fix false alert for shared prealloc extents
  * mkfs:
  * add UUID and otime to root of FS_TREE - with the uuid, snapshots will
    be now linked to the toplevel subvol by the parent UUID
  * don't follow symlinks when calculating size
  * pre-create the UUID tree
  * fix --rootdir with selinux enabled
  * dump-tree: add option to print only children nodes of a given block
  * image: handle missing device for RAID1
  * other
  * new tests
  * test script cleanups (quoting, helpers)
  * tool to edit superblocks
  * updated docs
- Add patch: 0001-btrfs-progs-build-fix-static-build.patch
- Add new library packages: libbtrfsutil</changelog>
  <changelog author="dsterba@suse.cz" date="1524484800">- update to version 4.16.1
  * remove obsolete tools: btrfs-debug-tree, btrfs-zero-log, btrfs-show-super,
    btrfs-calc-size
  * sb-mod: new debugging tool to edit superblock items
  * mkfs: detect if thin-provisioned device does not have enough space
  * check: don't try to verify checksums on metadata dump images
  * build: fail documentation build if xmlto is not found
  * build: fix build of btrfs.static
- Remove patch: 0001-btrfs-progs-build-fix-static-build.patch (upstream)
- Update initrd script</changelog>
  <changelog author="jeffm@suse.com" date="1525089600">- Fix building on SLE11:
  * btrfs-progs: convert: fix support for e2fsprogs &lt; 1.42
  * btrfs-progs: build: detect whether -std=gnu90 is supported
  * btrfs-progs: build: autoconf 2.63 compatibility
  * Fixed mismerged addition of libbtrfsutil1 package description
- Added patches:
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1529582400">- update to version 4.17
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
- Removed patches (upstreamed):
  * 0001-btrfs-progs-convert-fix-support-for-e2fsprogs-1.42.patch
  * 0002-btrfs-progs-build-autoconf-2.63-compatibility.patch
  * 0003-btrfs-progs-build-detect-whether-std-gnu90-is-suppor.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1533470400">- update to version 4.17.1
  * check:
  * add ability to fix wrong ram_bytes for compressed inline files
  * beautify progress output
  * btrfstune: allow to continue uuid change after unclean interruption
  * several fuzz fixes:
  * detect overalpping chunks
  * chunk loading error handling
  * don't crash with unexpected root refs to extents
  * relax option parsing again to allow mixing options and non-options
    arguments
  * fix qgroup rescan status reporting
  * build:
  * drop obsolete dir-test
  * new configure option to disable building of tools
  * add compatibility options --disable-static and --disable-shared
  * other:
  * cleanups and preparatory work
  * new test images
- spec cleanup</changelog>
  <changelog author="dsterba@suse.cz" date="1541937600">- update to version 4.19
  * check: support repair of fs with free-space-tree feature
  * core:
  * port delayed ref infrastructure from kernel
  * support write to free space tree
  * dump-tree: new options for BFS and DFS enumeration of b-trees
  * quota: rescan is now done automatically after 'assign'
  * btrfstune: incomplete fix to uuid change
  * subvol: fix 255 char limit checks
  * completion: complete block devices and now regular files too
  * docs:
  * ship uncompressed manual pages
  * btrfsck uses a manual page link instead of symlink
  * other
  * improved error handling
  * docs
  * new tests</changelog>
  <changelog author="dsterba@suse.cz" date="1544011200">- update to version 4.19.1
  * check
  * many lowmem mode improvements
  * properly report qgroup mismatch errors
  * check symlinks with append/immutable flags
  * fi usage
  * correctly calculate allocated/unallocated for raid10
  * minor output updates
  * mkfs
  * detect ENOSPC on thinly provisioned devices
  * fix spurious EEXIST during directory traversal
  * restore: fix relative path for restore target
  * dump-tree: print symbolic tree names for backrefs
  * send: fix regression preventing send -p with subvolumes mounted on "/"
  * corrupt-tree: refactoring and command line updates
  * build
  * make it work with e2fsprogs &lt; 1.42 again
  * restore support for autoconf 2.63
  * detect if -std=gnu90 is supported
  * other
  * new tests
  * cleanups</changelog>
  <changelog author="nborisov@suse.com" date="1544184000">- Implement fate#325871
  * Added 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * Added 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * Added 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * Added 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * Added 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch</changelog>
  <changelog author="mfasheh@suse.com" date="1548417600">- Advise user of fs recovery options when we fail to mount (fate#320443,
  bsc#1122539)
  * Add dracut-fsck-help.txt
  * Add module-setup.sh</changelog>
  <changelog author="Mark Fasheh &lt;mfasheh@suse.com&gt;" date="1553515200">- Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539)
  * Remove module-setup.sh
  * Add module-setup.sh.in</changelog>
  <changelog author="jeffm@suse.com" date="1563969600">- btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
- Added patches:
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1581076800">- btrfs-progs: check: fix segfault with -Q (bsc#1158560)
- Added patches:
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch</changelog>
  <changelog author="Marcos de Souza &lt;mpdesouza@suse.com&gt;" date="1610712000">- Add patches to fix the logical-resolve lookup process and to accept the 'ignore
  offsets' kernel feature (bsc#1174206)
  - Add 0001-btrfs-progs-add-LOGICAL_INO_V2-to-ioctl.h.patch
  - Add 0001-btrfs-progs-build-add-libmount-dependency.patch
  - Add 0001-btrfs-progs-inspect-add-support-for-LOGICAL_INO_V2-i.patch
  - Add 0001-btrfs-progs-inspect-increase-logical-resolve-default.patch
  - Add 0002-btrfs-progs-utils-introduce-find_mount_fsroot.patch
  - Add 0003-btrfs-progs-inspect-use-find_mount_fsroot-in-logical.patch</changelog>
</package>
<package pkgid="1ee4c3926b3a8e46d26e97dc461755c306977ea82ce4353c9e60ea4bf20bc0b3" name="budgie-calendar-applet-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 3.0</changelog>
  <changelog author="avvissu@yandex.by" date="1537963200">- Update to 4.1:
  * Set switches when creating object
- Change in 4.0:
  * Added appdata for solus sc
  * Ported to new BudgiePopover
  * Added custom date format
  * Added about dialog
  * Some fixes and cleanups
  * Sync translations
- Spec file cleanup</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Update to 5.1:
  * Fixed wrong calendar placement in popover
  * Fixed custom format errors (synced with settings now)
  * Fixed date twice
  * Reworked some code &amp; meson files
  * Moved settings to raven
  * Allow to translate schema, plugin &amp; appdata too
  * sync translations
  * Fixed settings sync</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Correct license name</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974402">- Create separate lang package</changelog>
</package>
<package pkgid="5cbad62bf6b6aa9a2b67156799cb2288f7bf3b8904ab7793f9753295ef12744c" name="budgie-calendar-applet-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 3.0</changelog>
  <changelog author="avvissu@yandex.by" date="1537963200">- Update to 4.1:
  * Set switches when creating object
- Change in 4.0:
  * Added appdata for solus sc
  * Ported to new BudgiePopover
  * Added custom date format
  * Added about dialog
  * Some fixes and cleanups
  * Sync translations
- Spec file cleanup</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Update to 5.1:
  * Fixed wrong calendar placement in popover
  * Fixed custom format errors (synced with settings now)
  * Fixed date twice
  * Reworked some code &amp; meson files
  * Moved settings to raven
  * Allow to translate schema, plugin &amp; appdata too
  * sync translations
  * Fixed settings sync</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Correct license name</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974402">- Create separate lang package</changelog>
</package>
<package pkgid="d43ba76612e3593ec617a9881056c2a02cb50d7f2bc849ff41cd24f188c95fb5" name="budgie-desktop-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="bdc17b34fdb3999d62b018e43cf1a42668e142f0a91308769866bf6f7f5c9c26" name="budgie-desktop-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="204e7dd77fabe7bb2d503bc3ba236aa77add1e0ca58a9dca10193b09f87c3e82" name="budgie-desktop-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="2ea292acedcef3b7400cc2b6a21442285e831ff9de38fe138918cc1d910fb852" name="budgie-desktop-debugsource" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.5.1"/>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="aafb43c38424264de5db40b5909931089298d4f67a46e43e084399d827ba2c00" name="budgie-desktop-debugsource" arch="x86_64">
  <version epoch="0" ver="10.5.1+1ed6276b" rel="lp152.8.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702400">- Add budgie-screensaver to Requires
- Change gnome-software from Requires to Recommends:
  * Asked for by S. B. &lt;sb56637@gmail.com&gt;</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598702401">- Add desktop-override.patch from Debian: fixes overlap between
  Budgie and GNOME in gschema</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598875200">- Add nemo-instead-of-nautilus.patch: Nautilus doesn't have support
  for desktop icons anymore
- Add nemo to Requires for desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599307200">- Add patches to fix boo#1176016:
  * replace-na-tray-with-carbontray.patch
    (gh#solus-project/budgie-desktop#1998)
  * clean-up-carbontray.patch
    (gh#solus-project/budgie-desktop#2002)
  * fix-integration-issues-with-carbontray.patch
    (gh#solus-project/budgie-desktop#2009)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599652800">- Update to git version 10.5.1+1ed6276b:
  * Prevents keeping a load of patches, 10.5.2 might be ages away
  * Added support for GNOME 3.38
  * Removed support for GNOME 3.34 and below
- Removed patches:
  * support-libmutter6.patch
  * Rework-grab-and-ungrab-keys.patch
  * mutter-3-35-91.patch
  * gnome-coexistance.patch
  * replace-na-tray-with-carbontray.patch
  * clean-up-carbontray.patch
  * fix-integration-issues-with-carbontray.patch
- Updated BuildRequires:
  * pkgconfig(libmutter-5/6) &gt;&gt; pkgconfig(libmutter-6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739200">- Add patch vala-0.49.patch: fixes build with vala 0.49
  (gh#solus-project/budgie-desktop#2029)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599739201">- Revert vala path changes</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599912000">- Add patch Revert-GNOME-3.38-support.patch: Leap 15.2 only
- Updated BuildRequires:
  * pkgconfig(libmutter-6/7) &gt;&gt; pkgconfig(libmutter-5/6/7)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1599998400">- Add budgie-desktop-branding to Recommends</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608552000">- Leap 15.3 fixes</changelog>
</package>
<package pkgid="6ba129b5bfe8620fa1ea78bc56a91def3648f713354a737946e03020adff2bf6" name="budgie-desktop-debugsource" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1485518400">- Add https://en.opensuse.org/SourceUrls
- Fix standard-dir-owned-by-package rpmlint warnings
- Implement shared library policy</changelog>
  <changelog author="dev+novell@devmotion.de" date="1492776000">- Update to v10.3.1
- See https://github.com/budgie-desktop/budgie-desktop/releases/tag/v10.3.1</changelog>
  <changelog author="mailaender@opensuse.org" date="1496577600">- Add gtk-3.22.14+raven-crash-fix.patch to fix #918</changelog>
  <changelog author="jengelh@inai.de" date="1497355200">- Redo descriptions.</changelog>
  <changelog author="mailaender@opensuse.org" date="1500724800">- Fix build with meson 0.41 using meson-0.41.patch</changelog>
  <changelog author="matcherapy@gmail.com" date="1500897600">- fix empty rpath 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1502798400">- Update to version 10.4 "Irish Summer"
- Drop upstream gtk-3.22.14+raven-crash-fix.patch
- Drop upstream meson-0.41.patch
- Drop upstream 0001-wm-Default-to-an-empty-rpath.patch</changelog>
  <changelog author="mailaender@opensuse.org" date="1503230400">- Drop sed fix bdugie-desktop typo (resolved upstream)</changelog>
  <changelog author="mailaender@opensuse.org" date="1505736000">- Update pkgconfig libmutter-0 to libmutter-1</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512043200">- Add fix-meson-build.patch: fixes gvc subproject sandbox issue
  with Meson 0.43.0</changelog>
  <changelog author="matthias.eliasson@gmail.com" date="1523793600">- Add support-libmutter2.patch: This to support the version of
  mutter in openSUSE:Factory.
- Change copyright year to 2018
- Change licenses to SPDX-3.0 version
- Modernize spec-file with spec-cleaner</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596888000">- Move vala to correct directory
- Correct typelib library name
- Removed fix-meson-build.patch: contained in upstream
- Removed support-libmutter2.patch: contained in upstream
- Added support-libmutter6.patch: adds support for mutter 3.36
- Correct license name
- Switch to verified sources:
  * Add source.asc and GPG keyring
- Add new BuildRequires:
  * pkgconfig(libnotify)
  * pkgconfig(gnome-settings-daemon)
  * pkgconfig(alsa)
- Updated BuildRequires:
  * pkgconfig(libmutter-2) &gt;&gt; pkgconfig(libmutter-6)
- Add new library libbudgie-private0
- Update to version 10.5.1:
  * For the changes see
    https://getsol.us/2019/10/03/budgie-and-its-army-of-gnomes/</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974400">- Create separate lang package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596974401">- Rename and recommend doc package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Add xsession update-alternatives</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060801">- Add patches:
  * Rework-grab-and-ungrab-keys.patch (gh#solus-project/budgie-desktop#1907)
  * mutter-3-35-91.patch (gh#solus-project/budgie-desktop#1939)
  * gnome-coexistance.patch (gh#solus-project/budgie-desktop#1984)
- Remove old %post and %postun
- Add new Requires:
  * ibus
  * typelib-1_0-PeasGtk-1_0
  * typelib-1_0-Budgie-1_0</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060802">- Fix desktop icons</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597147200">- Remove gnome-session dependency</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597233600">- Add gnome-session-core as a dependency
- Spec file cleanups
- Correct URL</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597320000">- Change gnome-control-center from Recommends to Requires:
  * Needed for changing desktop background
- Add gnome-software to Requires:
  * Needed for links in gnome-control-center</changelog>
</package>
<package pkgid="26c3d0d647eabf623e2a530ead0b53677b9b735e27a8bb033961f078bcf73dc2" name="budgie-haste-applet-debuginfo" arch="x86_64">
  <version epoch="0" ver="20200228" rel="lp152.2.1"/>
  <changelog author="avvissu@yandex.by" date="1537963200">- Initial package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200228
  * Fix GTK+3.24 compilation errors</changelog>
</package>
<package pkgid="5d964ec0a1749cc4d1071c328ab139de4d28ca7d1a00d186657f4f54275396e5" name="budgie-haste-applet-debugsource" arch="x86_64">
  <version epoch="0" ver="20200228" rel="lp152.2.1"/>
  <changelog author="avvissu@yandex.by" date="1537963200">- Initial package</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200228
  * Fix GTK+3.24 compilation errors</changelog>
</package>
<package pkgid="10d9f2478d98e58c9e9087437875499727de25c7f768ae44a1b465aaa3b2edba" name="budgie-screensaver-debuginfo" arch="x86_64">
  <version epoch="0" ver="20190923" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598616000">- Initial packaging version 20190923
- Add patches from gnome-screensaver in openSUSE 12.3 :)
  * gnome-screensaver-suse-pam.patch
  * gnome-screensaver-helper.patch (bgo#640647)
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch (bnc#444157,bgo#455118)
- Add remove-old-automake-macros.patch: fix Automake problems</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="b94a12ee9cf7428194e1e5ffc0647a2b20cb9cefe538a5eb4dcac4e8b2797178" name="budgie-screensaver-debugsource" arch="x86_64">
  <version epoch="0" ver="20190923" rel="lp152.2.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598616000">- Initial packaging version 20190923
- Add patches from gnome-screensaver in openSUSE 12.3 :)
  * gnome-screensaver-suse-pam.patch
  * gnome-screensaver-helper.patch (bgo#640647)
  * gnome-screensaver-xvkbd-on-lock.patch
  * gnome-screensaver-multihead-unlock.patch (bnc#444157,bgo#455118)
- Add remove-old-automake-macros.patch: fix Automake problems</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1600516800">- Use a better format for testing gnome versions</changelog>
</package>
<package pkgid="2607714eacd5ad0d88846fa03e2c18489f4cebb0041da73d0e31591ad9dabafd" name="budgie-screenshot-applet-debuginfo" arch="x86_64">
  <version epoch="0" ver="20200503" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 0.4.2</changelog>
  <changelog author="matcherapy@gmail.com" date="1501675200">- just fix typo in summary (calendar-&gt; screenshot)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200503
  * Fixes compilation errors with Vala 0.44
- Create separate lang package
- Correct license name</changelog>
</package>
<package pkgid="021808485aa6de279b44829dd95e533d8a14ecab6e0a6daff712f60f757253fb" name="budgie-screenshot-applet-debugsource" arch="x86_64">
  <version epoch="0" ver="20200503" rel="lp152.2.1"/>
  <changelog author="mailaender@opensuse.org" date="1498392000">- initial packaging of version 0.4.2</changelog>
  <changelog author="matcherapy@gmail.com" date="1501675200">- just fix typo in summary (calendar-&gt; screenshot)</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1597060800">- Update to git 20200503
  * Fixes compilation errors with Vala 0.44
- Create separate lang package
- Correct license name</changelog>
</package>
<package pkgid="81dab9ee0bc7ab2d75acec9e83cf15a6263a9308cb7ee0f0d79ad7c40316c812" name="c-ares-debugsource" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="7ccef62f1d5e91a2ec9b5be6dfddbfcb3da257361fee74b3944ae2380368fe8f" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="2fe5c51162086466c5ea49762834cea573295715383e0ba44750b72425dabbda" name="c-ares-debugsource" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="f0326a1ca298d6f6334afa9c41b6c28f5d1a330041a29230d51efd9477807d53" name="c-ares-debugsource" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="8c8fcc3bfeaea845683123aba2e45444bcc7ce0226505f21c6299c929d575f42" name="c-ares-utils-debuginfo" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="439cf836481f6be97545ca023a09ab0d0ef2bf9903ad4e4d65c4820c6cd14885" name="c-ares-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
</package>
<package pkgid="dc5380b2e3602cf9fa156eb7a343aea6b98d17052d77a2683e42dde2037fbf0c" name="c-ares-utils-debuginfo" arch="i586">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="442297cfc9ec521e1ab4533367d97750065515a69ab8b2c1edb3b058139ea76a" name="c-ares-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="lp152.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1415966400">- No longer perform gpg validation; osc source_validator does it
  implicit:
  + Drop gpg-offline BuildRequires.
  + No longer execute gpg_verify.</changelog>
  <changelog author="astieger@suse.com" date="1465473600">- update to 1.11.0:
  * Allow multiple -s options to the ahost command
  * api: Expose the ares_library_initialized() function
  * api: Add ares_set_sortlist(3) entrypoint
  * api: Add entrypoints to allow use of per-server ports
  * api: introduce `ares_parse_txt_reply_ext`
  * api: Add ares_set_socket_configure_callback()
  * Add -t u option to ahost
  * collection of bug fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Version update to 1.12.0:
  * Fixes bsc#1007728 CVE-2016-5180
  * api: add ARES_OPT_NOROTATE optmask value
  * Collection of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497960000">- Version update to 1.13.0:
  * Fixes bsc#1044946 CVE-2017-1000381
  * Bunch of bugfixes
- Drop cares-1.9.1-ocloexec.patch as it broke again and it is
  not really worth all the fwdporting
- Drop check phase there is only return 0</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Rename everything to c-ares</changelog>
  <changelog author="tchvatal@suse.com" date="1519128001">- Version update to 1.14.0:
  * Fix patch for CVE-2017-1000381 to not be overly aggressive
  * gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called
  * ares_gethostbyname.3: fix callback status values
  * docs: Document WSAStartup requirement
  * Fix a typo in init_by_resolv_conf</changelog>
  <changelog author="jengelh@inai.de" date="1519128002">- Remove ineffective --with-pic.</changelog>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="Todd R &lt;toddrme2178@gmail.com&gt;" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="Matthias Eliasson &lt;elimat@opensuse.org&gt;" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
</package>
<package pkgid="cf8e4ee6b132e2c88db1b0fbc6f416aaaa2831831a8e1ea6af3c7c7b931ffc2c" name="cacti-spine-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="67d9fa738f50b531482c0a94ded05a94936a60827bb3acf25c233bdf12417c2e" name="cacti-spine-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="0fe77ef33ef742807c6fd0b84050be2fd9d628e85d2d4294046ee6ec319f0ea5" name="cacti-spine-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="lp152.2.3.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1516708800">- Update to version 1.1.33
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
</package>
<package pkgid="cdbbcf173c2b1ed8c7acddb8074c440e1bf707dfd7a315f6f6dcd7028dff6ba5" name="cacti-spine-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.2.6.1"/>
  <changelog author="liedke@rz.uni-mannheim.de" date="1517918400">- Update to version 1.1.34
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1518436800">- Update to version 1.1.35
  - issue#48: Availability check none triggers snmp system check that
    causes device to be ignored</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1519646400">- Update to version 1.1.36
  - issue#49: Re-Index update query failed due to lack of escaping</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1522065600">- Update to version 1.1.37
  - issue: Extra long snmp_sysObjectID's generate SQL errors</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1523880000">- Update to version 1.1.38
  * feature: release to match Cacti release</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1546516800">- Update to version 1.2.0
  * feature: Allow threads to be set a Data Collector level
  * issue#50: make fails on Debian 7 attempting to locate clock_gettime
  * issue#53: Improved escaping when updating database records
  * issue#54: Spine should always log if ICMP fails
  * issue#58: When updating snmp_sysLocation, text can become truncated
  * issue#63: Automatically reduce device threads when number of data
    sources does not require it</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1548072000">-Update to version 1.2.1
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1551096000">-Update to version 1.2.2
  * feature: release to match Cacti release</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1554120000">-Update to version 1.2.3
  * issue#76: Spine unhandled exception signal
  * issue: More recent versions of MariaDB require different client library</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1560427200">-Update to version 1.2.4
  * issue#92: Add Data Source ID to "Empty result' error messages
  * issue#94: Increase default 'results_buffer' size to 2048 and MySQL
    max buffer to 131072 bytes</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1563278400">-Update to version 1.2.5
  - issue: Improve detection of MySQL vs. MariaDB client library requirement
  - issue#98: Checking type in poller.c causes compiler error</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1567425600">-Update to version 1.2.6
  - issue#101: MySQL 8 has retired 'my_bool' type
  - issue#104: Spine should report which threads are outstanding
  - issue#105: Spine should include 'Process[&lt;id&gt;]' in standard logging
  - issue#107: Log Buffer is too small to handle some output
  - issue#108: Once an SNMP timeout is reached, snmp_get does not honor
    include_host
  - issue#109: Initial declarations inside for loop cause compile errors
  - issue#110: When compiling, 'directive output may be truncated'
    messages can appear
  - issue#112: INSTALL instructions have typo in bootstrap command</changelog>
  <changelog author="David Liedke &lt;liedke@rz.uni-mannheim.de&gt;" date="1569844800">-Update to version 1.2.7
  - issue#113: spine1.2.6 couldn't open directory `m4'</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1580644800">- cacti-spine 1.2.8:
  * works with cacti 1.2.8</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581768000">- cacti-spine 1.2.9:
  * works with cacti 1.2.9
  * Improve logging of snmp multiple OID get function
  * PCOMMAND Device[XXXX] WARNING: Recache Event Detected for Device
  * Segmentation Fault triggered by a lot of errors
  * Replace function gethostbyname with thread safe getaddrinfo
  * removed strip_alpha for "Wrong-Type" SNMP-Answer</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586606400">- cacti-spine 1.2.11:
  * fix warnings due to 'Recache Event Detected for Device'
  * Fix database, network and polling errors</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1588852800">- cacti-spine 1.2.12:
  * Failed host lookup causes spine to crash</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1594728000">- cacti-spine 1.2.13:
  * works with cacti 1.2.13</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- cacti-spine 1.2.14:
  * fix spine not updating rrd_next_step</changelog>
</package>
<package pkgid="58e9776c07bcdb2af9c8a5c0c15d6b84883e29ef2e8cee1b9e283163a6aaf0f4" name="catatonit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="lp152.4.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="ed2617b70c0d4e56fb541c4cef093b606b6ec2fa77d5c117b2d0d6decc5732b5" name="catatonit-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1.5" rel="lp152.4.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
</package>
<package pkgid="09b3d931fda0a00af9bda848f67320ec7d9227015119c6502d56bb455c631de9" name="cdda2wav-debuginfo" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="75e4b21b70c7ffdebacd945d860af2a9e7da791757671865166c3a432005aea6" name="cdda2wav-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="89c48203a4fa5e04d5d3ce12243c163e40924ee1680e71eb04581aafa4a374d0" name="cdrecord-debuginfo" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="edbb8f6b94f4842f3cdcc14681de939d1519e6910fb08b02e1e60e9a578fbf1f" name="cdrecord-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="635558660ea3a1256d7ad4db4ac7e7f8384c6c80c0b0e4e4f3bf3b5c9533e2d7" name="cdrtools-debuginfo" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="6d59ca430154736ee0b31376aa4fa45ca6b3107ec649f442d44a30572792da0b" name="cdrtools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="ba4bda3dddcad001d671948e9ae46627592a1ff006a27a1075a0297fbca3c6e1" name="cdrtools-debugsource" arch="i586">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="97de3e5f278bd45beebf882996bba72971ce475a3050409851d5a2be1ad348c9" name="cdrtools-debugsource" arch="x86_64">
  <version epoch="0" ver="3.02~a09" rel="lp152.6.3.1"/>
  <changelog author="meissner@suse.com" date="1417694400">- run permission handling code unconditionally. bnc#899718</changelog>
  <changelog author="jengelh@inai.de" date="1420804800">- Update to new upstream release 3.01~a26
  * Add the HELIOS UNICODE mapping code. This needs to be done at
  UCS-2 level for Joliet and UDF (instead of UTF-8) and only for
  Rock Ridge (in case of a UTF-8 based target locale) using UTF-8
  based translations.
  * Make the Apple extensions work again with "mkisofs -find"</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Update to new upstream release 3.01~a27
  * dlopen emulation for certain platforms</changelog>
  <changelog author="jengelh@inai.de" date="1427284800">- Update to new upstream release 3.01~a28
  * Build system changes only: manpages are installed just once</changelog>
  <changelog author="jengelh@inai.de" date="1433419200">- Update to new upstream release 3.01~a29
  * (Several changes for better Haiku compatibility.)
  * Some code fixes include results from automated tests.</changelog>
  <changelog author="jengelh@inai.de" date="1436356800">- Update to new upstream release 3.01~a30
  * Added a workaround (with autoconf) for a Cygwin bug with
  [#]pragma weak.</changelog>
  <changelog author="jengelh@inai.de" date="1438776000">- Update to new upstream release 3.01~a31
  * Added compile support for Win-10 using non-automake-aware make
  implementations. Add some workarounds for MinGW32 compilation.</changelog>
  <changelog author="jengelh@inai.de" date="1440936000">- Update to new upstream release 3.01
  * Final version</changelog>
  <changelog author="jengelh@inai.de" date="1446811200">- Update to new upstream release 3.02~a01
  * libparanoia: work around a bug that resulted from uninitalized
  statistics data for C2 checks.
  * cdda2wav now supports sound output on Linux again.</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 3.02~a02
  * Many smaller "isoinfo" enhancements including support for
  relocated directories.</changelog>
  <changelog author="jengelh@inai.de" date="1449057600">- Update to new upstream release 3.02~a03
  * isoinfo no longer eats up all memory when an ISO image
  with a directory loop is specified.</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update to new upstream release 3.02~a04
  * Support for DVD-Audio was added to mkisofs.
  * Several bug fixes in mkisofs and mkisofs/diag/* programs to make
  them more robust against rotten ISO images.</changelog>
  <changelog author="jengelh@inai.de" date="1451563200">- Update to new upstream release 3.02~a05
  * mkisofs now tries to be more immune against rotten iso images
  when in multi session mode.
  * mkisofs no longer tries to access a string past the null byte
  when dealing with Joliet.
  * mkisofs fixed a bug related to sorting with multi extent files
  (greater than 4 GB).</changelog>
  <changelog author="jengelh@inai.de" date="1453982400">- Update to new upstream release 3.02~a06
  * libscg: fixed a copy/paste problem in the Linux transport that
  could cause libscg to assume a timeout when no timeout occurred.
  * libscg: add a new generic option interface.
  * libscg: New option "ignore-resid" to work around a Linux kernel
  problem.
  * mkisofs: better warning messages for rotten directories when in
  multi-session mode.</changelog>
  <changelog author="jengelh@inai.de" date="1482926400">- Update to new upstream release 3.02~a07
  * mkisofs: deduplication for files)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1494504000">- Fix build on older distros (e.g. SLE11) -- no caps support in RPM
- Remove build dependency on mmv (not present on SLE, and its usage
  is easily replaced with a small shell script).
- Fix build on older distros (makedepend)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 3.02~a09
  * Cdda2wav now works around a Linux glibc bug that causes stderr
    to be illegally buffered.
  * `cdda2wav -vall` no longer clobbers out-fd= to become stdin
    when compiled in 64 bit mode.</changelog>
  <changelog author="adam.majer@suse.de" date="1520856000">- fix_chrp_boot.patch: chrp-boot option doesn't take any parameters
  but seems to require one that it doesn't use. Fix it uses no
  parameters. (bnc#1084893)
- Always install to /usr/lib/siconv since otherwise mkisofs doesn't
  find charsets. Needs to be fixed properly later. (bnc#1084892)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1589112000">- large_mac_iso.patch: correct an integer overflow in chrp-boot
  where ISO sizes that are larger than 4GB (bsc#1169420)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1605787200">- fix_junk_in_partition.patch: Initialize memory that created the
  partition table instead of writing random bytes to it (bsc#1178692)</changelog>
</package>
<package pkgid="1efe06ce1b8b2fb9fb2c99c824b3d2b01052bd5eb4736d83c359c1022f1ae8ee" name="ceph-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="40d0c51825ec29b194ed587067cde1e0dcde8cecef9d9719179006b9b8062765" name="ceph-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="fe23c516a2c80842bd87a94c125f4e3109a16e1744bf9c5237116598d428dbc7" name="ceph-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="434f6f5387a0554a6e36d73fd681077ae33ff0657b0dd16c4f03be6adf242f5b" name="ceph-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="22c9d42575cbc230a8213c6054d00bc7da1efb4bdbb8422b7d64ecb998a491a2" name="ceph-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="1a963ee7328363c6291f9a5e4e299d7fccbc5f45599ad29e992ef77d94990ff5" name="ceph-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="7eeb14995d155da730e3f17869f385bee09cceea6667c38d007e1c6c1feea18d" name="ceph-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="dc23db89bd0f5ae07e313a1b04c5a70e9ac8b5657d5a86c90b51fdfa009ebea0" name="ceph-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="48cb24df5160f734f9e896f046da6b67f99d4deccf460aa43bedbc16235c8dc0" name="ceph-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="080260637ffd29d509cfec342bd3b5dd3e0561126595460a01409547ded2a5ae" name="ceph-common-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="985f5d4e3e1bc28b31aa028b3e875512e5d95391ad6bbfae2e940ac50a6b9827" name="ceph-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="7711cffb5604e5d4ceb91adf19acf5bd616645872990556335a7519adacbbde0" name="ceph-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="9d3a692a0937a3f7f8031edee4ba66a443a1ed017afe72968bb79bac704e382d" name="ceph-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="280d640e41eecfd61a257c7f34fa718fad9bcdbbcb646aaac1b8c1084a1f3d8c" name="ceph-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="f9bef31e6bc7a8ffeba82b1386be3e97684cdaf801acdff53ad1a3f5e8a798a3" name="ceph-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="c65b235274b01b2448da2178cc7d6bf2880df5ccd293047aa8d3a21f86901c9c" name="ceph-fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="65be54baada23e947d13a502b7585111f43c6df2f80ab9813036c26e9d9aade1" name="ceph-fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="3687733e52bc1203cca7ebf3e88a15bce2a0b3fe18d32238dd819f4f0513679c" name="ceph-fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="476d0609f91146d6e304e1acfa58a00b54da7b0b40b9973493647fb9584d5e62" name="ceph-fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="f2039f6e6dbd08871655b0b5cb0cb0dc1bbe11130f2cd2c30fdca23cf2ca834d" name="ceph-fuse-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="3ff35c0aeaea03758dcd6e219ecb57c8046dbb8b2b16b2f68e202878870bb1aa" name="ceph-immutable-object-cache-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="54f1f3b4c56a16e7fe04a4c07ec962d32f665e4ac318dc20879b116f15313884" name="ceph-immutable-object-cache-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="8a70826fb227db91dae4687d396ea352cfeb9ddb8f4f0fd20fd9ab9db4365288" name="ceph-immutable-object-cache-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="9acb8098c203bc2d60f4fabbcafed67dc89b3f77b6e69da8d8f56750f604770e" name="ceph-immutable-object-cache-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="ce15206f252ffb1b4cf7b37b52c23d3fea6e243cb35ec7b8a3a6ab739a6c974c" name="ceph-immutable-object-cache-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="256eb3937b2388f391df1845a7480b17cca652565dd854c1cb93e0193eec7669" name="ceph-mds-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="d4b26b74d49b2700f1a015cb97221d93654a49e7779501b5c09f4cb802ef297f" name="ceph-mds-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="c1efa7887a5f8c2d02937800c0f4b673b311ea525f6ef8b97cc960c87c68d4c1" name="ceph-mds-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="9ab1732a827ca4e9a3df03167e6d294ff159a1768680fb0317f7b3fb127dd89a" name="ceph-mds-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="faab624af6ea4b5075c3c51001ebcf9da6e5f19a06bf5902a588437b536cd7c6" name="ceph-mds-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="b549702bc6e9b4f345c1c8e480883aa7cf25c53809d68b2e353d0e1c065ad7d6" name="ceph-mgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="9a7ec5de738f2745d896d3eea7b035c33aae97ca43f6c3a2eff38b354b80f663" name="ceph-mgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="5a7550be127a572e9aaca7bb7af96d6659e27bee5a56bceb8e40ddc1bb1e7f4a" name="ceph-mgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="8c340dd17a862888a03fb4eb63377a58d6b9cae26254a906233cd0cec0cdbf7c" name="ceph-mgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="50dc961915ffc83032f263801cd012442aa7030fe43d0cec474cb67451c38cca" name="ceph-mgr-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="c869562d0deac3dfba78965631a1444d47d126a17b4388402d596bcbf4f557ba" name="ceph-mon-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="2689039cb384dad4d465f7efbb2db4683c7e2e6a24d710d955503a3fe05faf75" name="ceph-mon-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="24290b1d86247f9d13cb20a90e697cdc83931a7f82bfa61ed9a31b30b7490441" name="ceph-mon-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="c7995e013a75c13c661434e686c369bf77c58a1f05014c990778fbb792d5d399" name="ceph-mon-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="130db77fb0028c56eff67c949a98c6f51e2a1101818fcbc565e6386a1f853207" name="ceph-mon-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="b557feef54c90cc4028c6c437a2d58bc93bb99cf8363e7c67fc87fd6364c7641" name="ceph-osd-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="38658c8426ef33d8c50ef1bb99d11f3a0a926051a29b257e53e8104eca1c2aba" name="ceph-osd-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="7928926e4363e3e6aa8e645ee0a5a7644838eb67f1b04a4e76274ad22305aec3" name="ceph-osd-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="df9282d5b6530c6475bcca471f87f118d82fdea4429dfe3a28c843884f7e81b2" name="ceph-osd-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="d5345e9488db934d8db4248a88d5ee3081a5e45c5e5f0ff5e976e11bf9cb6bb0" name="ceph-osd-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="e5dd3d8646e438a25d0bf449836027033b170399fd93c52b46e268796145c32d" name="ceph-radosgw-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="b2d1a9e79484d705954f98e29524c8278dbf59776c3975e88e20269622fca985" name="ceph-radosgw-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="4d49e4e0bc3b3e9dd05949b486a5104c7b965e9127041bebf12b98b2f9ec550d" name="ceph-radosgw-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="a4fff4f0dab4efd5845324f77ba7b2f48f44bf2cb9ec647afa2fd69ff6cdf2aa" name="ceph-radosgw-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="36051c9a40aa12fb83a63978c22f6524c5b1885ce9e40e312b7f8a691acc614a" name="ceph-radosgw-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="80372b075682f5c3b01d8bcdece686f7cb2ae167ad8ab2ada0185b818507d6c6" name="ceph-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="8de1d5fd5e7d8701583ac86cd02c5207fd75092ab0c18c8648b24693c27c1e28" name="ceph-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="19478a183d8e868b4b0d8e982bed65514148dcee04ddda4813b85ccfe5df2cd2" name="ceph-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="035bfa25454fc2216c5697c4b6c8655bdedd8ae4254d54ceda9179555d0dc7fa" name="ceph-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="b23c1ab588fa8cdab153edeb443fa41bdd957e9088ff02b4d5ad4b31e3bdb285" name="ceph-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="2beb9c00d4ab96ff957215e3cc509e425038b9c325382c97b0d12e645a54e4fc" name="ceph-test-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.11.83+g8a15f484c2" rel="lp152.2.15.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
</package>
<package pkgid="35d9176f48197033ab2e2a8b6aab88944ba31c589a486fb3beffc28668a716df" name="ceph-test-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.5.667+g1a579d5bf2" rel="lp152.2.3.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598443200">- Update to 15.2.4-822-g24d833526b
  + rebase on tip of upstream "octopus" branch, SHA1 0887d548597b9d2381de42c1cc8a5c01d264ae8b</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1598875200">- Update to 15.2.4-827-g318de690ed:
  + ceph-volume: add lvmcache plugin</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
</package>
<package pkgid="afcd20ece9faf62926d58a1d4a893740fca79a9795dfcc7a2a3ff6060b8c9a80" name="ceph-test-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.7.689+g2c35e99e0a" rel="lp152.2.6.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599480000">- Update to 15.2.4-864-g0f510cb110:
  + rebase on tip of upstream "octopus" branch, SHA1 65d8836383deeacfc8343f8d6563548a4c44c835
  + revert "ceph-volume: add lvmcache plugin" (jsc#SES-185)
  + rpm: on SUSE, podman is required for cephadm to work (bsc#1174529)
  + mgr/dashboard: Downstream branding update (bsc#1175161, bsc#1175169)
  + monitoring: use full qualified image names for cephadm</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1599825600">- Update to 15.2.4-908-g4cc5421bb2:
  + octopus: cephadm batch backport September (1) (upstream PR #36975)
  + mgr/dashboard: Downstream branding update</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
</package>
<package pkgid="56e957a899e3686a8ccea569fef31a0522714d6c813648025b0de55fbb96d265" name="ceph-test-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.8.80+g1f4b6229ca" rel="lp152.2.9.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600084800">- Update to 15.2.4-942-g7a609d729d:
  + ceph-volume: major batch refactor (jsc#SES-1071)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600257600">- Update to 15.2.4-944-g85788353cf:
  + ceph-volume: batch: call the right prepare method (bsc#1176638)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
</package>
<package pkgid="e664c4cf36aef1dea7372bfdb37aaf6c7eb3d3cce7b103ec30c642438fc90cb0" name="ceph-test-debugsource" arch="x86_64">
  <version epoch="0" ver="15.2.9.83+g4275378de0" rel="lp152.2.12.1"/>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1600948800">- Update to 15.2.5-167-gee11658d9d:
  + rebase on tip of upstream "octopus" branch, SHA1 efdb0db2de7b1795bace506fc1538c0325fdcbbc
  * upstream Octopus v15.2.5 release, see https://ceph.io/releases/v15-2-5-octopus-released/</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601035200">- Update to 15.2.5-170-g2cc001476b:
  + Updated SES7 downstream branding (bsc#1175120)
  + monitoring: switch to CaaSP v4.5 container images
  + ceph-volume: batch: call the right prepare method
  + ceph-volume: batch: fix very_fast_allocation plan and add tests</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601294400">- Update to 15.2.5-206-g1627a4c33d:
  + octopus: cephfs: backport snap-schedule module (jsc#SES-704)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1601380800">- Update to 15.2.5-220-gb758bfd693:
  + rebase on tip of upstream "octopus" branch, SHA1 4e5be808dc271f6dc00ebdcc352e5e8ab0bac16e
  * mgr/dashboard: Fix bugs in a unit test and i18n translation (bsc#1177078)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072000">- Update to 15.2.5-222-g3a105ce6a4:
  + cherry-pick --container-init feature and follow-on fix from upstream
    (bsc#1163764) (bsc#1177319)
  * cephadm: Fix error setting 'mgr/cephadm/container_init' config
  * mgr/cephadm: Call cephadm with --container-image
  * cephadm: Add --container-image</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602072001">- Update to 15.2.5-352-gf4a94295a4:
  + Rebase on tip of upstream "octopus" branch, SHA1 e819e7280dd64d9f2d54359067056fe0e342c10d
  + Drop patch "rpm: on SUSE, podman is required for cephadm to work"
    (bsc#1176451)
  + Re-cherry-pick "ceph-volume: major batch refactor" upstream octopus backport PR
  * (bsc#1177151) python-common: do not skip unavailable devices</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158400">- Update to 15.2.5-355-g33a4cd4ce3:
  + Rebase on tip of upstream "octopus" branch, SHA1 be28449139148fb00086e11185abeebd3cb5b5b8
  + ceph-volume: don't exit before empty report can be printed (bsc#1177450)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602158401">- Update to 15.2.5-411-g6432ac8c37:
  + Rebase on tip of upstream "octopus" branch, SHA1 72e846aa6fb25df05a17ded0287ff0a59c579d7f
  * (bsc#1174644) cephadm: log to file
  * (bsc#1176499) mgr/cephadm: fix RemoveUtil.load_from_store()</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602244800">- Update to 15.2.5-429-g96b264c584:
  + Rebase on tip of upstream "octopus" branch, SHA1 82793ade49526d7d5674e488fba88e7568888ebb
  * (bsc#1173079) mgr/devicehealth: device_health_metrics pool gets created
    even without any OSDs in the cluster</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602590400">- Update to 15.2.5-430-g652d1d1e54:
  + Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse"
    (bsc#1177643)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1602676800">- Update to 15.2.5-432-g0ead4ca479:
  + cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files (bsc#1177676)</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1603281600">- Update to 15.2.5-514-g7a2bcdb091:
  + Rebase on tip of upstream "octopus" branch, SHA1 afe740393a17dc80a91f8baca4ef92d0135c4525
  + (bsc#1177319) mgr/cephadm: make --container-init a global option
  + (bsc#1177933) cephadm: configure journald as the logdriver</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268800">- Update to 15.2.5-664-gfbc9fa98aa:
  + Rebase on tip of upstream "octopus" branch, SHA1 31d4e76d0d584790763b4b1146b29ea4cfc2e9af
  * (bsc#1170200) mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177344) mgr/dashboard: support Orchestrator and user-defined Ganesha cluster
  * (bsc#1178073) mgr/dashboard: fix downstream NFS doc links
  * (bsc#1178531) cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1605268801">- Update to 15.2.5-667-g1a579d5bf2:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="Nathan Cutler &lt;ncutler@suse.com&gt;" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
</package>
<package pkgid="b77d0535a35fd3b8ec3744de1bd3e3138b7783f4840a53a96bfe8e2a6569fc3f" name="charliecloud-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="b5bd81cce48203cb4b06f0a20c2fa3779a815ea0906362ae8c6cf7ec508167f5" name="charliecloud-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="8529cfdfcff3f134a53875d2885c354d2ed1537183078a195a1dc59b8cb28e60" name="charliecloud-debugsource" arch="x86_64">
  <version epoch="0" ver="0.18" rel="lp152.2.3.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
</package>
<package pkgid="447389c49c628c98af9b724183e0ec57235ebde3fbe84f81c3aed1c7d1c8f17e" name="charliecloud-debugsource" arch="x86_64">
  <version epoch="0" ver="0.22" rel="lp152.2.6.1"/>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1552392000">- Initial release, version 0.9.8.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1553601600">- Add Recommends on docker. While Docker is not needed to run
  charliecloud it can be used to build images</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1553688000">- Add missing Group: tags.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1554811200">- Do not build documentation in Backports:SLE-12 because the build
  requirements don't exist.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1554984000">- Build using distribution-wide CFLAGS
- Be more explicit with python dependency
- Drop useless make clean call</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1557489600">- Update to version 0.9.9:
  - Bugfixes and documentation improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/87
- Re-add make clean clean that was actually needed.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612800">- Update to version 0.9.10:
  - Documentation and examples: misc improvements.
  - Full changelog at https://groups.io/g/charliecloud/message/88
- Update Source0 to allow source verification
- Install prebuilt manpages in Backports:SLE-12. We don't build the
  documentation in this release because the build requirements don't
  exist.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1558612801">- Update Source0 to use the tarball created by upstream and not the
  automatic one created by GitHub.</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1564747200">- Update to version 0.10:
  - New builder ch-grow
  - ch-build includes option --builder
  - ch-docker2tar renamed to ch-builder2tar
  - new quashFS wrapper scripts: ch-docker2squash, ch-docker2squash,
    ch-tar2squash, ch-mount and ch-umount
  - new namespace tester ch-checkns
  - Full changelog at https://groups.io/g/charliecloud/message/96
- examples/syscalls is not built anymore, drop make clean.
- Fix shebangs of new scripts to avoid dependency on /usr/bin/env</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1569240000">- Update to version 0.11:
  - ch-run: /etc/resolv.conf on the host is now optional
  - ch-grow: support ARG instruction
  - build now does not infinite loop if no Python installed
  - miscellaneous bug fixes, and documentation and test suite
    improvements
  - Full changelog at https://groups.io/g/charliecloud/message/97</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1573128000">- Update to version 0.12:
  - ch-docker2squash renamed to dh-builder2squash
  - new binary ch-test, not shipped in the package for now
  - Full changelog at https://groups.io/g/charliecloud/message/98
- Add recommends on buildah</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1579608000">- Switch to python3-Sphinx for building the documentation</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1583323200">- Update to version 0.14
  - the build system was rewritten and the layout of the source code
    and installed files were changed significantly
  - new binary ch-tug, to pull images from a remote repository
  - miscellaneous bug fixes and improvements
- Patch the usage of /usr/libexec to use /usr/lib because upstream
  have harcoded the first path in its code.
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1586952000">- Update to version 0.15
  - shell and Python libraries moved from libexec to lib
  - Full changelog at https://groups.io/g/charliecloud/message/102
- Remove patch, paths are not longer hardcoded:
  * 0001-Replace-hardcoded-libexec.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1593172800">- Update to version 0.16
  - ch-grow and ch-tug: updates to work with external repositories
  - ch-grow: COPY semantics now match Docker
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/103</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1598011200">- Update to version 0.18
  - Fixes an important symlink handling bug in ch-tug and ch-grow.
    Prior to version 0.18, if a pulled image contained a symlink in one
    layer and then a regular file at the same path in a subsequent layer,
    the *target* of the symlink would be overwritten even if it was
    not within the image; i.e., unpacking inappropriately followed
    the symlink. This allows a crafted image to overwrite any file
    writeable by the invoking user.
    Because Charliecloud is unprivileged, other files on the system,
    e.g. system files, are unaffected.
  - ch-grow: --version and --help work w/o dependencies installed
    new switch --list to list images
    now gives diagnostics for syntax errors and unsupported instructions
    WORKDIR now supports relative paths (#786)
    no longer crashes if input doesn?t end in newline (#474)
  - miscellaneous bug fixes and improvements
  - Full changelogs at https://groups.io/g/charliecloud/message/104
    and https://groups.io/g/charliecloud/message/105
- Replace python2-base with python3-base.
- Update recommends used by ch-grow/ch-build
- Readd patch for hardcoded paths:
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1600776000">- Update to version 0.19. Two particularly notable changes:
  - ch-grow now supports multi-stage build (#768), which as always
    is fully unprivileged. This represents a big step forward in
    functionality.
  - ch-grow now has subcommands; what used to be plain ch-grow
    is now ch-grow build, and ch-tug has become ch-grow pull.
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/106
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1603281600">- Update to version 0.20.
  - improvement for unprivileged image build using fakeroot
    This feature can be turned off with ?ch-grow build --no-fakeroot?
    Further details are in the ch-grow man page
  - miscellaneous bug fixes and improvements
  - Full changelot at https://groups.io/g/charliecloud/message/107
- Add requirements on fakeroot</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1608552000">- Update to version 0.21.
  - renamed the internal builder ch-grow to ch-image to reflect
    its broader functionality. ch-grow still works but will be
    deprecated in 0.23
  - ch-image unprivileged build workarounds using fakeroot
    now default to off and must be requested with --force;
    the option --no-fakeroot has been removed. ch-image will
    by default print a warning if it thinks --force might fix
    a build failure.
  - ch-image pull now works with registries that use HTTP basic auth
    and with images that use manifest schema version 1.
  - ch-image build has a new option --bind to bind-mount directories
    during build and COPY: improve symlink and directory handling
  - miscellaneous bug fixes and improvements
  - Full changelog at https://groups.io/g/charliecloud/message/108
- Update patch
  * Replace-hardcode-path.patch</changelog>
  <changelog author="Ana Guerrero Lopez &lt;aguerrero@suse.com&gt;" date="1613995200">- Update to version 0.22.
  - ?ch-image? can now push images to a registry, with the ?push? subcommand
  - As a reminder, ?ch-grow? has been renamed to ?ch-image?.
    The old name still works but will be removed in 0.23.
  - ch-image: new subcommand ?delete?
  - ch-image pull:
  * now keeps some metadata from pulled image
  * now works with public images in nVidia NGC registry
  * setuid/setgid bits in pulled image now cleared
  * performance improvements for images with many whiteouts
  - ch-image build:
  * environment variables now kept from base image
  * SHELL instruction now supported
  - several scripts now work correctly if image name contains slash
  - ?sudo make install? now works correctly with restrictive umasks
  - miscellaneous bug fixes and improvements</changelog>
</package>
<package pkgid="d06005f20c573d176c5c0c33fd4a93a30ed6857c04ca0e762bdc7048e739f829" name="chocolate-doom-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="9a3d3e120ea7b19bcbbbf71c1b40e09382374b383f81c3e771d8aa69dad3eaec" name="chocolate-doom-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.1" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1386676800">- Update to new upstream release 2.0
  * Support for three other Doom engine-based games: Heretic, Hexen,
  and Strife.</changelog>
  <changelog author="jengelh@inai.de" date="1399809600">- Add python to BuildRequires - it is used for manpage generation
  (was previously implicitly included)</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 2.1
  * Chocolate Doom now supports high-quality substitute music packs
  that are used in place of the original MIDI music tracks.
  * Support for joysticks and gamepads has been significantly
  improved in this version.
  * OPL MIDI playback has been significantly improved. Multi-track
  MIDI files now play back properly.
  * The "no fog on spawn west" Vanilla bug is now correctly
  emulated.
  * Behavior of older versions of Doom back to v1.666 can now be
  emulated.
- Add chdoom-nonvoid.diff, chdoom-prng.diff to quench compiler
  warnings. Add chdoom-date.diff to kill __DATE__ instances.</changelog>
  <changelog author="jengelh@inai.de" date="1446897600">- Update to new upstream release 2.2.1
  * The Hexen four level demo IWAD is now supported.
  * The Doom reload hack has been added back.
  * OPL music playback has been improved in a number of ways to
  match the behavior of Vanilla Doom's DMX library much more
  closely. OPL3 playback is also now supported.
- Drop chdoom-nonvoid.diff (included upstream),
  drop chdoom-prng.diff (PRNG impl. was switched)</changelog>
  <changelog author="jengelh@inai.de" date="1479297600">- Add chdoom-sdlsound.diff to resolve build error with new
  libsamplerate</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Update to new upstream release 2.3.0 (2016-12-29)
  * Pitch-shifting from early versions of Doom, Heretic, and Hexen
    is now supported.
  * Aspect ratio-corrected 1600×1200 PNGs are now written.
  * OPL emulation is more accurate.
  * DMX bugs with GUS cards are now better emulated.
  * Checksum calculations are fixed on big endian systems, allowing
    multiplayer games to be played in mixed little/big-endian
    environments.
  * The vanilla limit of 4046 lumps per WAD is now enforced.
  * Solidsegs overflow is emulated like in vanilla.
  * It is now possible to start multiplayer Chex Quest games.
  * Versions 1.666, 1.7, and 1.8 are emulated.
  * An issue was fixed where the game crashed while killing the
    Wraithverge in 64-bit builds.
- Drop chdoom-date.diff (no longer needed), drop
  chdoom-sdlsound.diff (merged upstream).</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Update to new upstream release 3.0.0 (2017-12-30)
  * Update to SDL2. All scaling is now done in hardware.
  * It is possible to toggle fullscreen with Alt-Enter.
  * On multimonitor setups, the game will remember the used screen.
  * A new parameter, -savedir allows users to specify a directory
    from which to load and save games.
  * The GOG install of Doom 3: BFG Edition is now detected.
  * The CD audio option for music playback has been removed; the CD
    playback API has been removed from SDL 2.0.
  * Strife's voices.wad is now correctly loaded before PWADs.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542196800">- Update description.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1591444800">- Set CFLAGS+=-fcommon.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1593604800">- Update to release 3.0.1
  * Fixed a bug where a client in a networked game can
    cause a stack-based buffer overflow on the server
    [CVE-2020-14983, boo#1173595]</changelog>
</package>
<package pkgid="f51da73e6828d081b23a05d2776f1003ae9d56a570f321113b3eba463f434c16" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="3b0e1a6a34ed0163d1d680bb8fe58aa6bf6df6472e04e27886e1cae481a72c98" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="884018503a57198bc7ba15364c0830ad008c19b01d3efb3dd9983f44953c57e6" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="ce70460b37a590c5ff607d7095bda6e56735bbdf19420ad90a9e4be208519f9a" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="50d202e8952f74b40d212088a822ad6df844f8c28de723be02ea1280d4849446" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="6c9c767a3661e58ac6288ff0752d85fd7921a150921310f1a90096a3c2096fab" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="17e6e16777f3600ed849bb75f7ebeeb6e139b27e0bffb6072d08f2b241bf0561" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="1b65258d33b7d3cf9dd6c918f05cd1daa960a615f72f3ef1e3d5715aabe44047" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="ef1f36c340c267c4af541f7e6edceb5322c01b94a92f700759d8b005a845a335" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp152.2.42.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="304468d480ef3d4b95aa8fc509fa8b929065dcb93773b2d6c2dfb1c17ef773c5" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp152.2.45.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="bdc319accaa6f8e7a489eab6ab74c6ef60e028bdaed7fc233374a6987bc61359" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp152.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="514eaccec1f5ea70885a1d6ef6573236213b21066a0737ae34a1c42e21595126" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp152.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="6da4c03b8465cd682a4d25310ffa1e4ac46c15a63b77e579bd72cafe0da75211" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.60.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
</package>
<package pkgid="92710dca0f72cedbd4c46ca374a23ea61a51e7adfd32fa826f31a4a71388db9d" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.63.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
</package>
<package pkgid="526ec2eaa21a053206aebefc532f6f039cb85530a0affb8580a786f2cd9d1c05" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="e9455b89237ab3594bbd96fc8fef4d36441c52bc1a218d459c72d9fc184e1836" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="e4dbb4eecfc108640c34faf7c1a16ecb3335aa34810fde7e0d58738778cd9b03" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp152.2.57.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="dc864d3a991293b9e44450979c190494a42f3d928184c7086e5e24d7d730f232" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.146" rel="lp152.2.69.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
</package>
<package pkgid="85b258d47e1701faee0e2dddbd1d05f67ce0dfc940b1230e14a1d6fe781ab363" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.150" rel="lp152.2.72.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
</package>
<package pkgid="fa5273372507d6258cea62ddb3f5fc5b06c480db7085577d96e2f77091765ab3" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.96" rel="lp152.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
</package>
<package pkgid="5174597c58770eaa2a2a848c0f54de13cc4c621d3e73de0ac5adfb1f46d81069" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.114" rel="lp152.2.83.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
</package>
<package pkgid="2816829374c4f1aba8b158457123a8c0909fd07d489f17b0f614fbea9f371175" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.128" rel="lp152.2.86.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
</package>
<package pkgid="36736ce125610b16804e9d0e03e0b6d9c4e21a4ac7bd8a18f914c33ea46e039a" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.72" rel="lp152.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
</package>
<package pkgid="3c477654b1e216619d4d0547cf1ec2a5ee85546a9d3c76c497212ed75e63f9b6" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.90" rel="lp152.2.80.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
</package>
<package pkgid="ce539044c103c91c4931223f45f8f5d91ac1bd9018e01901768b0209467ebd14" name="chromedriver-debuginfo" arch="x86_64">
  <version epoch="0" ver="90.0.4430.93" rel="lp152.2.89.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
</package>
<package pkgid="602e502ff384621d659f7ecfeb2e57d3c5a2a85f26d71698e943621bd3322a53" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="c5488a69e0f4d8619aadd4cba96d0259f603f082a766e9c5a39c2b1851e822c8" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="c5ee5bc16b30397414340c9ac544eb23631b82f184e604d40e476cc3e1c343a2" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="031a8fe4678a0ed08a172dc3e64b1d18662fbcab1090cbf617b97f400795898c" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="8fec98de0347ddf7d8abb6db9a3a60ad2d80a7bcfb43f98e250a2ba9d4d4965e" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="83b4935db88f673118f84950d45cf1ab07760a14205252b8e2f1dde1ffc283f2" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="ea58d28f7ac5349826b05c9a708088af982b940630d117aed5ff38b2b66df5e1" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="aac8d92fe2f874b8c28362122d54f8eb357c41b7af5c15efbe4dcc8a59521f72" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="bbf8fd88b48391061263e1145f6a5a7cc31bd7933e617523ce5bcc1af50733e1" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.111" rel="lp152.2.42.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060800">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
</package>
<package pkgid="1c4890d712ba50c3db7893175ce527c815e50440c7dd9b69afced9c4b90c5339" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.183" rel="lp152.2.45.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
</package>
<package pkgid="2f8ed25c32abf73ec3922faa0017c257f279100c651ebce9858df46810d1e9eb" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.198" rel="lp152.2.48.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
</package>
<package pkgid="4159d1655df4d8ff01091f33095edabb293887abd86e76b68fc645682fa85031" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="86.0.4240.75" rel="lp152.2.39.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
</package>
<package pkgid="6a3ca3e8c7c9dda0d8ff1ebdf8cfaf43553b50063df052eae62467c7258aedbe" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.60.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
</package>
<package pkgid="5aed5cba58dbf81d8ea89b00a74e761944f441b13e1da94f7e441fe108a289fc" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.141" rel="lp152.2.63.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
</package>
<package pkgid="63b4c798e89abaab36ada3de929c555b7d510b173fff27952252bd23f66f6899" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.51.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
</package>
<package pkgid="cc3a0682a8784af257db814a6d9a82d2845cf5b36c2f76c73fc5bd0eb4c2a498" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.66" rel="lp152.2.54.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
</package>
<package pkgid="9039aae18cbc5c8aea3cba7f8963a13dccb8c1f264841f055968b8dbd8dd712b" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="87.0.4280.88" rel="lp152.2.57.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
</package>
<package pkgid="ef0bbb02f2dad4ef37933559e0c1ee08284ef882f573facad46626fca9c770b1" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.146" rel="lp152.2.69.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
</package>
<package pkgid="4933e51d2f75e2f5f83e490600512c2377dfa04768f70ff83022b0f564674cbc" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.150" rel="lp152.2.72.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
</package>
<package pkgid="c54e1f63f5528e6f50e29788c751521ba45c2db79c42c21fc024c3cf7af87179" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="88.0.4324.96" rel="lp152.2.66.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600862400">- Remove TOC files to avoid warning in post and fix angle conditional</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- build with system libevent, the gn bug is no longer present</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
</package>
<package pkgid="adb6430d75d2c1e84e7f9b6ba02a6d653e8f3b644ea545d6d4c7ecd9f8dbce07" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.114" rel="lp152.2.83.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
</package>
<package pkgid="f354373559eb26f2b8f275a4018e794f9ad0dedc5b096aca0fb98b320c644699" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.128" rel="lp152.2.86.1"/>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
</package>
<package pkgid="5715e86d9ddc28094448d7e0171e3c8f7d627eb05a9db00fb7e029434276d54c" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.72" rel="lp152.2.77.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Update to 86.0.4240.75 bsc#1177408:
  * CVE-2020-15967: Use after free in payments.
  * CVE-2020-15968: Use after free in Blink.
  * CVE-2020-15969: Use after free in WebRTC.
  * CVE-2020-15970: Use after free in NFC.
  * CVE-2020-15971: Use after free in printing.
  * CVE-2020-15972: Use after free in audio.
  * CVE-2020-15990: Use after free in autofill.
  * CVE-2020-15991: Use after free in password manager.
  * CVE-2020-15973: Insufficient policy enforcement in extensions.
  * CVE-2020-15974: Integer overflow in Blink.
  * CVE-2020-15975: Integer overflow in SwiftShader.
  * CVE-2020-15976: Use after free in WebXR.
  * CVE-2020-6557: Inappropriate implementation in networking.
  * CVE-2020-15977: Insufficient data validation in dialogs.
  * CVE-2020-15978: Insufficient data validation in navigation.
  * CVE-2020-15979: Inappropriate implementation in V8.
  * CVE-2020-15980: Insufficient policy enforcement in Intents.
  * CVE-2020-15981: Out of bounds read in audio.
  * CVE-2020-15982: Side-channel information leakage in cache.
  * CVE-2020-15983: Insufficient data validation in webUI.
  * CVE-2020-15984: Insufficient policy enforcement in Omnibox.
  * CVE-2020-15985: Inappropriate implementation in Blink.
  * CVE-2020-15986: Integer overflow in media.
  * CVE-2020-15987: Use after free in WebRTC.
  * CVE-2020-15992: Insufficient policy enforcement in networking.
  * CVE-2020-15988: Insufficient policy enforcement in downloads.
  * CVE-2020-15989: Uninitialized Use in PDFium.
- Add patches:
  * chromium-78-protobuf-RepeatedPtrField-export.patch
  * chromium-79-gcc-protobuf-alignas.patch
  * chromium-80-QuicStreamSendBuffer-deleted-move-constructor.patch
  * chromium-86-ConsumeDurationNumber-constexpr.patch
  * chromium-86-ImageMemoryBarrierData-init.patch
  * chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  * chromium-86-compiler.patch
  * chromium-86-nearby-explicit.patch
  * chromium-86-nearby-include.patch
- Remove patches:
  * chromium-79-gcc-alignas.patch
  * chromium-80-gcc-quiche.patch
  * chromium-82-gcc-constexpr.patch
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-84-mediaalloc.patch
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-dma-buf.patch
  * chromium-drm.patch
  * chromium-quiche-invalid-offsetof.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676801">- Fix cookiemonster:
  * fix-invalid-end-iterator-usage-in-CookieMonster.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676802">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
</package>
<package pkgid="71959a6f6f6d47e01302aff1071b52ca4c8b2f699b09a82b2bf2a4207031f34c" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="89.0.4389.90" rel="lp152.2.80.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1602676800">- Remove vdpau-&gt;vaapi bridge as it breaks a lot:
  (fixes welcome by someone else than me)
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603108800">- chromium-86-f_seal.patch: F_SEAL* definitions added for leap 15.1 and 15.2
- replace one missed g++-9 by g++-10 for leap 15.1/15.2</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1603368000">- Update to 86.0.4240.111 bsc#1177936
  - CVE-2020-16000: Inappropriate implementation in Blink.
  - CVE-2020-16001: Use after free in media.
  - CVE-2020-16002: Use after free in PDFium.
  - CVE-2020-15999: Heap buffer overflow in Freetype.
  - CVE-2020-16003: Use after free in printing.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1604404800">- Update to 86.0.4240.183 bsc#1178375
  - CVE-2020-16004: Use after free in user interface.
  - CVE-2020-16005: Insufficient policy enforcement in ANGLE.
  - CVE-2020-16006: Inappropriate implementation in V8
  - CVE-2020-16007: Insufficient data validation in installer.
  - CVE-2020-16008: Stack buffer overflow in WebRTC.
  - CVE-2020-16009: Inappropriate implementation in V8.
  - CVE-2020-16011: Heap buffer overflow in UI on Windows.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
</package>
<package pkgid="d8248f893b5bbf11de379239a1e8397dd032b837b82cf745c0177b1d2bf6ba18" name="chromium-debuginfo" arch="x86_64">
  <version epoch="0" ver="90.0.4430.93" rel="lp152.2.89.1"/>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605096000">- Update to 86.0.4240.193 bsc#1178630
  - CVE-2020-16016: Inappropriate implementation in base.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605182400">- Update to 86.0.4240.198 bsc#1178703
  - CVE-2020-16013: Inappropriate implementation in V8
  - CVE-2020-16017: Use after free in site isolation</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1605787200">- Added patches:
  - chromium-gcc11.patch
  - chromium-86-fix-vaapi-on-intel.patch
  - chromium-87-compiler.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-lp152-missing-includes.patch
- Removed patches:
  - chromium-86-ServiceWorkerRunningInfo-noexcept.patch
  - chromium-86-compiler.patch
  - fix-invalid-end-iterator-usage-in-CookieMonster.patch
  - old-libva.patch
- Update to 87.0.4280.66 bsc#1178923
  - Wayland support by default
  - CVE-2020-16018: Use after free in payments.
  - CVE-2020-16019: Inappropriate implementation in filesystem.
  - CVE-2020-16020: Inappropriate implementation in cryptohome.
  - CVE-2020-16021: Race in ImageBurner.
  - CVE-2020-16022: Insufficient policy enforcement in networking.
  - CVE-2020-16015: Insufficient data validation in WASM. R
  - CVE-2020-16014: Use after free in PPAPI.
  - CVE-2020-16023: Use after free in WebCodecs.
  - CVE-2020-16024: Heap buffer overflow in UI.
  - CVE-2020-16025: Heap buffer overflow in clipboard.
  - CVE-2020-16026: Use after free in WebRTC.
  - CVE-2020-16027: Insufficient policy enforcement in developer tools. R
  - CVE-2020-16028: Heap buffer overflow in WebRTC.
  - CVE-2020-16029: Inappropriate implementation in PDFium.
  - CVE-2020-16030: Insufficient data validation in Blink.
  - CVE-2019-8075: Insufficient data validation in Flash.
  - CVE-2020-16031: Incorrect security UI in tab preview.
  - CVE-2020-16032: Incorrect security UI in sharing.
  - CVE-2020-16033: Incorrect security UI in WebUSB.
  - CVE-2020-16034: Inappropriate implementation in WebRTC.
  - CVE-2020-16035: Insufficient data validation in cros-disks.
  - CVE-2020-16012: Side-channel information leakage in graphics.
  - CVE-2020-16036: Inappropriate implementation in cookies.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1606564800">- Remove erroneous call to ldconfig which causes Firefox crashes (boo#1179298)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1607083200">- Added patches:
  - chromium-87-icu68.patch
  - chromium-87-v8-icu68.patch
- Update to 87.0.4280.88 bsc#1179576
  - CVE-2020-16037: Use after free in clipboard
  - CVE-2020-16038: Use after free in media
  - CVE-2020-16039: Use after free in extensions
  - CVE-2020-16040: Insufficient data validation in V8
  - CVE-2020-16041: Out of bounds read in networking
  - CVE-2020-16042: Uninitialized Use in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1608465600">- Use main URLs instead of redirects in master preferences
- Remove useless %post and %postun</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610020800">- Update to 87.0.4280.141 bsc#1180645
  - CVE-2021-21106: Use after free in autofill
  - CVE-2021-21107: Use after free in drag and drop
  - CVE-2021-21108: Use after free in media
  - CVE-2021-21109: Use after free in payments
  - CVE-2021-21110: Use after free in safe browsing
  - CVE-2021-21111: Insufficient policy enforcement in WebUI
  - CVE-2021-21112: Use after free in Blink
  - CVE-2021-21113: Heap buffer overflow in Skia
  - CVE-2020-16043: Insufficient data validation in networking
  - CVE-2021-21114: Use after free in audio
  - CVE-2020-15995: Out of bounds write in V8
  - CVE-2021-21115: Use after free in safe browsing
  - CVE-2021-21116: Heap buffer overflow in audio</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1610798400">- Remove C++ only flags from CFLAGS
- Update chromium-gcc11.patch
- Comply with new Google API key rules for Derivatives</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1611403200">- Update to 88.0.4324.96 bsc#1181137
  - CVE-2021-21117: Insufficient policy enforcement in Cryptohome
  - CVE-2021-21118: Insufficient data validation in V8
  - CVE-2021-21119: Use after free in Media
  - CVE-2021-21120: Use after free in WebSQL
  - CVE-2021-21121: Use after free in Omnibox
  - CVE-2021-21122: Use after free in Blink
  - CVE-2021-21123: Insufficient data validation in File System API
  - CVE-2021-21124: Potential user after free in Speech Recognizer
  - CVE-2021-21125: Insufficient policy enforcement in File System API
  - CVE-2020-16044: Use after free in WebRTC
  - CVE-2021-21126: Insufficient policy enforcement in extensions
  - CVE-2021-21127: Insufficient policy enforcement in extensions
  - CVE-2021-21128: Heap buffer overflow in Blink
  - CVE-2021-21129: Insufficient policy enforcement in File System API
  - CVE-2021-21130: Insufficient policy enforcement in File System API
  - CVE-2021-21131: Insufficient policy enforcement in File System API
  - CVE-2021-21132: Inappropriate implementation in DevTools
  - CVE-2021-21133: Insufficient policy enforcement in Downloads
  - CVE-2021-21134: Incorrect security UI in Page Info
  - CVE-2021-21135: Inappropriate implementation in Performance API
  - CVE-2021-21136: Insufficient policy enforcement in WebView
  - CVE-2021-21137: Inappropriate implementation in DevTools
  - CVE-2021-21138: Use after free in DevTools
  - CVE-2021-21139: Inappropriate implementation in iframe sandbox
  - CVE-2021-21140: Uninitialized Use in USB
  - CVE-2021-21141: Insufficient policy enforcement in File System API
- Added patches:
  - chromium-88-compiler.patch
  - chromium-88-ozone-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch
- Removed patches:
  - gpu-timeout.patch
  - chromium-87-compiler.patch
  - chromium-87-ServiceWorkerContainerHost-crash.patch
  - chromium-87-ozone-deps.patch
  - chromium-87-v8-icu68.patch
  - chromium-87-icu68.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612440000">- Update to 88.0.4324.146 bsc#1181772
  - CVE-2021-21142: Use after free in Payments
  - CVE-2021-21143: Heap buffer overflow in Extensions
  - CVE-2021-21144: Heap buffer overflow in Tab Groups.
  - CVE-2021-21145: Use after free in Fonts
  - CVE-2021-21146: Use after free in Navigation.
  - CVE-2021-21147: Inappropriate implementation in Skia</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1612612800">- Update to 88.0.4324.150 bsc#1181827
  - CVE-2021-21148: Heap buffer overflow in V8</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613390400">- Add chromium-glibc-2.33.patch: fix Sandbox with glibc 2.33
  (bsc#1182233)</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1613563200">- Update to 88.0.4324.182 bsc#1182358
  - CVE-2021-21149: Stack overflow in Data Transfer.
  - CVE-2021-21150: Use after free in Downloads.
  - CVE-2021-21151: Use after free in Payments.
  - CVE-2021-21152: Heap buffer overflow in Media.
  - CVE-2021-21153: Stack overflow in GPU Process.
  - CVE-2021-21154: Heap buffer overflow in Tab Strip.
  - CVE-2021-21155: Heap buffer overflow in Tab Strip.
  - CVE-2021-21156: Heap buffer overflow in V8.
  - CVE-2021-21157: Use after free in Web Sockets.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1614945600">- Update to 89.0.4389.72 bsc#1182960
  - CVE-2021-21159: Heap buffer overflow in TabStrip.
  - CVE-2021-21160: Heap buffer overflow in WebAudio.
  - CVE-2021-21161: Heap buffer overflow in TabStrip.
  - CVE-2021-21162: Use after free in WebRTC.
  - CVE-2021-21163: Insufficient data validation in Reader Mode.
  - CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  - CVE-2021-21165: Object lifecycle issue in audio.
  - CVE-2021-21166: Object lifecycle issue in audio.
  - CVE-2021-21167: Use after free in bookmarks.
  - CVE-2021-21168: Insufficient policy enforcement in appcache.
  - CVE-2021-21169: Out of bounds memory access in V8.
  - CVE-2021-21170: Incorrect security UI in Loader.
  - CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  - CVE-2021-21172: Insufficient policy enforcement in File System API.
  - CVE-2021-21173: Side-channel information leakage in Network Internals.
  - CVE-2021-21174: Inappropriate implementation in Referrer.
  - CVE-2021-21175: Inappropriate implementation in Site isolation.
  - CVE-2021-21176: Inappropriate implementation in full screen mode.
  - CVE-2021-21177: Insufficient policy enforcement in Autofill.
  - CVE-2021-21178: Inappropriate implementation in Compositing.
  - CVE-2021-21179: Use after free in Network Internals.
  - CVE-2021-21180: Use after free in tab search.
  - CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  - CVE-2021-21181: Side-channel information leakage in autofill.
  - CVE-2021-21182: Insufficient policy enforcement in navigations.
  - CVE-2021-21183: Inappropriate implementation in performance APIs.
  - CVE-2021-21184: Inappropriate implementation in performance APIs.
  - CVE-2021-21185: Insufficient policy enforcement in extensions.
  - CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  - CVE-2021-21187: Insufficient data validation in URL formatting.
  - CVE-2021-21188: Use after free in Blink.
  - CVE-2021-21189: Insufficient policy enforcement in payments.
  - CVE-2021-21190: Uninitialized Use in PDFium.
- Added patches:
  - chromium-89-quiche-private.patch
  - chromium-89-quiche-dcheck.patch
  - chromium-89-skia-CropRect.patch
  - chromium-89-dawn-include.patch
  - chromium-89-webcodecs-deps.patch
  - chromium-89-EnumTable-crash.patch
  - chromium-shim_headers.patch
  - chromium-89-missing-cstring-header.patch
  - chromium-89-AXTreeSerializer-include.patch
  - chromium-88-gcc-fix-swiftshader-libEGL-visibility.patch
    (bsc#1182775)
- Removed patches:
  - chromium-fix-char_traits.patch
  - build-with-pipewire-0.3.patch
  - chromium-79-gcc-protobuf-alignas.patch
  - chromium-87-CursorFactory-include.patch
  - chromium-87-openscreen-include.patch
  - chromium-88-vaapi-attribute.patch
  - chromium-88-ozone-deps.patch
  - chromium-87-webcodecs-deps.patch
  - chromium-88-ityp-include.patch
  - chromium-88-AXTreeFormatter-include.patch
  - chromium-88-BookmarkModelObserver-include.patch
  - chromium-88-federated_learning-include.patch
  - chromium-88-ideographicSpaceCharacter.patch
  - chromium-88-StringPool-include.patch
  - chromium-88-dawn-static.patch
  - chromium-88-CompositorFrameReporter-dcheck.patch</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615464000">- Update to 89.0.4389.82
- Add x11-ozone-fix-two-edge-cases.patch to fix tab drag errors</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1615809600">- Update to 89.0.4389.90 bsc#1183515
  - CVE-2021-21191: Use after free in WebRTC.
  - CVE-2021-21192: Heap buffer overflow in tab groups.
  - CVE-2021-21193: Use after free in Blink.</changelog>
  <changelog author="Callum Farmer &lt;gmbr3@opensuse.org&gt;" date="1617451200">- Update to 89.0.4389.114 bsc#1184256
  - CVE-2021-21194: Use after free in screen capture
  - CVE-2021-21195: Use after free in V8
  - CVE-2021-21196: Heap buffer overflow in TabStrip
  - CVE-2021-21197: Heap buffer overflow in TabStrip
  - CVE-2021-21198: Out of bounds read in IPC
  - CVE-2021-21199: Use Use after free in Aura
- Add libva-2.11.patch to fix build with libva &lt;2.11
- Add libva-2.11-nolegacy.patch to fix build with libva 2.11
- Remove x11-ozone-fix-two-edge-cases.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1618401600">- Chromium 89.0.4389.128 (boo#1184700):
  * CVE-2021-21206: Use after free in blink
  * CVE-2021-21220: Insufficient validation of untrusted input in
    v8 for x86_64</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1619006400">- Chromium 90.0.4430.85 (boo#1185047):
  * CVE-2021-21222: Heap buffer overflow in V8
  * CVE-2021-21223: Integer overflow in Mojo
  * CVE-2021-21224: Type Confusion in V8
  * CVE-2021-21225: Out of bounds memory access in V8
  * CVE-2021-21226: Use after free in navigation
- Chromium 90.0.4430.72 (boo#1184764):
  * CVE-2021-21201: Use after free in permissions
  * CVE-2021-21202: Use after free in extensions
  * CVE-2021-21203: Use after free in Blink
  * CVE-2021-21204: Use after free in Blink
  * CVE-2021-21205: Insufficient policy enforcement in navigation
  * CVE-2021-21221: Insufficient validation of untrusted input in Mojo
  * CVE-2021-21207: Use after free in IndexedDB
  * CVE-2021-21208: Insufficient data validation in QR scanner
  * CVE-2021-21209: Inappropriate implementation in storage
  * CVE-2021-21210: Inappropriate implementation in Network
  * CVE-2021-21211: Inappropriate implementation in Navigatio
  * CVE-2021-21212: Incorrect security UI in Network Config UI
  * CVE-2021-21213: Use after free in WebMIDI
  * CVE-2021-21214: Use after free in Network API
  * CVE-2021-21215: Inappropriate implementation in Autofill
  * CVE-2021-21216: Inappropriate implementation in Autofill
  * CVE-2021-21217: Uninitialized Use in PDFium
  * CVE-2021-21218: Uninitialized Use in PDFium
  * CVE-2021-21219: Uninitialized Use in PDFiu
  * drop chromium-89-quiche-private.patch
  * drop chromium-89-quiche-dcheck.patch
  * drop chromium-89-skia-CropRect.patch
  * drop chromium-89-dawn-include.patch
  * drop chromium-89-webcodecs-deps.patch
  * drop chromium-89-AXTreeSerializer-include.patch
  * drop libva-2.11.patch
  * drop libva-2.11-nolegacy.patch
  * drop chromium-84-blink-disable-clang-format.patch
- chromium-90-gslang-linkage-fixup.patch: fixed a weird static/nonpic error
- chromium-90-cstdint.patch: some cstd includes added
- chromium-90-fseal.patch: F_SEAL defines added</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1619611200">- Chromium 90.0.4430.93 (boo#1185398):
  - CVE-2021-21227: Insufficient data validation in V8.
  - CVE-2021-21232: Use after free in Dev Tools.
  - CVE-2021-21233: Heap buffer overflow in ANGLE.
  - CVE-2021-21228: Insufficient policy enforcement in extensions.
  - CVE-2021-21229: Incorrect security UI in downloads.
  - CVE-2021-21230: Type Confusion in V8.
  - CVE-2021-21231: Insufficient data validation in V8.
  - Reference: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html</changelog>
</package>
<package pkgid="b66787df79ab494780bcb115ac03d6c2c02691bd20b3f7e84c4afcecfc1c7203" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="83.0.4103.116" rel="lp152.2.3.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590408000">- Swtich to GCC 9.x on Leaps to avoid gcc bug exposed in gcc8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590580800">- Add revert of location setting commit that broke build on
  openSUSE Leap 15.1:
  * chromium-83-gcc-location-revert.patch</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1590667200">- Amend chromium-prop-codecs.patch to allow proprietary_codecs
  without building third_party/openh264</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667201">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
</package>
<package pkgid="c950a18d75541e38b47a087ed149c34022cd90ce506171c60e226193f585218c" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="84.0.4147.105" rel="lp152.2.9.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
</package>
<package pkgid="bcb4229c387289ab572090278ed3f0adb6044481b02a48183938b5337fe21603" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="84.0.4147.125" rel="lp152.2.12.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
</package>
<package pkgid="e724d9a8d19a53bd40c613017edcc335f8ec10f39e8a72ef8598caff35618efa" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="84.0.4147.135" rel="lp152.2.17.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597838400">- Use new _constraint memoryperjob.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
</package>
<package pkgid="9a39b4d30ed1dc7b321ac1d66a1cecb3c0b2391b715bd559f5b8a0cea7c2e44a" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="84.0.4147.89" rel="lp152.2.6.2"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1590667200">- Add patch to not use bundled unrar:
  * chromium-norar.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591272000">- Update to 83.0.4103.97 bsc#1172496:
  * CVE-2020-6493: Use after free in WebAuthentication.
  * CVE-2020-6494: Incorrect security UI in payments.
  * CVE-2020-6495: Insufficient policy enforcement in developer tools.
  * CVE-2020-6496: Use after free in payments.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591790400">- With GCC 10 released we should be able to enable LTO again</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876800">- Update _constraints to match up LTO enablement</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876801">- Enable more system libs on 15.2+
- Remove the chromium-83-gcc-location-revert.patch as it is wrong
  approach to fix the problem</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1591876802">- Attempt to build with wayland/ozone enabled</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592222400">- Another attempt on the location handling for Leap 15.1:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592395200">- Update to 83.0.4103.106 bsc#1173029:
  * CVE-2020-6505: Use after free in speech
  * CVE-2020-6506: Insufficient policy enforcement in WebView
  * CVE-2020-6507: Out of bounds write in V8</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592481600">- Enforce to not use system borders bsc#1173063</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
</package>
<package pkgid="f245a0d3519e07ea7b23ade34a7c409fbb4b66451b315ac3d0c8dae7d47a0793" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="85.0.4183.102" rel="lp152.2.30.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
</package>
<package pkgid="da1e90059db99239e603ad25f625157daa833812a25177fa09c22727ae5c7e6e" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="85.0.4183.121" rel="lp152.2.33.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598961600">- Really update to .83 we accidentally included .69 beta release</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599566400">- Move swiftshader stuff to chromium folder directly bsc#1176207</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599652800">- Update 85.0.4183.102 bsc#1176306:
  * CVE-2020-6573: Use after free in video.
  * CVE-2020-6574: Insufficient policy enforcement in installer.
  * CVE-2020-6575: Race in Mojo.
  * CVE-2020-6576: Use after free in offscreen canvas.
  * CVE-2020-15959: Insufficient policy enforcement in networking.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1599912000">- Add back the swiftshader folder wrt bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600171200">- The egl stuff is from angle not swiftshader, thanks Fedora
  bsc#1176450</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1600776000">- Update to 85.0.4183.121 bsc#1176791:
  * CVE-2020-15960: Out of bounds read in storage
  * CVE-2020-15961: Insufficient policy enforcement in extensions
  * CVE-2020-15962: Insufficient policy enforcement in serial
  * CVE-2020-15963: Insufficient policy enforcement in extensions
  * CVE-2020-15965: Out of bounds write in V8
  * CVE-2020-15966: Insufficient policy enforcement in extensions
  * CVE-2020-15964: Insufficient data validation in media</changelog>
</package>
<package pkgid="8490176d2ea95c2268d9ef45c641a1806fe3a80935547b3fe9cf59c13978aea4" name="chromium-debugsource" arch="x86_64">
  <version epoch="0" ver="85.0.4183.69" rel="lp152.2.20.1"/>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568000">- Disable wayland integration on 15.x bsc#1173187 bsc#1173188
  bsc#1173254</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592568001">- Reduce constraints to say 20 GB disk space is enough</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913600">- Update to 83.0.4103.116 bsc#1173251:
  * CVE-2020-6509: Use after free in extensions</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913601">- Add patch to hopefully fix bsc#1173107:
  * chromium-dev-shm.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913602">- Add patch from Fedora to avoid attribute overrides in skia:
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1592913603">- Add multimedia fix for disabled location and also try one
  additional patch from Debian on the same issue bsc#1173107
  Update patch:
  * no-location-leap151.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593000000">- Add patch to work with new ffmpeg wrt bsc#1173292:
  * chromium-84-mediaalloc.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1593086400">- Disable the LTO again as it still OOMs quite often</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1593345600">- Refresh build-with-pipewire-0.3.patch to mirror similar patch
  by Fedora for Firefox; screen-capture wasn't actually working
  with the previous version of the patch.
- Add BuildRequires: pkgconfig(libspa-2.0) when building with
  pipewire support to guard against potential package splitting
  off of pipewire-spa-devel from pipewire-devel.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594900800">- Update to 84.0.4147.89 bsc#1174189:
  * Critical CVE-2020-6510: Heap buffer overflow in background fetch.
  * High CVE-2020-6511: Side-channel information leakage in content security policy.
  * High CVE-2020-6512: Type Confusion in V8.
  * High CVE-2020-6513: Heap buffer overflow in PDFium.
  * High CVE-2020-6514: Inappropriate implementation in WebRTC.
  * High CVE-2020-6515: Use after free in tab strip.
  * High CVE-2020-6516: Policy bypass in CORS.
  * High CVE-2020-6517: Heap buffer overflow in history.
  * Medium CVE-2020-6518: Use after free in developer tools.
  * Medium CVE-2020-6519: Policy bypass in CSP.
  * Medium CVE-2020-6520: Heap buffer overflow in Skia.
  * Medium CVE-2020-6521: Side-channel information leakage in autofill.
  * Medium CVE-2020-6522: Inappropriate implementation in external protocol handlers.
  * Medium CVE-2020-6523: Out of bounds write in Skia.
  * Medium CVE-2020-6524: Heap buffer overflow in WebAudio.
  * Medium CVE-2020-6525: Heap buffer overflow in Skia.
  * Low CVE-2020-6526: Inappropriate implementation in iframe sandbox.
  * Low CVE-2020-6527: Insufficient policy enforcement in CSP.
  * Low CVE-2020-6528: Incorrect security UI in basic auth.
  * Low CVE-2020-6529: Inappropriate implementation in WebRTC.
  * Low CVE-2020-6530: Out of bounds memory access in developer tools.
  * Low CVE-2020-6531: Side-channel information leakage in scroll to text.
  * Low CVE-2020-6533: Type Confusion in V8.
  * Low CVE-2020-6534: Heap buffer overflow in WebRTC.
  * Low CVE-2020-6535: Insufficient data validation in WebUI.
  * Low CVE-2020-6536: Incorrect security UI in PWAs.
- Use bundled xcb-proto as we need to generate py2 bindings
- Add new patches:
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-blink-disable-clang-format.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-include.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-84.0.4147.89.tar.xz
  * chromium-blink-gcc-diagnostic-pragma.patch
  * chromium-clang_lto_visibility_public.patch
  * chromium-quiche-invalid-offsetof.patch
  * system-libdrm.patch
- Remove no longer needed patches:
  * chromium-81-re2-0.2020.05.01.patch
  * chromium-82-gcc-incomplete-type.patch
  * chromium-82-gcc-iterator.patch
  * chromium-82-gcc-noexcept.patch
  * chromium-83-gcc-include.patch
  * chromium-83-gcc-iterator.patch
  * chromium-83-gcc-permissive.patch
  * chromium-83-gcc-serviceworker.patch
  * chromium-83-gcc-template.patch
  * chromium-83-icu67.patch
  * chromium-83.0.4103.97-skia-gcc-no_sanitize-fixes.patch
  * chromium-dev-shm.patch
- Rebase and update patches:
  * build-with-pipewire-0.3.patch
  * chromium-83-gcc-10.patch
  * chromium-84-mediaalloc.patch
  * chromium-norar.patch
  * chromium-vaapi-fix.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1594987200">- Try to fix non-wayland build for Leap builds</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1596456000">- Update to 84.0.4147.105 (boo#1174582):
  * CVE-2020-6537: Type Confusion in V8
  * CVE-2020-6538: Inappropriate implementation in WebView
  * CVE-2020-6532: Use after free in SCTP
  * CVE-2020-6539: Use after free in CSS
  * CVE-2020-6540: Heap buffer overflow in Skia
  * CVE-2020-6541: Use after free in WebUSB</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597060800">- Disable wayland everywhere as it breaks headless and
  middle mouse copy everywhere:
  bsc#1174497 bsc#1175044</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1597060801">- Chromium 84.0.4147.125 (boo#1175085)
  * CVE-2020-6542: Use after free in ANGLE
  * CVE-2020-6543: Use after free in task scheduling
  * CVE-2020-6544: Use after free in media
  * CVE-2020-6545: Use after free in audio
  * CVE-2020-6546: Inappropriate implementation in installer
  * CVE-2020-6547: Incorrect security UI in media
  * CVE-2020-6548: Heap buffer overflow in Skia
  * CVE-2020-6549: Use after free in media
  * CVE-2020-6550: Use after free in IndexedDB
  * CVE-2020-6551: Use after free in WebXR
  * CVE-2020-6552: Use after free in Blink
  * CVE-2020-6553: Use after free in offline mode
  * CVE-2020-6554: Use after free in extensions
  * CVE-2020-6555: Out of bounds read in WebGL
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597233600">- Add chromium-disable-parallel-gold.patch in order to disable
  broken parallel ld.gold with LTO.
- Enable again LTO for x86_64 and increase memory constraints.
- Use parallel WPA streaming, we will easily fit into memory constraints.
- Remove memory_constrain hack for LTO.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1597924800">- Update to 84.0.4147.135 (bsc#1175505):
  * CVE-2020-6556: Heap buffer overflow in SwiftShader</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598011200">- Fix the build by removing expectation of llvm-7.0</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529600">- Do not use libexec as we use /usr/lib as a target folder</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598529601">- Version update to 85.0.4183.83 bsc#1175757
  * CVE-2020-6558: Insufficient policy enforcement in iOS
  * CVE-2020-6559: Use after free in presentation API
  * CVE-2020-6560: Insufficient policy enforcement in autofill
  * CVE-2020-6561: Inappropriate implementation in Content Security Policy
  * CVE-2020-6562: Insufficient policy enforcement in Blink
  * CVE-2020-6563: Insufficient policy enforcement in intent handling.
  * CVE-2020-6564: Incorrect security UI in permissions
  * CVE-2020-6565: Incorrect security UI in Omnibox.
  * CVE-2020-6566: Insufficient policy enforcement in media.
  * CVE-2020-6567: Insufficient validation of untrusted input in command line handling.
  * CVE-2020-6568: Insufficient policy enforcement in intent handling.
  * CVE-2020-6569: Integer overflow in WebUSB.
  * CVE-2020-6570: Side-channel information leakage in WebRTC.
  * CVE-2020-6571: Incorrect security UI in Omnibox.
- Use bundled vpx everywhere again as it fails to compile against
  system version
- Added patches:
  * chromium-85-DelayNode-cast.patch
  * chromium-85-FrameWidget-namespace.patch
  * chromium-85-NearbyConnection-abstract.patch
  * chromium-85-NearbyShareEncryptedMetadataKey-include.patch
  * chromium-85-oscillator_node-cast.patch
  * chromium-85-ostream-operator.patch
  * chromium-85-ozone-include.patch
  * chromium-85-sim_hash-include.patch
- Removed patches:
  * chromium-82-gcc-template.patch
  * chromium-84-AXObject-stl-iterator.patch
  * chromium-84-FilePath-add-noexcept.patch
  * chromium-84-base-has_bultin.patch
  * chromium-84-fix-decltype.patch
  * chromium-84-gcc-DOMRect-constexpr.patch
  * chromium-84-gcc-noexcept.patch
  * chromium-84-gcc-template.patch
  * chromium-84-gcc-unique_ptr.patch
  * chromium-84-gcc-use-brace-initializer.patch
  * chromium-84-nss-include.patch
  * chromium-84-ozone-include.patch
  * chromium-84-revert-manage-ManifestManagerHost-per-document.patch
  * chromium-84-std-vector-const.patch
  * chromium-clang_lto_visibility_public.patch
- Updated patches:
  * chromium-83-gcc-10.patch
  * chromium-84-gcc-include.patch
  * chromium-prop-codecs.patch
  * gcc-enable-lto.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1598616000">- Add patch trying to compile with old libdrm on Leap 15.1:
  * chromium-lp151-old-drm.patch</changelog>
</package>
<package pkgid="6061198b102d4977ad21587e5055146ce24f653134df62bd9530b8aabf8b4217" name="chrony-debuginfo" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="d8319d801b4d89487f6c839d4c1048a0264860dc69accdcf850f3969a6b4c5b0" name="chrony-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="2de8ea278544279ac13069ffc3bf82147153f2cd57088c24ff042c10a1f9e564" name="chrony-debugsource" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="7c00fa9524e3c9b810cd6c633cd5ee19ea03123631274d64778590850decdf87" name="chrony-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.13.3.2"/>
  <changelog author="mpluskal@suse.com" date="1460548800">- Provide ntp-daemon (bsc#973981)</changelog>
  <changelog author="mrueckert@suse.de" date="1465387200">- update to 2.4:
  - Enhancements
  - Add orphan option to local directive for orphan mode
    compatible with ntpd
  - Add distance option to local directive to set activation
    threshold (1 second by default)
  - Add maxdrift directive to set maximum allowed drift of system
    clock
  - Try to replace NTP sources exceeding maximum distance
  - Randomise source replacement to avoid getting stuck with bad
    sources
  - Randomise selection of sources from pools on start
  - Ignore reference timestamp as ntpd doesn't always set it
    correctly
  - Modify tracking report to use same values as seen by NTP
    clients
  - Add -c option to chronyc to write reports in CSV format
  - Provide detailed manual pages
  - Bug fixes
  - Fix SOCK refclock to work correctly when not specified as
    last refclock
  - Fix initstepslew and -q/-Q options to accept time from own
    NTP clients
  - Fix authentication with keys using 512-bit hash functions
  - Fix crash on exit when multiple signals are received
  - Fix conversion of very small floating-point numbers in
    command packets
  - Removed features
  - Drop documentation in Texinfo format
- update clknetsim to a5949fe for fixing a testsuite failure:
  - add IP_PKTINFO socket option
  - accept environment variables in make
  - fix building with FORTIFY_SOURCE
  - fix compiler warning
  - support multiple SHM refclocks
  - fix recv functions with new glibc headers
- refreshed chrony-fix-open.patch: to apply cleanly after clknetsim
  update
- drop patches:
  - chrony-include-termios.patch
  - make-105-ntpauth-more-reliable.patch
- drop buildrequires for texinfo and pre requires on the install
  info packages
- no longer use make install-docs: it only installed 0 byte html
  files.</changelog>
  <changelog author="mpost@suse.com" date="1480420800">- Upgraded to version 2.4.1:
  - Bug fixes
  - Fix processing of kernel timestamps on non-Linux systems
  - Fix crash with smoothtime directive
  - Fix validation of refclock sample times
  - Fix parsing of refclock directive</changelog>
  <changelog author="mpost@suse.com" date="1484568000">- Upgraded to version 3.0:
  - Enhancements
  - Add support for software and hardware timestamping on Linux
  - Add support for client/server and symmetric interleaved modes
  - Add support for MS-SNTP authentication in Samba
  - Add support for truncated MACs in NTPv4 packets
  - Estimate and correct for asymmetric network jitter
  - Increase default minsamples and polltarget to improve stability with very low jitter
  - Add maxjitter directive to limit source selection by jitter
  - Add offset option to server/pool/peer directive
  - Add maxlockage option to refclock directive
  - Add -t option to chronyd to exit after specified time
  - Add partial protection against replay attacks on symmetric mode
  - Don't reset polling interval when switching sources to online state
  - Allow rate limiting with very short intervals
  - Improve maximum server throughput on Linux and NetBSD
  - Remove dump files after start
  - Add tab-completion to chronyc with libedit/readline
  - Add ntpdata command to print details about NTP measurements
  - Allow all source options to be set in add server/peer command
  - Indicate truncated addresses/hostnames in chronyc output
  - Print reference IDs as hexadecimal numbers to avoid confusion with IPv4 addresses
  - Bug fixes
  - Fix crash with disabled asynchronous name resolving
- Upgraded clknetsim to version 6bb6519.</changelog>
  <changelog author="mpost@suse.com" date="1485864000">- Upgraded to version 3.1:
  - Enhancements
  - Add support for precise cross timestamping of PHC on Linux
  - Add minpoll, precision, nocrossts options to hwtimestamp directive
  - Add rawmeasurements option to log directive and modify measurements
    option to log only valid measurements from synchronised sources
  - Allow sub-second polling interval with NTP sources
  - Bug fixes
  - Fix time smoothing in interleaved mode
- Upgraded clknetsim to version ce89a1b.
- Reworked the following patches to fit the new versions
  - chrony-config.patch
  - chrony-service-helper.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1505908800">- Upgraded to version 3.2:
  Enhancements
  * Improve stability with NTP sources and reference clocks
  * Improve stability with hardware timestamping
  * Improve support for NTP interleaved modes
  * Control frequency of system clock on macOS 10.13 and later
  * Set TAI-UTC offset of system clock with leapsectz directive
  * Minimise data in client requests to improve privacy
  * Allow transmit-only hardware timestamping
  * Add support for new timestamping options introduced in Linux 4.13
  * Add root delay, root dispersion and maximum error to tracking log
  * Add mindelay and asymmetry options to server/peer/pool directive
  * Add extpps option to PHC refclock to timestamp external PPS signal
  * Add pps option to refclock directive to treat any refclock as PPS
  * Add width option to refclock directive to filter wrong pulse edges
  * Add rxfilter option to hwtimestamp directive
  * Add -x option to disable control of system clock
  * Add -l option to log to specified file instead of syslog
  * Allow multiple command-line options to be specified together
  * Allow starting without root privileges with -Q option
  * Update seccomp filter for new glibc versions
  * Dump history on exit by default with dumpdir directive
  * Use hardening compiler options by default
  Bug fixes
  * Don't drop PHC samples with low-resolution system clock
  * Ignore outliers in PHC tracking, RTC tracking, manual input
  * Increase polling interval when peer is not responding
  * Exit with error message when include directive fails
  * Don't allow slash after hostname in allow/deny directive/command
  * Try to connect to all addresses in chronyc before giving up
- Upgraded clknetsim to version 71dbbc5.
- Reworked chrony-fix-open.patch to fit the new version</changelog>
  <changelog author="mrueckert@suse.de" date="1506600000">- refresh patches to apply cleanly again
  - chrony-config.patch
  - chrony-fix-open.patch</changelog>
  <changelog author="mpost@suse.com" date="1508846400">- Modified the spec file to comment out the pool statement
  in chrony.conf if _not_ building for openSUSE. (bsc#1063704).</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Cleanup spec file:
  * Drop pre systemd support
  * Run spec-cleaner</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Enable pps support</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Fix name of fillup template (was never installed before)
- Fix Requires for fillup, it's used in post, not pre.</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mpost@suse.com" date="1524052800">- Added /etc/chrony.d/ directory to the package (bsc#1083597)
  Modifed default chrony.conf to add "include /etc/chrony.d/*"</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1544788800">- Make sure to generate correct sysconfig file (boo#1117147)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1553083200">- Fix ordering and dependencies of chronyd.service, so that it is
  started after name resolution is up (bsc#1129914).
- Add chrony-service-ordering.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1578484800">- bsc#1159840: Add chrony-ntp-era-split.patch from upstream to fix
  "make check" builds made after 2019-12-20. Existing installations
  do not need to be updated as the bug only affects the test, but
  not chrony itself.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1585310400">- Read runtime servers from /var/run/netconfig/chrony.servers to
  fix bsc#1099272 and bsc#1161119.
- Move chrony-helper to /usr/lib/chrony/helper, because there
  should be no executables in /usr/share.
- Add chrony-pool-suse and chrony-pool-openSUSE subpackages that
  preconfigure chrony to use NTP servers from the  respective
  pools for SUSE and openSUSE (bsc#1156884, SLE-11424).
- Add chrony-pool-empty to still allow installing chrony without
  preconfigured servers.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1590580800">- Use iburst in the default pool statements to speed up initial
  synchronisation (bsc#1172113).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1601380800">- Integrate three upstream patches to fix an infinite loop in
  chronyc (bsc#1171806).
  * chrony-select-timeout.patch
  * chrony-gettimeofday.patch
  * chrony-urandom.patch</changelog>
</package>
<package pkgid="c35f22eb742d7a9e89914887f2c6cd347ca2359aa82a381bdd8488cd25ea385b" name="cifs-utils-debuginfo" arch="i586">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="775b15b19553c1405c49ec71f8efd220464d66ab84102d0cdc1cf4833c54e4a9" name="cifs-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="d0da1045e86c354911fbee6a3b96ef21d591353a17fb97076600ecfa0d357bae" name="cifs-utils-debugsource" arch="i586">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="535411260f2b22d8a38e90a2b5252c3b36c4c50798e6264397b69eb77d984e12" name="cifs-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="6.9" rel="lp152.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1436184000">- Add include_paths.h_for__PATH_MOUNTED.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1441886400">- Ignore samba-client-libs at build-time on post-22 Fedora systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1456142400">- Update to cifs-utils 6.5.
  + mount.cifs: ignore x- mount options
  + minor build fixes; obsoletes include_paths.h_for__PATH_MOUNTED.patch
  + minor manpage fix</changelog>
  <changelog author="lmuelle@suse.com" date="1456142401">- Don't ignore libldb, libtalloc, libtevent, and samba-client-libs at build
  time; (bsc#966174).</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="aaptel@suse.com" date="1488888000">- Get rid of init script on everything based off SLE12+ (bsc#1025471).</changelog>
  <changelog author="aaptel@suse.com" date="1493294400">- Document SMB3+ and new seal option; (fate#322075).
  + add patch 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + add patch 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 6.7:
  * mount.cifs cleanups
- includes 6.6:
  * cleanup/overhaul of cifs.upcall krb5 credcache handling
- partial cleanup with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1520337600">- Update BuildIgnore to break build cycle samba-client &lt;-&gt; cifs-utils</changelog>
  <changelog author="aaptel@suse.com" date="1536580800">- Update to cifs-utils 6.8.
  + document more mount options
  + man pages now generated from RST files
  + add python-docutils build dependency
  + update keyring to check tarball signature
  + remove 0001-manpage-correct-typos-and-spelling-mistakes.patch
  + remove 0002-mount.cifs-document-SMBv3.1.1-and-new-seal-option.patch
- Add typo corrections, better doc and configure fixes from upstream
  + add 0001-docs-cleanup-rst-formating.patch
  + add 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  + add 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  + add 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  + add 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  + add 0006-cifs-utils-support-rst2man-3.patch
  + add 0007-checkopts-report-duplicated-options-in-man-page.patch
  + add 0008-mount.cifs.rst-more-cleanups.patch
  + add 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  + add 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
- Cleanup spec file
  * assume SUSE vendor and SLE &gt;= 11</changelog>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="Aurelien Aptel &lt;aaptel@suse.com&gt;" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0014-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="palcantara@suse.de" date="1619438400">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0015-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
</package>
<package pkgid="2df8af7c8835617cf21ec33c80175ec404e8d060661260e4f9880e1c8837b422" name="clamav-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp152.6.3.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="3f26a18d05b6765f644a95cd20172fd6b8b7af72fbec1c878428d795ee9de7dc" name="clamav-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.6.1"/>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
</package>
<package pkgid="0ac943a5e4c84346c668a1bb1ce45b46805029bbfd72e3d8774223cf054381db" name="clamav-debugsource" arch="x86_64">
  <version epoch="0" ver="0.103.0" rel="lp152.6.3.1"/>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
</package>
<package pkgid="285544912041d425af4b9be31d0dc94d95e30f73b778453f94aa5cf82a982c0d" name="clamav-debugsource" arch="x86_64">
  <version epoch="0" ver="0.103.2" rel="lp152.6.6.1"/>
  <changelog author="mpluskal@suse.com" date="1532520000">- Update dendencies (pcre2, libjson-c and systemd)
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="max@suse.com" date="1533038400">- bsc#1101654: Disable YARA support for licensing reasons
  (clamav-disable-yara.patch).
- Do not ignore errors from useradd et al.
- Unclutter the spec file.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1538654400">- Update to version 0.100.2:
  * bsc#1110723, CVE-2018-15378: Vulnerability in ClamAV's MEW
    unpacking feature that could allow an unauthenticated, remote
    attacker to cause a denial of service (DoS) condition on an
    affected device.
  * bsc#1103040, CVE-2018-14680, CVE-2018-14681, CVE-2018-14682:
    more fixes for embedded libmspack.
  * Make freshclam more robust against lagging signature mirrors.
  * On-Access "Extra Scanning", an opt-in minor feature of
    OnAccess scanning on Linux systems, has been disabled due to a
    known issue with resource cleanup OnAccessExtraScanning will
    be re-enabled in a future release when the issue is
    resolved. In the mean-time, users who enabled the feature in
    clamd.conf will see a warning informing them that the feature
    is not active. For details, see:
    https://bugzilla.clamav.net/show_bug.cgi?id=12048
- Restore exit code compatibility of freshclam with versions before
  0.100.0 when the virus database is already up to date
  (bsc#1104457, clamav-freshclam-exit.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1548072000">- Update to version 0.101.1:
  * Add missing headers to fix build of packages against libclamav.
- Add missing include for str.h to libclamav/others_common.c
  (clamav-str-h.patch)</changelog>
  <changelog author="Andrey Karepin &lt;egdfree@opensuse.org&gt;" date="1553688000">- Update to version 0.101.2 (bsc#1130721)
  * CVE-2019-1787:
    An out-of-bounds heap read condition may occur when scanning PDF
    documents. The defect is a failure to correctly keep track of the number
    of bytes remaining in a buffer when indexing file data.
  * CVE-2019-1789:
    An out-of-bounds heap read condition may occur when scanning PE files
    (i.e. Windows EXE and DLL files) that have been packed using Aspack as a
    result of inadequate bound-checking.
  * CVE-2019-1788:
    An out-of-bounds heap write condition may occur when scanning OLE2 files
    such as Microsoft Office 97-2003 documents. The invalid write happens when
    an invalid pointer is mistakenly used to initialize a 32bit integer to
    zero. This is likely to crash the application.
  * CVE-2019-1786:
    An out-of-bounds heap read condition may occur when scanning malformed
    PDF documents as a result of improper bounds-checking.
  * CVE-2019-1785:
    A path-traversal write condition may occur as a result of improper
    input validation when scanning RAR archives.
  * CVE-2019-1798:
    A use-after-free condition may occur as a result of improper error
    handling when scanning nested RAR archives.
- added clamav-max_patch.patch to fix build
- dropped clamav-freshclam-exit.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="Arjen de Korte &lt;suse+build@de-korte.org&gt;" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
</package>
<package pkgid="24586414f39cf726c4518a5f7d0639cae24097c8b018658aab1f87dcc277cb5b" name="claws-mail-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="585d4855243ecd3afc8fe8efd7a64404e44af691b1ef41c1db4cd0b051b78d46" name="claws-mail-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="2e0a511430d636f6c554fc8a470a45a1bad827d51ae7f198d263a720d2b148a5" name="claws-mail-debugsource" arch="x86_64">
  <version epoch="0" ver="3.17.6" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1493812800">- Fix bug in imap_session_authenticate with imap-Fix-use-after-free.patch</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1504094400">- update to 3.15.1
  * Bug fixes:
    o bug 3348, 'Contact pictures not deleted when contact is
    deleted'
    o bug 3721, 'Fails to build in Debian kfreebsd-*'
    o bug 3744, 'Crash upon deleting tags.'
    o bug 3822, 'AttRemover deletes message and fails to create
    new one when disk is full'
    o bug 3828, '"Re-edit" should not recycle the Message-ID
    header'
    o bug 3835, 'autogen.sh fails with invalid test on line 33'
    o bug 3855, 'segfault at startup with old profile and IMAP
    account'
    o bug 3866, 'slibtool causes compile failure'
    o fix crash in sieve manager window when no account has sieve
    enabled.
    o fix incorrect labels in folder selection dialog.
    o fix RSSyl feeds getting renamed to "Untitled feed".
    o fix Resent-Date value.
    o Fix typo around libarchive in configure.ac.
- rename claws-mail-3.15.0_libcanberra-gtk3.patch to
  libcanberra-gtk3.patch
- refreshed libcanberra-gtk3.patch and imap-Fix-use-after-free.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1507550400">- Fix Reply to all replying to random people (claws#3889)
  + Do-not-use-msginfo_list-for-compose.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1510056000">- Disable fancy (HTML messages) plugin and drop build requires on
  libwebkit, this can be re-enabled when code is updated to later
  releases of libwebkit, see claws#3763.</changelog>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
</package>
<package pkgid="cd4986534ebe32eb62b946d5b2b3e820305da4c573c4638c84f23c07af1f8de9" name="claws-mail-debugsource" arch="x86_64">
  <version epoch="0" ver="3.17.8" rel="lp152.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1513771200">- Drop imap-Fix-use-after-free.patch: upstreamed
- Update to 3.16.0:
  * Reworked Preferences dialogs, adding new options
  * Compose: more UTF-8 list-item characters have been added
  * GPG: full key/signature fingerprints are now shown instead of the
    short versions
  * SSL Certificate Manager: added support for ipv6 addresses
  * CLI: the --insert option has been added to --compose, to allow
    inserting files from the command line
  * The HTML parser now supports all entities
  * Tools: a simple bash completion helper has been added,
    tools/bash_completion/claws-mail
  * Updated and added translations
  * Many bug fixes. For complete list please view ChangeLog file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Replace enchant-devel with pkgconfig(enchant), current version
  does not support enchant-2. Fixed upstream for next version.
- Replace NetworkManager-devel with pkgconfig(libnm), align with
  what configure looks for.</changelog>
  <changelog author="mvetter@suse.com" date="1534507200">- Add texlive-* dependencies for creation of manual
- bsc#1105222: Remove Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour
- Update to 3.17.0:
  * SOCKS proxy support has been added.
  * Accounts can now have their own auto-check intervals, or follow the
    global interval.
  * in the options for 'default selection when entering a folder',
    'first [...]' has been renamed to 'oldest [...]', and
    'newest [...]' items have been added.
  * Message List: when changing sort key by clicking column header,
    the sort direction is now preserved
  * Message View: keypress handling for scrolling, (PgUp/Down, Space,
    Backspace), has been improved.
  * the Network Log now displays output from LDAP operations.
  * "Go to last error" has been added to the Log Window context menu.
  * Filtering/Processing: "mark_as_spam" is no longer a final action,
    since it does not move the marked message.
  * Filtering/Processing: Resent-From and Resent-To have been added in
    Any/All header(s) (in Address Book) matcher rules.
  * when a Return-Receipt request is received by an unknown address,
    the user is now required to choose which Account to send it from.
  * Colour Labels: confirmation is asked for when clearing or
    overriding existing colour labels.
  * Address Book: basic contact merging has been added.
  * NetworkManager support: ported from libnm-util/libnm-glib to libnm.
  * Dillo plugin: this HTML rendering plugin is now once again
    available.
  * RSSyl plugin: the modified time is no longer considered when
    matching deleted items.
  * RSSyl plugin: Handle 404 and other fetch failures better.
  * Attachment Remover plugin: the user is now notified about what has
    been done when processing multiple selections.
  * SpamAssassin plugin: added support for compression (the server must
    have compression enabled, and the local spamc too).
  * SpamAssassin plugin: disabled SSLv3.
  * when using the hidden preference, hide_timezone, the time in the
    Date header is converted to UTC.
  * various other UI improvements.
  * many behind-the-scenes improvements.
  * bug fixes:
  o bug 3754, 'interactive auth dialogs pops endlessly'
  o bug 3919, 'manual filtering does not move spam'
  o bug 3936, 'LDAP StartTLS does not work for addressbooks'
  o bug 3947, 'Build break with --disable-libsm
  - -enable-crash-dialog'
  o bug 3957, 'Claws-Mail 64bit crashes when saving a draft'
  o bug 3960, 'Sends unencrypted emails when encryption fails'
  o bug 3971, 'Deleted rss feed item reappears as unread on
  feed refreshing'
  o bug 3973, ''select all' in summaryview does not
  automatically focus the summaryview'
  o bug 3978, '"From" column displays both name and email
  address for Outbox'
  o bug 3984, 'Copy-paste in find/filter field works
  incorrectly'
  o bug 3985, 'an empty progress bar remains after POP mail
  check completes'
  o bug 3986, 'IMAP quick search using non-ASCII characters
  creates an infinite loop'
  o bug 3993, 'Claws Mail connects to IMAP server when it
  should not'
  o bug 4014, '"Work offline" doesn't seem to affect RSS'
  o bug 4022, 'Closing "Account Preferences" window opens "Edit
  Accounts" window if "Edit Accounts" window has
  been opened before at least once'
  o bug 4023, 'Fix some small issues'
  o bug 4033, 'Claws Mail crashes [malloc(): memory corruption]
  while trying to save account password greater
  than 136 chars'
  o bug 4056, 'Impossible to disable overriding of offline
  mode'
  o bug 4058, '# in extended search description window should
  not be translated'
  o bug 4068, 'Claws Mail hangs when getting news from a
  certain feed'
  o actionsrc was not updated after mailbox name change
  o two crashes caused by bad GtkListStore management in
  editaddress.c
  o wrong malloc of clamd_socket struct, (CID 1220477)
  o vCalendar: possible access to uninitilized folder pointer
  (CID 1402515)
  o vCalendar: mismatch and unneeded display of unavailable
  folder class in warning (CID 1434197)
  o vCalendar: Skip whitespace chars at the beginning of ics
  stream
  o buffer overrun, always writing at buffer size + 1. (CID
  1434188)
  o wrong use of pointer-to-array as an array CID 1434191)
  o sensitivity of few preferences widgets of the SA plug-in
  o compilation using --enable-generic-umpc
  o crash in quicksearch keypress handling
  o quoting in reply to format=flowed message
  o HTML  header handling
  o 'sort_type' is lost when changing 'sort_key' from
  /View/sort the bug was apparent with a descending sort
  o Return-Receipts: MDN mail-accountname leak
  o auth retry in Managesieve - wrong state variable was being
  set
  o memory leaks</changelog>
  <changelog author="mvetter@suse.com" date="1535371200">- Update to 3.17.1:
  bug fixes:
    o bug 4072, 'Crash when clicking 'reply' or 'reply with quote''
    o Account signature: Warn and fail rather than crashing when
    format string is faulty.</changelog>
  <changelog author="msuchanek@suse.com" date="1536753600">- Re-add Do-not-use-msginfo_list-for-compose.patch
  Faulty behaviour without (claws#3889)
- Fix license warning</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1536840000">- Update Do-not-use-msginfo_list-for-compose.patch to upstream
  bug3889-fix_rev0.patch (claws#3889)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1538481600">- Update bug3889-fix_rev0.patch to new upstream fix (claws#3889,
  boo#1116917).
  Fix-bug-3889-Address-and-quoted-message-inconsistent.patch</changelog>
  <changelog author="malcolmlewis@opensuse.org" date="1546689600">- Updated to version 3.17.3:
  + Add support for TLS Server Name Indication (SNI). This enables
    the sending of your hostname, if available, to the server so
    that it can select the appropriate certificate for your
    domain. This is useful for servers which host multiple domains
    on the same IP address. This is a hidden Account preference,
    'use_tls_sni', and is enabled by default.
  + SSL/TLS certificate manager: The Delete key will now delete
    the selected certificate.
  + Window sizes are now remembered for the 'Apply tags' and
    SSL/TLS certificate manager windows.
  + Bug fixes:
  * claws#3519, 'Links including umlauts are broken'.
  * claws#4134, 'Save message to' option not set when it should
    be.
  * Prevent the Tools/SSL/TLS Certificates dialogue from
    crashing when certificate filenames contain a fingerprint.
  * Build on GNU Hurd.
  * Various build fixes when building without GnuTLS.
- Changes from version 3.17.2:
  + Message List: A context menu has been added to the column
    headers, it has two entries: a new option, 'Lock column
    headers', and 'Set displayed colums'.
  + Folder List:  A context menu has been added to the column
    headers, containing 'Set displayed columns'.
  + Preferences: The Display/Summaries option page has been split
    into three notebook pages: Folder List, Message List, and
    Defaults. The Message List page contains the new 'Lock column
    headers' option. The Defaults page contains several new
    options for new folders.
  + New Folder Properties: It is now possible to control signing
    and encrypting options on the Compose page. By default it
    follows the Account preferences, but they can be overridden to
    always sign and/or encrypt, or never sign/encrypt.
  + Saving sent messages: The global preference, 'Save sent
    messages', can now be overriden by the Folder Property and
    Account preferences. The global preference no longer needs to
    be activated for the Account Preference, 'Put sent messages
    in ...' option to function. Likewise, the Folder Property,
    'Save copy of outgoing messages to this folder instead of
    Sent', no longer relies on the global preference being set.
  + SSL/TLS certificates: The SHA-256 fingerprint is now
    displayed, and the MD5 fingerprint has been removed.
  + SSL/TLS certificates list: Status and Expiry columns have been
    added, and expired and invalid certificates are now clearly
    indicated.
  + QuickSearch: body searches are now quicker.
  + QuickSearch: symbols used in Extended searches are now
    expanded in the 'Edit' dialogue.
  + Re-editing: Flags and tags are now preserved when re-editing a
    message.
  + PDF Viewer plugin: Ctrl+scroll now zooms.
  + Tools: added cm-break.pl script, which breaks thread
    references for the selected messages; textviewer.pl has been
    updated and now requires perl 5.14.1.
  + The legacy "sylpheed-claws" symlink is no longer installed in
    the bindir.
  + Bug fixes:
  * claws#3418, 'Building on a Cross Compiling toolchain doesn't
    work'.
  * claws#3889, 'Address and quoted message inconsistent in
    reply'.
  * claws#4114, 'autogen.sh: Fix argument quoting'.
  * claws#4115, 'autogen: avoid unwarranted re-configure'.
  * claws#4120, 'New cert files are created in $HOME instead of
    in ~/.claws-mail/certs'.
  * claws#4121, 'Moving a subfolder in another folder erases its
    processing rules' (sic).
  * claws#4132, '"Mark all as (un)read" dialog appears when
    acting on 1 message only'.
  * claws#4133, 'trying to read message from an NNTP group (with
    all expired articles.'.
  * Regression where mail was not being checked at startup when
    it should have been.
  * Show correct address:port in SOCKS5 proxy connection failure
    message.
  * Prevent unexpected loss of drafted message.
  * Quicksearch eating keypresses it didn't handle.
  * Reply from mainwindow menu and toolbar when mainwindow's
    messageview is hidden.
  * CID 1438531 Fix wrong test leading to dead code.
  * CID 1439871 and validate Unicode char strictly.
  * CID 1439996 and remove unnecessary comparison.
  * RSSyl: lost processing rules when renaming folder.
  * Annoyance where your current reading is disturbed when a
    new msg is filtered into the current folder.
  * Don't leave the user in limbo when privacy system is 'none'
    and auto signing/encrypting is set.
  * Several memory leaks.
  + Translation updates.
- Drop bug3889-fix_rev0.patch as this is now upstreamed.
- Drop deprecated macros handled by file triggers.
- Disable jpilot for SLE builds.</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 3.17.4:
  * New HTML viewer plugin: Litehtml viewer
  * Added option 'Enable keyboard shortcuts' to the 'Keyboard
    shortcuts' frame on /Configuration/Preferences/Other/Miscellaneous
  * Compose: implemented copying of attached images to clipboard
  * Compose: images and text/uri-list (files) can now be attached by
    pasting into the Compose window
  * Python plugin: window sizes are now remembered for the Python
    console, the 'Open URLs' and the 'Set mailbox order' windows.
  * Fancy plugin: the download-link feature now follows redirections
  * MBOX export: the Enter key in the dialogue now starts the export
  * The date (ISO format) has been added to log timestamps
  * Update translations
  - bug 1920, 'No automatic NNTP filtering'
  - bug 2045, 'address book blocks focus on email window'
  - bug 2131, 'Focus stealing after mail check'
  - bug 2627, 'Filtering does not work on NNTP'
  - bug 3070, 'misbehaving text wrapping when URL chars are present'
  - bug 3838, 'Canceled right-click on message list leaves UI
    in inconsistent state'
  - bug 3977, 'Fix crashes when some external APIs fail'
  - bug 3979, 'Hang (with killing needed) during action which
    extracts attachments'
  - bug 4029, 'segfault after deleting message in a window'
  - bug 4031, 'fingerprint in SSL/TLS certificates for ...
    (regress error)'
  - bug 4037, 'Fix some small issues'
  - bug 4142, 'Translation error on Russian'
  - bug 4145, 'proxy server for sending doesn't work'
  - bug 4155, 'remember directory of last saving'
  - bug 4166, 'corrupted double-linked list'
  - bug 4167, 'Max line length exceeded when forwarding mail'
  - bug 4188, 'STL file is sent not as an attachment but as its
    base64 representation in plaintext'
  - CID 1442278, 'impossible to trigger buffer overflow'
  - Make key accelerators from menu work in addressbook window
  - save checkbox choices of display/summaries/defaults prefs
  - Do not throw an error when cancelling 'Save email as...'.
  - occasional crash on drag'n'drop of msgs
  - possible stack overflow in vcalendar's Curl data handler
  - crash when LDAP address source is defined in index, but
  - support is disabled
  - crash in Fancy plugin if one of the MIME parts has no
  - -ID
  - a few small memory leaks in scan_mailto_url()
  - configure script for rare cases where python is not
    installed
  - incorrect charset conversion in sc_html_read_line().
  - markup in 'key not fully trusted' warning in pgpcore
  - use after free in rare code path in rssyl_subscribe()
  - several memory leaks
  - verify_folderlist_xml() for fresh starts
  - printf formats for size_t and goffset arguments.
  - alertpanel API use in win32 part of mimeview.c
  - pid handling in debug output of kill_children_cb()
  - incorrect pointer arithmetic in w32_filesel.c</changelog>
  <changelog author="Libor Pechacek &lt;lpechacek@suse.com&gt;" date="1571918400">- Make litehtml plugin build on Tumbleweed.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574424000">- Move "Mark all read/unread" menu entries where they belong.
  remove-MarkAll-from-message-menu.patch (claws#4278)
  add-MarkAll-to-folder-menu.patch (claws#4278)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1574510400">- Add a test on build-time libetpan version to require the proper
  version at run-time (boo#1157594)</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1578657600">- Drop add-MarkAll-to-folder-menu.patch. After discussion,
  upstream rejected it at least in this form.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1582545600">- Update to 3.17.5
  + Inline Git patches now have colour syntax highlighting
    The colours of these, and patch attachments, are configurable on
    the 'Other' tab of the Display/Colors page of the general
    preferences.
  + The previously hidden preference, 'summary_from_show', is now
    configurable within the UI, on the 'Message List' tab of the
    Display/Summaries page of the general preferences, 'Displayed in
    From column [ ]'.
  + 'Re-edit' has been added to the message context menu when in the
    Drafts folder.
  + Additional Date header formats are supported:
  - weekday, month, day, hh, mm, ss, year, zone
  - weekday, month, day, hh, mm, ss, year
  + LiteHtml viewer plugin: scrolling with the keyboard has been
    implemented.
  + The included tools/scripts have been updated:
  - eud2gc.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - tbird2claws.py converted to Python 3
  - google_search.pl has been replaced with ddg_search.pl (that is,
    duckduckgo.com instead of google.com)
  - fix_date.sh and its documentation have been updated
  - multiwebsearch.pl 'fm' (freshmeat.net) has been removed; 'google'
    has been replaced by 'ddg'
  - the outdated OOo2claws-mail.pl script has been removed
  + Updated manuals
  + Updated translations: British English, Catalan, Czech, Danish,
    Dutch, French, German, Russian, Slovak, Spanish, Swedish,
    Traditional Chinese, Turkish
  + bug fixes: claws#2131, claws#4237, claws#4239, claws#4248,
    claws#4253, claws#4257, claws#4277, claws#4278, claws#4305
  + Misc bugs fixed:
  - Fix crash in litehtml_viewer when  tag has no href
  - removed "The following file has been attached..." dialogue
  - MBOX import: give a better estimation of the time left and
    grey out widgets while importing
  - Fixed "vcard.c:238:2: warning: ?strncpy? output truncate
    before terminating nul copying as many bytes from a string
    as its length"
  - RSSyl: Fix handling deleted feed items where modified and
    published dates do not match
  - fix bolding of target folder
  - when creating a new account, don't pre-fill data from the
    default account
  - respect 'default selection' settings when moving a msg with
    manual filtering
  - Fix printing of empty pages when the selected part is
    rendered with a plugin not implementing print
  - Addressbook folder selection dialogs: make sure folder list
    is sorted and apply global prefs to get stripes in lists.
  - when user cancels the GPG signing passphrase dialogue,
    don't bother the user with an "error" dialogue
  - Fix imap keyword search. Libetpan assumes keyword search is
    a MUST but RFC states it is a MAY. Fix advanced search on
    MS Exchange
  - fix SHIFT+SPACE in msg list, moving in reverse
  - revert pasting images as attachments
  - Fix help about command-line arguments that require a
    parameter.
  - Printing: only print as plain text if the part is of type
    text
  - fix a segfault with default info icon when trying to print
    a non-text part.
  - Run spec-cleaner
  - Removed remove-MarkAll-from-message-menu.patch (claws#4278)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1585915200">- prepare turning off python support when we drop python2 in TW
  we can add a conditional around the bcond for python-gtk</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595592000">- Update to 3.17.6:
  * It is now possible to 'Inherit Folder properties and processing
  rules from parent folder' when creating new folders with the
  move message and copy message dialogues.
  * A Phishing warning is now shown when copying a phishing URL, (in
  addition to clicking a phishing URL).
  * The progress window when importing an mbox file is now more
  responsive.
  * A warning dialogue is shown if the selected privacy system is
  'None' and automatic signing amd/or encrypting is enabled.
  * Python plugin: pkgconfig is now used to check for python2. This
  enables the Python plugin (which uses python2) to be built on
  newer systems which have both python2 and python3.
  Bug fixes:
  * bug 3922, 'minimize to tray on startup not working'
  * bug 4220, 'generates files in cache without content'
  * bug 4325, 'Following redirects when retrieving image'
  * bug 4342, 'Import mbox file command doesn't work twice on a row'
  * fix STARTTLS protocol violation (CVE-2020-15917 boo#1174457)
  * fix initial debug line
  * fix fat-fingered crash when v (hiding msgview) is pressed
  just before c (check signature)
  * fix non-translation of some Templates strings</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1600344000">- Disable python-gtk plugin on suse_version &gt; 1500: still relying
  on python2, which is EOL.</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1601294400">- Update to 3.17.7
  * Image Viewer: Image attachments, when displayed, are now resized
    to fit the available width rather than the available height.
  * -d is now an alias to --debug.
  * Libravatar plugin: New styles supported: Robohash and Pagan.
  * SpamAssassin plugin: The 'Maximum size' option now matches
    SpamAssassin's maximum; it can now handle messages up to 256MB.
  * LiteHTML viewer plugin: The UI is now translatable.
  Bug fixes:
  * bug 4313, 'Recursion stack overflow with rebuilding folder
    tree'
  * bug 4372, '[pl_PL] Crash after "Send later" without
    recipient and then "Close"'
  * bug 4373, 'attach mailto URI double free'
  * bug 4374, 'insert mailto URI misses checks'
  * bug 4384, 'U+00AD (soft hyphen) changed to space in
    Subject'
  * bug 4386, 'Allow Sieve config without userid without
    warning'
  * Add missing SSL settings when cloning accounts.
  * Parsing of command-line arguments.
  * PGP Core plugin: fix segv in address completion with a
    keyring.
  * Libravatar plugin: fixes to image display.</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1603108800">- Update to 3.17.8 (boo#1177967)
  * Shielded template's |program{} and |attach_program{} so that the
    command-line that is executed does not allow sequencing such as
    with &amp;&amp; || ;, preventing possible execution of nasty, or at least
    unexpected, commands
  * bug fixes: claws#4376
  * updated English, French, and Spanish manuals</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1603540800">- Additional cleanup of the template handling
  * add claws-mail-Reworked-fixing-unsecure-command-line-invocation.patch</changelog>
</package>
<package pkgid="ee4cffc8872d41b94b0d80280643af593be3566db8c9fd0212867f9916390b56" name="cluster-md-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="0019dbb25363589342262b86e2d88b119c5949804e91dca5ed2b12352479882f" name="cluster-md-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="0eb177840e933277befa16521502b54cede34ba5e4bb6d702f131cded18aceac" name="cluster-md-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="0a12db67a1eac893003e9f1d4f8070052b526c7d36497bf4f05d925811769325" name="cluster-md-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="5ffe82194fe59a2ad64280251f54914c52576194d8114fce8d3867f981fb5fdd" name="colord-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="f4f9c877adfe1bf6a7fa60c9fc0a216f1c69c168234aaddb6d0d23899643f1dd" name="colord-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="d2f6864a5bf62e2a3ad2d52df03c104725696ecf24d64dbed7fb127319cd7944" name="colord-debugsource" arch="i586">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="b70774daa3475ce3132f2133d2cda6af5c50a14ca2434f34ca6764cd2e4f6e57" name="colord-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="lp152.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1470398400">- Update to version 1.3.3:
  + Check polkit version before defining g_autoptr macros.
  + Fix an assert failure when connecting to sensors.
  + Fix gtk-doc build when srcdir != builddir.
  + Increase timeout to 60s for argyll spotread sampling.
  + Use the USB path to match the ArgyllCMS port.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Update to version 1.3.4:
  + New Features:
  - colord:
    . Add cd_color_rgb_from_wavelength().
    . Add cd_spectrum_resample_to_size().
  - colorhug:
    . Add commands for getting the device calibration spectra.
    . Increase the size of the EP0 transfer.
    . Support enabling the illuminants on the ColorHug+.
  + Bugfixes:
  - Fix a possible NULL dereference when talking to Spark
    devices.
  - Fix compile with -Wformat-signedness.
  - Fix possible division by zero if parsing /proc/cpuinfo fails.</changelog>
  <changelog author="zaitor@opensuse.org" date="1485259200">- Split out color profiles in sub package colord-color-profiles.
  Add shared-color-profiles Obsoletes and Provides.
- Replace shared-color-profiles with colord-color-profiles
  Requires.
- Pass --enable-libcolordcompat, build compatability lib.
- Pass --enable-print-profiles, build print profiles.
- Pass --disable-examples, ensure we do not build examples.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488369600">- Update to version 1.3.5:
  + New Features:
  - Add cd_color_get_blackbody_rgb_full().
  - Add cd_spectrum_multiply_scalar().
  + Bugfixes: Check the parsed context arguments in the session
    helper.</changelog>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in version 1.4.5)
- Move colord-session.service and tmpfiles config from libcolord-devel to colord package</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
</package>
<package pkgid="782a194c0be572e83ed9d2acf3fcccbdeaf56acf07e6db70fb9e4a2d7cb8a6c9" name="conmon-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1565956800">- Use `%make_build` macro instead of `%{__make}`
- Use `%make_install` macro instead of `%{__make} install`
- Use `%{_bindir}` macro instead of `%{_usr}/bin`
- Change `PREFIX` to not contain `%{buildroot}` and use the
  `$DESTDIR` variable</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566648000">- Upstream has an actual description, use it instead of just
  duplicating the summary again.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1568635200">- Set masterfd_stdout before registering ctrl_cb</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1572350400">- Add CONN_SOCK_BUF_SIZE to config
- Fix bug to close the sync pipe before exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1573732800">- Add log level trace
- Separate handling of log reopen events and terminal resize events</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1575892800">- Fix tight loop on OOM</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576065600">- Add --persist-dir to allow callers to specify a directory that
  conmon should mirror certain important files that should persist
  reboots (right now, just the container exit file)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576152000">- Kill the process group on timeout</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576238400">- Add --persist-dir flag to allow important container files to be
  written to a persistent directory
- Check OOM counter on cgroups v1 before writing OOM file
- Use splice(2) to copy from stdin</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576497600">- Persist oom files on cgroup v2
- Revert the check for  the OOM counter on cgroups v1 before
  writing OOM file</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578398400">- Add TimedOutMessage to config to share with go code
- Fix format string to limit the size of the string to 10
  characters</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
</package>
<package pkgid="d85871b3ac3cd6b1c3b4f060d5df3764f7a0e2b60e1f11cf3bfc03ea5f96bd9c" name="connman-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="bbc143e2bbc7d0d49829955683b930478f33cde4c60608f09bb51752c10e79b0" name="connman-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="31fa68abe88cae5565f49fa392b1e6b3a9d3c2ca32182b26a3938cfd9822c9f3" name="connman-debugsource" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="c03da86e18f093b5dee237f294685d6e7027ca2d1d2bbf59d7aa52431a34a30b" name="connman-plugin-hh2serial-gps-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="848754ed4723f8918784165586c3c4de5b5aa7891469c7aba33fd185e4f4d20c" name="connman-plugin-iospm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="65618230cac7e68b2934cca193e2254c5b0729e00153780a8acbafc7aed6b0ad" name="connman-plugin-l2tp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="81742c92ea775e950e15a94325bd8f4ead99e333042f43ef7e3a27f28d7dc877" name="connman-plugin-openconnect-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="41b55ea40f89a849de0fe87338e5257e19623f683836f45b276ef60654301d3e" name="connman-plugin-openvpn-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="073667b2893b40756a9d9ff0716e5f31067e90c0e332448cdde9993730dc54b1" name="connman-plugin-pptp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="274389dcd4b18c6013492556978b5bb32b5b53d9b25609b2bd3ac351a55a9bd7" name="connman-plugin-tist-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="b34cafd5e6160646850cbed95dab96d1bb28a4b88eb326735e25b009a64688fa" name="connman-plugin-vpnc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="fad29ce0ab16212d363d77fe6895ef9b73e1a15fcf73cb64fdc3f1bfe96abadc" name="connman-plugin-wireguard-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.39" rel="lp152.3.3.1"/>
  <changelog author="sleep_walker@suse.cz" date="1423224000">- bump to 1.28
  ver 1.28:
  Fix issue with DHCPv6 re-transmission timer.
  Fix issue with DHCP service ID option byte order.
  Fix issue with IPv6 connections and SLAAC/DHCPv6.
  Fix issue with telephony and IPv6 autoconfiguration.
  Fix issue with Bluetooth technology setting changes.
  Fix issue with WiFi autoscan interval calculation.
  Fix issue with WiFi and missing BSS signal strength.
  Add support for IPv4 information for WiFi Display.
  ver 1.27:
  Fix issue with memory leak in IP configuration.
  Fix issue with providing random numbers for DHCP.
  Fix issue with handling IN_MOVED_TO inotify events.
  Fix issue with channel selection for WiFi scanning.
  Add support for handling Bluetooth GN and PANU roles.
  ver 1.26:
  Fix issue with missing WiFi security provisioning support.
  Fix issue with immutable setting and provisioned services.
  Fix issue with scheduling DNS cache cleanup procedure.
  Fix issue with IPv6 Privacy setting on service removal.
  Fix issue with DHCPv6 CONFIRM message sending procedure.
  Fix issue with DHCPv6 lease expiration handling support.
  Fix issue with DHCPv4 networks and broadcast flag handling.
  Fix issue with DHCPv4 networks without gateway configuration.
  Fix issue with P2P Peer authorization handling.
  Fix issue with P2P Peer service registration.
  Add support for WiFi Display information elements.
  Add support for systemd-hostnamed integration.
  ver 1.25:
  Fix issue with handling rebind timer for DHCPv6.
  Fix issue with handling DHCP renew transaction.
  Fix issue with user supplied proxy settings and DHCP.
  Fix issue with extra status codes from captive portals.
  Fix issue with service idle state reset on failure.
  Fix issue with DNS label compression handling.
  Add support for experimental P2P Peer service.
  ver 1.24:
  Fix issue with handling slave interfaces.
  Fix issue with handling DHCPv4 broadcast flag.
  Fix issue with handling DHCPv4 lease expiration.
  Fix issue with handling WiFi auto-scanning timeout.
  Fix issue with handling domain and DNS server changes.
  Fix issue with double free and agent messages.
  ver 1.23:
  Fix issue with memory leak in technology handling.
  Fix issue with not removing host route of OpenVPN.
  Fix issue with double free in DHCP cleanup handling.
  Fix issue with handling DHCP method from oFono.
  Fix issue with IPv6-PD when disabling tethering.
  Fix issue with DNS proxy when disabling tethering.
  Fix issue with Bluetooth start and stop interaction.
  Fix issue with Bluetooth PAN networks on adapter change.
  ver 1.22:
  Fix issue with WPS state synchronization.
  Fix issue with DNS servers and default service.
  Fix issue with DHCP client and rebooting state.
  Add support for NTP exponential backoff handling.
  Add support for NTP kiss-of-death packet handling.
  Add support for Ethernet gadget networking.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1438948800">- bump to 1.29
  Fix issue with IPv6 autoconfiguration when disabled.
  Fix issue with IPv6 temporary route handling.
  Fix issue with IPv6 timers for nameservers.
  Fix issue with DHPCv6 and route configuration.
  Fix issue with DHCPv6 source port and buggy servers.
  Fix issue with DHCPv6 rapid commit option length.
  Fix issue with DHCPv6 rapid commit error handling.
  Fix issue with handling invalid WiFi passphrases.
  Fix issue with connecting Ethernet devices.
  Add support for Ethernet and VLAN usage.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1444737600">- bumpt to 1.30
    Fix issue with pending DNS request during server change.
    Fix issue with empty strings in nameservers configuration.
    Fix issue with time servers during IP configuration change.
    Fix issue with 4-way handshake during roaming.
    Fix issue with open WiFi networks security.
    Fix issue with support for WiFi AnonymousIdentity.
    Fix issue with memory leak and DHCPv6 DUID handling.
    Fix issue with DHCP client and P2P interaction.
    Fix issue with handling provision file updates.
    Fix issue with VPN state updates.
    Disable 6to4 support by default.
- add keyring file
- clean with spec-cleaner
- fix builds for all possible distributions and architectures</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1503403200">- bump to 1.35
  besides other things contains fix for CVE-2017-12865</changelog>
  <changelog author="avvissu@yandex.by" date="1504872000">- Remove obsolete macros
- Add polkit-agent-1 dependency
- Use the %tmpfiles_create macro
- Removal of ldconfig scriptlets from all packages
- Add connman-wait-online.service in post{un}
- Spec file cleanup</changelog>
  <changelog author="avvissu@yandex.by" date="1507032000">- Add connman-1.35-resolvconf.patch
- Activate connman.service if the network services disabled
- Add info in /var/adm/update-messages</changelog>
  <changelog author="avvissu@yandex.by" date="1508414400">- Add configuration file (/etc/connman/main.conf)
- Add ghost lines: main.conf connman connman-vpn</changelog>
  <changelog author="avvissu@yandex.by" date="1508500800">- Remove unrecognized options: disable-gtk-doc, enable-threads,
  disable-iwmx, enable-session-policy</changelog>
  <changelog author="avvissu@yandex.by" date="1509019200">- Change the mode of download_files (sr#521762)
- Remove connman-rpmlintrc (bnc#1057697)
- Add client as a recommended dependency</changelog>
  <changelog author="avvissu@yandex.by" date="1514289600">- Add symlink to network.service (connman-1.35-service.patch)</changelog>
  <changelog author="avvissu@yandex.by" date="1518523200">- Fix build errors due to unsupported header include order with
  newer kernels &gt;=4.15 (connman-1.35-include.patch).</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1557489600">- Update to 1.37:
  * Fix issue with handling invalid gateway addresses.
  * Fix issue with handling updates of default gateway.
  * Fix issue with DHCP servers that require broadcast flag.
  * Add support for option to use gateways as time servers.
  * Add support for option to select default technology.
  * Add support for Address Conflict Detection (ACD).
  * Add support for IPv6 iptables management.
- Change in 1.36:
  * Fix issue with DNS short response on error handling.
  * Fix issue with handling incoming DNS requests.
  * Fix issue with handling empty timeserver list.
  * Fix issue with incorrect DHCP byte order.
  * Fix issue with AllowDomainnameUpdates handling.
  * Fix issue with IPv4 link-local IP conflict error.
  * Fix issue with handling WISPr over TLS connections.
  * Fix issue with WiFi background scanning handling.
  * Fix issue with WiFi disconnect+connect race condition.
  * Fix issue with WiFi scanning and tethering operation.
  * Fix issue with WiFi security change handling.
  * Fix issue with missing signal for WPS changes.
  * Fix issue with online check retry handling.
  * Add support for systemd-resolved backend.
  * Add support for mDNS configuration setup.
- Drop connman-1.35-include.patch
- Drop connman-1.35-resolvconf.patch</changelog>
  <changelog author="Alexei Podvalsky &lt;avvissu@yandex.by&gt;" date="1582027200">- Update to 1.38:
  * Fix issue with online check on IP address update.
  * Fix issue with OpenVPN and encrypted private keys.
  * Fix issue with finishing of VPN connections.
  * Add support for updated stable iwd APIs.
  * Add support for WireGuard networks.
- Spec file cleanup</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1613131200">- Update to 1.39 (bsc#1181751):
  * Fix issue with scanning state synchronization and iwd.
  * Fix issue with invalid key with 4-way handshake offloading.
  * Fix issue with DNS proxy length checks to prevent buffer overflow. (CVE-2021-26675)
  * Fix issue with DHCP leaking stack data via uninitialized variable. (CVE-2021-26676)</changelog>
</package>
<package pkgid="261b06723ed39c78136af85db24bf3670d495efcd9295041fbf48c03115036db" name="corosync-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="126c2d1543a9bc6bfc19e390aeb65506225a07580e5c6a74dbb867e9e84817c2" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="fdab348c5fcee230760b1e4b96742c411984e01937577f36ff89afa0f4a46b32" name="corosync-debugsource" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="53418428dae39575c235e7f44bb3fd56529237f1e682c2c198ba0b21dabad00b" name="corosync-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="f44ab44a7e070beaf334884fa97a01ab711099671f08369d917288bdf5f073ed" name="corosync-qdevice-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="d39f0496c6be30bbd3729efe35f6591258a346ea2612bd729dbdd254090d12dc" name="corosync-qdevice-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="486b01a343a90943c2843246781576ae6ca2e7735179085e0b1f1b3e1485bf4a" name="corosync-qnetd-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="d024ec43a7013db89b3ed6e1f7636f5e5d0408801b1401aee74f68e922499752" name="corosync-qnetd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="c4ab5a7ce5632363cdaded17dc51c678d4274dcf2d53c0cc6eda20e1edbbf29e" name="corosync-testagents-debuginfo" arch="i586">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="5992d6903f09e0bd9a08a84782330a4bc63c0df3ca2fc7815e45092162aa5860" name="corosync-testagents-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.5" rel="lp152.5.3.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bliu@suse.com" date="1512475200">- wd: gcc shows snprintf warnings(bsc#1071187)
    Added: 0008-wd-fix-snprintf-warnings.patch</changelog>
  <changelog author="bliu@suse.com" date="1514376000">- add support for corosync-qdevice in yast2-cluster and bootstrap(bsc#1070961)
    Added: 0009-add-config-for-corosync-qnetd.patch</changelog>
  <changelog author="bliu@suse.com" date="1514894400">- qdevice failed to run(bsc#1074276)
    Added: 0010-qdevice-mv-free-str-after-port-validation.patch</changelog>
  <changelog author="bliu@suse.com" date="1515067200">- issue with partial packets assembly when multiple nodes are sending big packets(bsc#1074929)
    Added: 0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch</changelog>
  <changelog author="bliu@suse.com" date="1515585600">- totemudp[u]: Drop truncated packets on receive(bsc#1075300)
    Added: 0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1517400000">- corosync exposes itself for a self-crash under rare circumstance(bsc#1078412)
    Added: 0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    Modified: remove unncessary git commit messages
    0001-coroapi-Use-size_t-for-private_data_size.patch
    0002-fix-ifdown-udp.patch
    0005-do-not-convert-empty-uid-gid-to-0.patch
    0008-wd-fix-snprintf-warnings.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch</changelog>
  <changelog author="bliu@suse.com" date="1520251200">- some coverity fixes for corosync on upstream(bsc#1083895)
    Added: 0015-coverity-fixes.patch</changelog>
  <changelog author="bliu@suse.com" date="1520510400">- [Build 489.1] Corosync is not working after upgrade from sle11sp4-ha to sle15-ha(bsc#1083561)
    Added: 0016-bsc#1083561-upgrade-from-1-x-y.patch</changelog>
  <changelog author="bliu@suse.com" date="1523361600">- UNKNOWN version in corosync pkg-config(bsc#1088619)
    Added: 0017-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1523620800">-  (CVE-2018-1084) VUL-0: CVE-2018-1084: corosync: Integer overflow in totemcrypto(bsc#1089346)
    Added: 0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch</changelog>
  <changelog author="bliu@suse.com" date="1523966400">- corosync-2.4.4 is available now(bsc#1089836)
    man:fix in corosync-qdevice.8
    quorumtool: remove duplicated help message
    cfg: nodeid should be unsigned int
    coroparse: Use readdir instead of readdir_r
    wd: fix snprintf warnings
    Fix compile errors in qdevice on FreeBSD
    qdevice: mv free(str) after port validation
    Fix various typos
    Fix typo: recomended -&gt; recommended
    man: support SOURCE_DATE_EPOCH
    configure: add --with-initconfigdir option
    Use static case blocks to determine distro flavor
    Use RuntimeDirectory instead of tmpfiles.d
    coroparse: Do not convert empty uid, gid to 0
    sam: Fix snprintf compiler warnings
    quorumtool: Use full buffer size in snprintf
    man: Add note about qdevice parallel cmds start
    sync: Remove unneeded determine sync code
    sync: Call sync_init of all services at once
    corosync.conf: publicize nodelist.node.name
    totemudp[u]: Drop truncated packets on receive
    logging: Make blackbox configurable
    logging: Close before and open blackbox after fork
    init: Quote subshell result properly
    blackbox: Quote subshell result properly
    qdevice: quote certutils scripts properly
    sam_test_agent: Remove unused assignment
    qdevice: Fix NULL pointer dereference
    quorumtool: Don't set our_flags without v_handle
    qdevice: Nodelist is set into string not array
    qdevice: Check if user_data can be dereferenced
    qdevice: Add safer wrapper of strtoll
    qdevice: Replace strtol by strtonum
    qnetd: Replace strtol by strtonum
    main: Set errno before calling of strtol
    totemcrypto: Implement bad crypto header guess
    cpg: Use list_del instead of qb_list_del
    totemcrypto: Check length of the packet
    totemsrp: Implement sanity checks of received msgs
    totemsrp: Check join and leave msg length
    totemudp: Check lenght of message to sent
    qdevice msgio: Fix reading of msg longer than i32
    logsys: Avoid redundant callsite section checking
    man: corosync-qdevice: fix formatting vs. punctuation
    man: corosync-qdevice: some more stylistics
    man: fix cpg_mcast_joined.3.in
    libcpg: Fix issue with partial big packet assembly
    totempg: Fix fragmentation segfault
    totempg: use iovec[i].iov_len instead of copy_len
    totempg: Fix corrupted messages
    cpg: Handle fragmented message sending interrupt
    corosync.aug: Add missing options
    systemd: Delete unnecessary soft_margin
    Added:
    corosync-2.4.4.tar.gz
    0010-qdevice-net-instance.c-optarg-should-be-str.patch
    Deleted:
    0007-sync-Call-sync_init-of-all-services-at-once.patch
    0008-wd-fix-snprintf-warnings.patch
    0009-add-config-for-corosync-qnetd.patch
    0010-qdevice-mv-free-str-after-port-validation.patch
    0011-libcpg-Fix-issue-with-partial-big-packet-assembly.patch
    0012-totemudp-u-Drop-truncated-packets-on-receive.patch
    0013-logging-Make-blackbox-configurable.patch
    0014-logging-Close-before-and-open-blackbox-after-fork.patch
    0015-coverity-fixes.patch
    0018-bsc#1089346-corosync-Integer-overflow-in-totemcrypto.patch
    corosync-2.4.3.tar.gz
    Renamed:
    0009-add-config-for-corosync-qnetd.patch -&gt; 0007-add-config-for-corosync-qnetd.patch
    0016-bsc#1083561-upgrade-from-1-x-y.patch -&gt; 0008-bsc#1083561-upgrade-from-1-x-y.patch
    0017-bsc#1088619-add-version.patch -&gt; 0009-bsc#1088619-add-version.patch</changelog>
  <changelog author="bliu@suse.com" date="1524744000">- NSS_NoDB_Init: the parameter is reserved, must be NULL(bsc#1090996)
    Added: 0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch</changelog>
  <changelog author="bliu@suse.com" date="1525262400">- cpg: Inform clients about left nodes during pause(bsc#1091593)
    Added: 0012-cpg-Inform-clients-about-left-nodes-during-pause.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1565956800">- corosync-2.4.5 upgrade(bsc#1144200)
  block_unlisted_ips block package from ips not in nodelist
  Qnetd now supports updated NSS database format
  Partly fixed problem with ifdown (only for UDPU)
  Added:
  corosync-2.4.5.tar.gz
  bug-1001164_corosync.conf-example.patch
  corosync-init-lockfile-path-error.patch
  Deleted:
  corosync-2.4.4.tar.gz
  0003-fix-tmpfiles-create.patch
  0004-mark-corosync-as-a-static-service.patch
  0005-do-not-convert-empty-uid-gid-to-0.patch
  0007-add-config-for-corosync-qnetd.patch
  0009-bsc#1088619-add-version.patch
  0010-qdevice-net-instance.c-optarg-should-be-str.patch
  0011-NSS_NoDB_Init-the-parameter-is-reserved-must-be-NULL.patch
  0012-cpg-Inform-clients-about-left-nodes-during-pause.patch
  bnc#872651-stop-cluster.patch
  disable-build-html-docs.patch
  Renamed:
  0001-coroapi-Use-size_t-for-private_data_size.patch -&gt; upstream-afd97d7884940_coroapi-Use-size_t-for-private_data_size.patch
  0006-Fix-compile-warnings-with-GCC-7.2.1.patch -&gt; Fix-compile-warnings-with-GCC-7.2.1.patch
  0008-bsc#1083561-upgrade-from-1-x-y.patch -&gt; bug-1083561_upgrade-from-1-x-y.patch
  bnc#882449-corosync-conf-example.patch -&gt; bug-882449_corosync-conf-example.patch
  0002-fix-ifdown-udp.patch -&gt; bug-1032634_fix-ifdown-udp.patch
  bsc#1001164-corosync.conf-example.patch -&gt; bug-1001164_corosync.conf-example.patch</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1570622400">- Replace corosync-2.4.5.tar.gz with a clean source.tar.gz(bsc#1144200)
  The reason is some binaries left in corosync-2.4.5.tar.gz</changelog>
  <changelog author="Yuan Ren &lt;yren@suse.com&gt;" date="1573128000">- Packaging bug updating Corosync(bsc#1155792)
  Some noisy output from Tumbleweed caused by RPM macro not fairly used
  Make sure corosync sysconfig keep original configured firstly(bsc1153502)
  Store the tmp file to a more security directory</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1584705600">- Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
- Fix bsc#1166899, return value of "corosync-quorumtool -s" was not correct
  Added: bug-1166899-quorumtool-Fix-exit-status-codes.patch</changelog>
  <changelog author="XinLiang &lt;XLiang@suse.com&gt;" date="1587556800">- Revoke the patch bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Deleted: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: That path will cause problems while doing rolling upgrade, see bsc#1168771</changelog>
  <changelog author="Aleksei Burlakov &lt;aburlakov@suse.com&gt;" date="1601985600">- (Again) Fix bsc#1163460 Corosync does not support link-local IPv6 addresses
  Added: bug-1163460-totemip-Add-support-for-sin6_scope_id.patch
  Reason: This time the path will NOT cause problems when doing rolling
    upgrade, see bsc#1168771</changelog>
</package>
<package pkgid="5615584ae1cfdf071cf3a5638d1296a5a0c1b3588b253dcee80927449befe39d" name="coturn-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="23d548fcba4b26cd9a24a000cdd2580605462993bad8befcca0270eec3d5c7a6" name="coturn-debugsource" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="456032d6d96e99f3b247d57175e53feb72af1df575c63c12b81aa14f5e968bd6" name="coturn-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.1.3" rel="lp152.2.3.1"/>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586433600">- Initial release of coturn 4.5.1.1</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586606400">- Shorten description by stripping the long list of all RFCs.
- Drop %defattr; use %autosetup.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1586692800">- Use pkgconfig(systemd) for packaging</changelog>
  <changelog author="lars@linux-schulserver.de" date="1586865600">- added apparmor profile (coturn-apparmor-usr.bin.turnserver)
- fix executable permissions in devel package by using defattr</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1588593600">- Extended Readme.SUSE with description on how to bind to ports below 1024
- Fixes and enhancements in service-file
- /etc/sysconfig/coturn defaults now to not show software's version to the public
- Version 4.5.1.2:
  * Do not display empty CLI passwd alert if CLI is not enabled
  * Removed several functions: gh#coturn/coturn#359
  * Fix webadmin IP permission and possible SQL-injections: gh#coturn/coturn#386
  * Fix Mongo driver crash on invalid connection string: gh#coturn/coturn#390
  * enhanced fread return length check: gh#coturn/coturn#392
  * disconnect database gracefully: #367
  * Using SSL_get_version method for BoringSSL compatibility:
    turn_session_info-&gt;tls_method returns real TLS version:
    gh#coturn/coturn#382
  * Added systemd service example: gh#coturn/coturn#276
  * Add bandwidth usage reporting packet/bandwidth usage by peers:
    gh#coturn/coturn#284
  * Modifying configure to enable compile with private libraries:
    gh#coturn/coturn#381
  * Append to log files rather than overriding them: gh#coturn/coturn#417
  * Updated incorrect string length check for 'ssh': gh#coturn/coturn#442
  * Fix Dockerfile for latest Debian: gh#coturn/coturn#449
  * CVE-2020-6061, CVE-2020-6062: specially crafted HTTP POST request can lead
    to heap overflow which can result in information leak:
    gh#coturn/coturn#489
  * STUN input validation: gh#coturn/coturn#472
  * Allow MD5 in FIPS mode: gh#coturn/coturn#398
  * update travis config ubuntu/mac images
  * added null check for second char: gh#coturn/coturn#466
  * compiler warning fixes: gh#coturn/coturn#470
  * Fix a memory leak when an SHATYPE isn't supported: gh#coturn/coturn#471
  * fix compiler warning comparison between signed and unsigned integer expressions
  * fix compiler warning string truncation
  * change Diffie Hellman default key length from 1066 to 2066
  * drop of supplementary group IDs: gh#coturn/coturn#522
  * Unify spelling of Coturn: gh#coturn/coturn#514
  * Rename "prod" config option to "no-software-attribute": gh#coturn/coturn#506
    gh#coturn/coturn#478
  * change sql data dir in docker-compose-all.yml: gh#coturn/coturn#516
  * add flags to disable periodic use of dynamic tables: gh#coturn/coturn#525
  * fix typos and grammar: gh#coturn/coturn#463, gh#coturn/coturn#488
  * Update README.docker: gh#coturn/coturn#475
  * fix config extension in README.docker: gh#coturn/coturn#519
  * Code beautifications: gh#coturn/coturn#327, gh#coturn/coturn#455,
    gh#coturn/coturn#513
- Removed patches now included in upstream: coturn-4.5.1.0-append-log.patch,
  coturn-4.5.1.1-cve-2020-6061.patch, coturn-4.5.1.1-cve-2020-6062.patch and
  coturn-4.5.1.1.missing-call-to-setgroups-before-setuid.patch</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1593518400">- Version 4.5.1.3:
  * Remove reference to SSLv3: gh#coturn/coturn#566
  * Ignore MD5 for BoringSSL: gh#coturn/coturn#579
  * STUN response buffer not initialized properly; he issue found and
    reported gh#coturn/coturn#583 by Felix Dörre all credits belongs to
    him. CVE-2020-4067, boo#1173510
- Let coturn allow binding to ports below 1024 per default</changelog>
</package>
<package pkgid="fef5f3cb13da0a5c6787c5f958c325fda0f12142513ee7677e27d18dcfd7a67f" name="cpp10-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="ac885909d5bdf535dcde6422c89e223c162b71af94ecb1841c2b212509bdd2ed" name="cpp7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="7b185af034e3489fa7913fb6df0680245ccf4e348fd5bbb0e960ed3fcd226558" name="cpp7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="ece298bcb4a9643c23eb9f67f2a2bb5532a9b4bb1b9e87b109d208028a70ea7a" name="cpp7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="631d2a65505b83d557151139b84d09385e365386adb0b1c65a1176b04de86cf2" name="cpp7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="bfdc372f111749831f10d7e0b5e6074b1b155df8c683a5dc91573ae32c3a747c" name="cpp7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="8b5de63d062098335e223ff39581a3b9210704f89d2072b95547e5fcb16734eb" name="cpp7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="1f05487487c166ef5a1386cd6b329df004de00cd64bddd218fa12de61d7e3459" name="cpp9-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="32b3973ab2dd48735d014cf14e8bf74ce867ff3bff88324ea4ffe3fbb3ca6d0c" name="cpp9-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="05f71462ad0518bfabc2a580a43c604d8f338ca9455401868110ae9c1b5f82b3" name="cpupower-bench-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="0abd0976da7d2be640a7be4e7017bad46e008c0745629f4d66245bcd28064423" name="cpupower-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="f334625fd6af7f61f91b833fb090b59f30884ec24736982809a5aef5aeccfdfc" name="cpupower-debugsource" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp152.5.3.1"/>
  <changelog author="josef.moellers@suse.com" date="1507204800">- Enter decode_misc_enable_msr() only if genuine_intel.
  [bsc#1048546,
  turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch]</changelog>
  <changelog author="jengelh@inai.de" date="1507204801">- Rectify RPM groups. Replace old $RPM_ shell variables by macros.
  Apply consistent styling to macros.</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041332,bsc#996052,bsc#976983]</changelog>
  <changelog author="trenn@suse.de" date="1508500800">fate#321274
- Provide rapl domain info (cpupower powercap-info cmd)
  * Add: cpupower_rapl.patch
- Provide rapl power monitoring
  * Add: rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1605614400">- Add AMD Fam 19h support (bsc#1177394)
  A tools-power-turbostat-Support-AMD-Family-19h.patch</changelog>
</package>
<package pkgid="ada5f6333c71ba1e98ae89b6e43a0089671dede37ee079dc364e24cdd7f07d30" name="crash-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="2987a173c4253282183256dfa54ca98f499adfec3596641b96f37cccf1f5466d" name="crash-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="28fbef173d2ee41aebd68f314e814aebcebd98921a21d69ce067112e70daa3e7" name="crash-debugsource" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="55675b3e58a8691d455a30ae312a321affa028a0b600004cbf0f46b650bd7833" name="crash-debugsource" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="95eb2c2f7124b6b914e423e3e77f0e5a620589f4b4f2d74315e555a530ee5a92" name="crash-eppic-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="83adaecc087814b351482755badf5b83d4ab035c5bd3ad94c9b476f741d64ce3" name="crash-eppic-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="96a8e7c05ab166cf859b9ef4d8c6c16e37e2f4515a42396072a781e86648c909" name="crash-gcore-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="f97b7d19fb790388b850281c50d6df4f14405be2a975457d6a7d6addb6c05e06" name="crash-gcore-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="f41dbbcc4f0c33c755489e79f6ab2bc854d4f32ab0f4e523c6c2ccbda65ac527" name="crash-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.36" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="62c8986ca1c097210302f872458e7c573f91eed9f8b8d83736baf04d414df41c" name="crash-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.69" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="8c9f16d88ae239a0bbe708f51a6281f0514f2755f2e8c53feeb28afcc50a69ed" name="crash-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.36" rel="lp152.3.2.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="f09d16ab9029081be687965b1f2af513d956c7523b43b95569a58f6a7da479f3" name="crash-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.8_k5.3.18_lp152.69" rel="lp152.3.6.1"/>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source (bsc#1103371).
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705600">- Upgrade the source tarball to version to 7.2.3
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
- Refreshed:
    crash-compressed-booted-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1530705601">- Added crash-fix-snprintf-overflow.patch
  Fix to address a "__builtin___snprintf_chk" compiler warning.
- Added crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Update the recognition of x86_64 CPU_ENTRY_AREA.</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)</changelog>
  <changelog author="Jeffrey Cheung &lt;jcheung@suse.com&gt;" date="1539345600">- Sync with SLE15 SP1 (SR#173916) to enable the kmp-rt for SLERT15 SP1 only
  set %if 0%{?sle_version} &gt;= 150100</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1545134400">- Fix SLE15 SP1 Incorrect vmcore generated (bsc#1119791).
  Added:
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch
  This is not compatible with SLE15 and SLE12 SP4.</changelog>
  <changelog author="sparschauer@suse.de" date="1547208000">- Update the recognition of x86_64 CPU_ENTRY_AREA (bsc#1104743, bsc#1090127)
  Added:
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch</changelog>
  <changelog author="dmair@suse.de" date="1550145600">- Update for XEN dom0 changes in v4.11 that cause coredumps made
  of a domU using virch on the dom0 to fail to load in the dom0
  version of crash reporting "crash: invalid kernel virtual address:
  &lt;address&gt; type:fill_pcpu_struct", followed by "WARNING: cannot
  fill pcpu_struct" and "crash: cannot read cpu_info"
  (bsc#1124690 and bsc#1122594)
  Added:
  crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1556020800">- Upgrade the source tarball to version 7.2.5
- drop patches obsoleted by version upgrade:
  * crash-fix-snprintf-overflow.patch
  * crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
- post-7.2.5 upstream patches for kernel 5.0/5.1 compatibility:
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1561377600">Upgraded the source tarball to version 7.2.6 to bring better
  support of version 5 kernels such as 5.3 in SLE-15-SP2
  (bsc#114706)
  Dropped the following patches obsoleted by the version upgrade:
  * crash-xen-invalid-pcpu-vaddr-use-hardware-domain-symbol.patch
  * crash-fix-for-4.20-without-CONFIG_RANDOMIZE_BASE.patch
  * crash-fix-for-virsh-dump-dumps-with-KASLR.patch
  * crash-fix-kmem-z-on-kernel-5.0.patch
  * crash-fix-kmem-i-on-kernel-5.0.patch
  * crash-fix-sym-for-module-symbols-on-kernel-5.0.patch
  * crash-fix-dis-function-for-module-symbols-on-kernel-5.0.patch
  * crash-handle-radix_tree_root-changes-in-post-5.1-kernels.patch
  * crash-find-kernel-configuration-data-with-kernel-5.1.patch
  * crash-fix-dev-dD-on-kernel-5.1.patch
    crash-Fix-and-an-update-for-the-ipcs-command.patch
    crash-update-recognition-of-x86_64-CPU_ENTRY_AREA.patch
  Re-aligned the following patches with the new version source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-debuginfo-compressed.patch
    crash-make-emacs-default.diff
    crash-sles9-time.patch
  Modified the following patches to integrate with version upgrade:
    crash-compressed-booted-kernel.patch
    crash-SLE15-SP1-With-Linux-4.19-rc1-up-MAX_PHYSMEM_BITS-to-128TB.patch
    crash-SLE15-SP1-Fix-for-PPC64-kernel-virtual-address-translation-in.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1565265600">- Added patch for commit 326e1b8f83a4318b09033ef754f40c785aed5e68
  in linux 5.3:
  crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1566388800">- Disable LTO for PowerPC as bypass boo#1146646</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573214400">- add crash-symbols-add-support-for-XZ.patch (bnc#1155921)</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1573560000">- Added commit c0371f6ee2cae31ec9f506bbd231ab8fbe334c13 - Fix to
  allow live analysis of s390x kernels that have been configured
  with CONFIG_RANDOMIZE_BASE=y (KASLR). This allows crash to load
  the coredump without the need for "--kaslr=&lt;offset&gt; on the
  command-line.
  Added:
    crash-s390-autodetect-kaslr.patch
  Implements jsc#SLE-9797</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1578657600">- Upgraded the source tarball to version 7.2.7. This is required
  to support coredumps from currently used kernel versions in the
  product (bsc#1159686).
- droped the patch obsoleted due to already being present in the
  new source:
  * crash-allow-kmem-section-is-early.patch</changelog>
  <changelog author="David Mair &lt;dmair@suse.com&gt;" date="1580817600">- Upgraded the source to version 7.2.8. The previous version was
  modified to support newer kernels used in SLE-15-SP2 but was not
  complete.
  * Includes a fix for kernels that contain:
    e0703556644a531e50b5dc61b9f6ea83af5f6604
    which introduces symbol namespaces. Without the change then
    depending on architecture:
    (1) the kernel module symbol list will contain garbage
    (2) the session fails during initialization with a dump of
    the internal buffer allocation stats followed by the
    message "crash: cannot allocate any more memory"
    (3) the session fails during initialization with a
    segmentation violation (bsc#1162064)
  * Includes the merge of the S390x patches since crash 7.2.7
    (bsc#1156645/bsc#1161640)
  * Source already includes XZ compressed module support, removed:
    crash-symbols-add-support-for-XZ.patch
  * Refreshed patches that were no longer aligned with source:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch
    crash-s390-autodetect-kaslr.patch
    crash-sles9-time.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1585742400">- Add crash-Fix-for-reading-compressed-kdump-dumpfiles-from-syst.patch
  Fix integer overflow with large memory configuration (bsc#1168233 ltc#184660).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1586347200">- Add crash-fix-kmem-sS-for-caches-created-during-SLUB-bootstrap.patch
  Fix "kmem -[sS]" for caches created during SLUB bootstrap (bsc#1164815 ltc#182973).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Drop crash-s390-autodetect-kaslr.patch which has been merged in 7.2.7.</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587211200">- Make Factory ppc64 crash usable on both SLE 15 SP1 and releases before
  SLE15 SP1 (bsc#1148197).  This is only a workaround that requires to build
  crash for each codestream separately.</changelog>
</package>
<package pkgid="68e2449a5ab4f7510e2be33fcb6ed2483d8d22e6547b10d7edc81c906393fd3f" name="cross-aarch64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0aaafe8b14df145264a21becaa4a8f92e54298b3a06a06250b519daba96a6241" name="cross-aarch64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="df27a3fbd2836ad774383b87744febd5359be6292f5dda329e5eee6cc6f50e66" name="cross-aarch64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="578277fda09d13cf45441fa93956b2e9268092c6bcf5d55380a53eb9aacbd719" name="cross-aarch64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4c9632572202ca3ab2d508f05eda1942e1bc86b3921b835c052801388f53a1e8" name="cross-arm-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c89cabe76516b3bff33197f096cf7361c4bd46f1770537b8b0d586ec7e75f8b8" name="cross-arm-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="7b587976bca206f4a4cce7c12766fd10db6d08db407f6579fa5895098c6f1fcc" name="cross-arm-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0a5efe66f0334262bf3f73227852eb95401b98eb85467c9359adda4129f5892f" name="cross-arm-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="4b0189377763b63874610ce9e0a9a5a242cd10e9bc387225aad996fe5e04ed40" name="cross-avr-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="9beb5fd535695ab0b6181cf4f86a1c6018a626530161b634ad7abbc03b3f6d08" name="cross-avr-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9175848b47d6e4dd494677cb227ed39b9f8df466d73d2dad3de47f204e001188" name="cross-avr-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0e9f1043569b19536aa1010e0bb1d12149ec4fc02197c9b2cd49e4f5feea1ed9" name="cross-avr-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="87113dc69fa9ac9e504d75eac544a16c8fca04e16a6a97740bbe7c6901aaa289" name="cross-epiphany-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="d9e4c122c7203ea179afe7e0111b53e9cf2885a621c75bde377598c64dbbbd8b" name="cross-epiphany-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="282a863ab593a0aebc83fc0539c3cda54e262a5ce7fecd7dfc24cc43b674bcda" name="cross-epiphany-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="9cc9db7a2e34915bffdb0b51e567e61a4b545d1ee340c8b3eba79a9b7a99d79b" name="cross-epiphany-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="26c6f99a3b89cc0881a39421c27de525d8b4b7b80d41dd4a302575cd91a3d6bc" name="cross-hppa-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="6bc5bf23b0bb1c495b60e3923c388a021d65d932802475b936f24998acc834e3" name="cross-hppa-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f71a4e1b6797496d51f03dd10917318054e85a4766f7aa33444c2247deb22382" name="cross-hppa-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5e323a98d340d6438606baa6fb5d0c20a39a086fc0d3b3596d4d3912a8bb57da" name="cross-hppa-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="64620b8bed068ba827118bfd157e8b64df2e5cda7f582a2b4a40896fa693aefc" name="cross-hppa64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="d47dcc66a221d67d513ad5ae287188096f84d0bef3b3384c6751bbd4f6e782f9" name="cross-hppa64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="6bcf5188f7fd9b79041ec6b88aaa3940bbb2b5e902405d6594342e6954c74743" name="cross-hppa64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="29a8d46d07aa3fac5e23657a472b32870a3f6b70bb4cac420ed7f6a1b7cf6caa" name="cross-hppa64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="c5525a0cf5f3db0080955d5c136c60fdd28fdb4adf3902d7d73ed95c0da312d8" name="cross-i386-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="26d1a7ec11e9625869a0d52bd512be7033fbf35b7b30d3e754a5a9ef4d13a9d5" name="cross-i386-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="db523a81a30699bd205082a8b04015370d94ec304b86c23bac48cb8848240eee" name="cross-i386-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="32bc16b561aab48dd3492c42480cfded48ec46b004af26bf67b2216c5079c1e3" name="cross-i386-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0c8a1ea4d04e3f84542cb3aa32c3151008612593e528c6810d5ca437f4b2cfd0" name="cross-ia64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="9b009c27cf263b5f07a8881d0576431d8a091be5499a024abefbee04d1a3b05b" name="cross-ia64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="726fe2e78488aaaabea2d206a9ba86bdde1c1d7dc1985961a73104cc93ff2255" name="cross-ia64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="eb80bd32eb5d0975f01c590f8aeaee05c010dfaf50ac00439bc4873e9211f941" name="cross-ia64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="68f525cb9543d664c29096e640531f4a43a0c29ac429650c1fd926540f8f9924" name="cross-m68k-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c0b6a44abae65d71c7b2caf1cc1f8050a2642c2621193953fc7d5ad85a58f1be" name="cross-m68k-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="517a0405127d85aa0c35954411c6c3f9ea5767f172b7abb49fe16e27fb99a104" name="cross-m68k-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="90fa97f5e52e9d572d8e97e7bb01153afd9415b64d4fb6c18a7ed887f1d509b1" name="cross-m68k-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="6978a1d42f21031a06710b9274c9c5c9f9d33d3d3668feaa17f51fc1b0c040d0" name="cross-mips-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f80734daf45b64ec9f6a2b9a5b2983ba164813cdefddd42f3aa9325e4f03e12b" name="cross-mips-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="6a5c4c35265a35dc950c8327c7a2844a06cfb9bb04f02b8c573856f679f8a8ed" name="cross-mips-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="dcdc87968a4a2e389894fe41a8075590a6a36f688d86902415a829c51524c849" name="cross-mips-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="14a2bf685e816a085179433921986fa1ebb6415fdb4ba1fa381c53e9295667ee" name="cross-nvptx-gcc10-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="427c69f60105776296a90d165971fdd950c4a6f85b7d2a398f2425377cfc7fcd" name="cross-nvptx-gcc10-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b6d42707ad8ec2a3951301afc4b7184140219d8ead5c56e7fbd95ac91e831b66" name="cross-nvptx-gcc9-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="549d1592b102382c88f7123b70250b5565814978eef812a9d0776ef9acbd5a86" name="cross-nvptx-gcc9-debugsource" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="2294a8a0185e91c059bfa2bdd8023ee64f31026728c0bf8d936efbd3fd2f1b53" name="cross-ppc-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="987e5184c581ecaa833148d188813923b74ef465cc919d1a82e77a1fc0c40ee0" name="cross-ppc-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="93bcdad2ccc761bf86dd9f13049ffb5ae13cb1f6f2c0b653c7e1789082ba3b84" name="cross-ppc-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="030c488856e4bafac98a89b4da8e0cab22177e3d3d9b8c5a2eb570ebb41ff1bd" name="cross-ppc-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="9727258a0b0ddc9a224943d4e628d0c07d98fcbe979b8cab61b209f5f336fd6b" name="cross-ppc64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="b623d2b8eab31cc65f38256af958165259d29ba75fa9c8bc7074a931fa3d3c97" name="cross-ppc64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="86a6bd49ce601afc7c96751f77fe4339044e19dbb4bceda22ea34c13a2d62f5d" name="cross-ppc64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="79595d31e06690e9883c9749209967651a7f65d513cc16e3311147f1db8e626f" name="cross-ppc64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="b63ac5f407b88138ee7bed7ffdc3406c9ae39cde8c055acf09ce9eb51eb563ca" name="cross-ppc64le-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="174cb029038b70998f18fbea63d2815281106bb776302759fa59337001c1cc79" name="cross-ppc64le-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="ee63794ff80bf5f777831c68bb5861237da65f656339f71cd904ccf6a8586cac" name="cross-ppc64le-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c7b3e09719e1a27c371d0344c09e745fe55df05912c86fbfbc421fa89f6ee5cc" name="cross-ppc64le-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="464babc7d6488e8466015d66e1e9d430611a7511433f89586ad4096f5fc39289" name="cross-riscv64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="aa6b42a05f9c73c03c660642febe85ac1248f998a5f75097636a063e7ee700af" name="cross-riscv64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="cce7d23873948d26015bd4cbcd989d9077210073d4557db241808dad1a1ff9d6" name="cross-riscv64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="78ae76737c1223033d6f391cd7b2c6158fd7beb71c742c5ade85b7044f94a62c" name="cross-riscv64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="c7fd2e8f399190c5cbe430d381d1cfcb8d1a2000d5f3346c2b45238303283c4f" name="cross-rx-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="2c0aaf800b8ffe3f711c25d659daec2716532d9f0d4943a5dee7cf895ddfb4cd" name="cross-rx-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="41181ee255f42e4726f88420e8a4a7841ca5456ccf6d97bb9c697e6156f7a70a" name="cross-rx-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="f7f1f1946074f20e393ef02af4f07aa44d2b7885c2ea53b1c8fe3c92f7da459a" name="cross-rx-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="609bb50b18068fc04464fb0c469aec3cc654c5db322c3b941064ae91dfbe3a15" name="cross-s390-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="72318a5fab3a4924d28cdc9fd8cb09aad0b2fd7cf1be4c0ef4c64e97cd8f87a0" name="cross-s390-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="adb4beed9b9489878d11aaa3266027080725cc43fbb8632468b55ee9bbad7152" name="cross-s390-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="0e6a44370cc85601ff07b93ff414949da09b384c7ae73973cd2d55059489d646" name="cross-s390-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="bfad8e8c9da5cdb51be1721dcd2630881eb9462ecc9aa564253e8d806dba062b" name="cross-s390x-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3fb657428be0fc33b5cee0ae13ca8675c383f75b4c61e7a2bee91bc228190bd2" name="cross-s390x-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="22b51592bf74c864991bdc2ab93272a8b72b96a14ff53dc354b7f87cecd02762" name="cross-s390x-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="5a749532571a9c4ece45dd8f2334b778a86e54fda0723e287f76b5665ed1aed1" name="cross-s390x-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="7bcc1e6c7012dc1b23e7e17e5b3da100bb605be1b57acb68c2588dbf96264a19" name="cross-sparc-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="1478090b4bcea5d13250e8c394dd06b3195f6a6781eb063e1796ab4f3f40642a" name="cross-sparc-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="676a23edb28b31d182de3725ea9c5c43b72b509642eb0728da15bf1a1933ef2e" name="cross-sparc-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="29805c4e8e55f53bbc963ebf665bb4a7f7e34fa2dd66a86c728619cdd80cb8f1" name="cross-sparc-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="ac2f9582c7d7c41a1649e201bab756cc6c7e2163c5d7122cd5e39d9245339287" name="cross-sparc64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="c5ed21a800857a8340fb3aba94126c1d61745aa1c2f9e53e5fec05a6a45e7f26" name="cross-sparc64-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="6a57be5d2b0fa8576a40d89db6f34ca21b2928435bfc8f65647163d6d60d269c" name="cross-sparc64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="98f6e3a5d25fdb272b5bfe805221dfbd8596a37f2b8470f9611ae12c4988f22e" name="cross-sparc64-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="0deb94e3385a3b52779495f4b3d391e17f325d4a9176d5e207372fc2dc40d3dc" name="cross-spu-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="1ff3f689ea26960b3e12281931be0f58608c05854f61d596cf9fda29fba51b1d" name="cross-spu-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="f786822a9d633d7171d28822ebf9b27a8e91d0c980d5986117ba06b0f531f33b" name="cross-spu-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="3df9a1f7a25ff32ebc8a1a9fdd9004b2d7f2f99ac653780880fa0e2726bda980" name="cross-spu-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="bf1f842831e5e382427f698500772182105ea723ac5dee40eff302eb2a5eac48" name="cross-xtensa-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="4326322334da62bb141c2983d01bd9c32c475e1d882966b9cd70e406b5045088" name="cross-xtensa-binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="8ee88868700de027aa103e56b48992efa7c81bfef3f27a9f301cbbbb742e2302" name="cross-xtensa-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35" rel="lp152.4.3.1"/>
  <changelog author="matz@suse.com" date="1559563200">Fake entry for SLE12 package variant only:
- Add support for new z13 instructions. [fate#327074, jsc#SLE-6206,
  bsc#1137271]
  Adds patches binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563796800">- Use -ffat-lto-objects in order to provide assembly for static libs
  (boo#1141913).</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1567252800">- enable xtensa architecture (Tensilica lc6 and related)
- Fix SUSE typo in README package name</changelog>
  <changelog author="matz@suse.com" date="1568030400">- Update to current 2.32 branch @7b468db3 adding
  binutils-2.32-branch.diff.gz [jsc#ECO-368].
- Includes fixes for these CVEs:
  bsc#1109412 aka CVE-2018-17358 aka PR23686
  bsc#1109413 aka CVE-2018-17359 aka PR23686
  bsc#1109414 aka CVE-2018-17360 aka PR23685
  bsc#1111996 aka CVE-2018-18309 aka PR23770
  bsc#1112534 aka CVE-2018-18484 aka GCC PR87636
  bsc#1112535 aka CVE-2018-18483 aka PR23767
  bsc#1113247 aka CVE-2018-18607 aka PR23805
  bsc#1113252 aka CVE-2018-18606 aka PR23806
  bsc#1113255 aka CVE-2018-18605 aka PR23804
  bsc#1116827 aka CVE-2018-17985 aka GCC PR87335
  bsc#1118830 aka CVE-2018-19932 aka PR23932
  bsc#1118831 aka CVE-2018-19931 aka PR23942
  bsc#1120640 aka CVE-2018-1000876 aka PR23994
  bsc#1121034 aka CVE-2018-20651 aka PR24041
  bsc#1121035 aka CVE-2018-20623 aka PR24049
  bsc#1121056 aka CVE-2018-20671 aka PR24005
  bsc#1142772 aka CVE-2019-1010180 aka PR23657
- Refresh s390-biarch.diff and
  binutils-revert-plt32-in-branches.diff .
- For the SLE12 package this also removes patches
  binutils-z13-1.diff, binutils-z13-2.diff,
  binutils-z13-3.diff, binutils-z13-4.diff and binutils-z13-5.diff .</changelog>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]</changelog>
</package>
<package pkgid="9c346c6d7d709277756c4947ed6439f45fe2c150c3a4a93f24cc518f6e49d225" name="cross-xtensa-binutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.35.1" rel="lp152.4.6.1"/>
  <changelog author="matz@suse.com" date="1570017600">- Add avr, epiphany and rx to target_list so that the common
  binutils can handle all objects we can create with crosses.
  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1571140800">- Add binutils-fix-ld-segv.diff to fix a segfault in ld
  when building some versions of pacemaker.  [bsc#1154025,
  bsc#1154016]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1571745600">- Update to binutils 2.33.1:
  * Adds support for the Arm Scalable Vector Extension version 2
    (SVE2) instructions, the Arm Transactional Memory Extension (TME)
    instructions and the Armv8.1-M Mainline and M-profile Vector
    Extension (MVE) instructions.
  * Adds support for the Arm Cortex-A76AE, Cortex-A77 and Cortex-M35P
    processors and the AArch64 Cortex-A34, Cortex-A65, Cortex-A65AE,
    Cortex-A76AE, and Cortex-A77 processors.
  * Adds a .float16 directive for both Arm and AArch64 to allow
    encoding of 16-bit floating point literals.
  * For MIPS, Add -m[no-]fix-loongson3-llsc option to fix (or not)
    Loongson3 LLSC Errata.  Add a --enable-mips-fix-loongson3-llsc=[yes|no]
    configure time option to set the default behavior. Set the default
    if the configure option is not used to "no".
  * The Cortex-A53 Erratum 843419 workaround now supports a choice of
    which workaround to use.  The option --fix-cortex-a53-843419 now
    takes an optional argument --fix-cortex-a53-843419[=full|adr|adrp]
    which can be used to force a particular workaround to be used.
    See --help for AArch64 for more details.
  * Add support for GNU_PROPERTY_AARCH64_FEATURE_1_BTI and
    GNU_PROPERTY_AARCH64_FEATURE_1_PAC  in ELF GNU program properties
    in the AArch64 ELF linker.
  * Add -z force-bti for AArch64 to enable GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on output while warning about missing GNU_PROPERTY_AARCH64_FEATURE_1_BTI
    on inputs and use PLTs protected with BTI.
  * Add -z pac-plt for AArch64 to pick PAC enabled PLTs.
  * Add --source-comment[=&lt;txt&gt;] option to objdump which if present,
    provides a prefix to source code lines displayed in a disassembly.
  * Add --set-section-alignment &lt;section-name&gt;=&lt;power-of-2-align&gt;
    option to objcopy to allow the changing of section alignments.
  * Add --verilog-data-width option to objcopy for verilog targets to
    control width of data elements in verilog hex format.
  * The separate debug info file options of readelf (--debug-dump=links
    and --debug-dump=follow) and objdump (--dwarf=links and
  - -dwarf=follow-links) will now display and/or follow multiple
    links if more than one are present in a file.  (This usually
    happens when gcc's -gsplit-dwarf option is used).
    In addition objdump's --dwarf=follow-links now also affects its
    other display options, so that for example, when combined with
  - -syms it will cause the symbol tables in any linked debug info
    files to also be displayed.  In addition when combined with
  - -disassemble the --dwarf= follow-links option will ensure that
    any symbol tables in the linked files are read and used when
    disassembling code in the main file.
  * Add support for dumping types encoded in the Compact Type Format
    to objdump and readelf.
- Includes fixes for these CVEs:
  bnc#1126826 aka CVE-2019-9077 aka PR1126826
  bnc#1126829 aka CVE-2019-9075 aka PR1126829
  bnc#1126831 aka CVE-2019-9074 aka PR24235
  bnc#1140126 aka CVE-2019-12972 aka PR23405
  bnc#1143609 aka CVE-2019-14444 aka PR24829
  bnc#1142649 aka CVE-2019-14250 aka PR90924
- Remove patches that are now included in the release:
  binutils-2.32-branch.diff.gz, binutils-fix-ld-segv.diff,
  binutils-pr24486.patch, riscv-abi-check.patch,
  rx-gas-padding-pr24464.patch.
- Add binutils-2.33-branch.diff.gz patch.
- Rebase binutils-revert-plt32-in-branches.diff and
  cross-avr-size.patch patch.</changelog>
  <changelog author="matz@suse.com" date="1574078400">- Add add-ulp-section.diff for user space live patching.</changelog>
  <changelog author="matz@suse.com" date="1574251200">- Add binutils-fix-invalid-op-errata.diff to fix various
  build fails on aarch64 (PR25210, bsc#1157755).</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578398400">- Disable LTO during testsuite run</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1580558400">- Update to binutils 2.34:
  * The disassembler (objdump --disassemble) now has an option to
    generate ascii art thats show the arcs between that start and end
    points of control flow instructions.
  * The binutils tools now have support for debuginfod.  Debuginfod is a
    HTTP service for distributing ELF/DWARF debugging information as
    well as source code.  The tools can now connect to debuginfod
    servers in order to download debug information about the files that
    they are processing.
  * The assembler and linker now support the generation of ELF format
    files for the Z80 architecture.
- Rename and get binutils-2.34-branch.diff.gz (boo#1160254).
- Rebase add-ulp-section.diff, binutils-revert-plt32-in-branches.diff,
  cross-avr-size.patch and binutils-skip-rpaths.patch.
- Add new subpackages for libctf and libctf-nobfd.
- Disable LTO due to boo#1163333.
- Includes fixes for these CVEs:
  bnc#1153768 aka CVE-2019-17451 aka PR25070
  bnc#1153770 aka CVE-2019-17450 aka PR25078</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027200">- Add fix-try_load_plugin.patch in order to fix fallback caused
  by backport for PR25355.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582027201">- Update fix-try_load_plugin.patch to latest version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582718400">- Add binutils-pr25593.diff to fix DT_NEEDED order with -flto
  [bsc#1163744]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Remove fix-try_load_plugin.patch as it is part
  of the updated binutils-2.34-branch.diff.gz patch.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Update binutils-2.34-branch.diff.gz.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1595592000">- Update to binutils 2.35:
  * The asseembler can now produce DWARF-5 format line number tables.
  * Readelf now has a "lint" mode to enable extra checks of the files it is processing.
  * Readelf will now display "[...]" when it has to truncate a symbol name.
    The old behaviour - of displaying as many characters as possible, up to
    the 80 column limit - can be restored by the use of the --silent-truncation
    option.
  * The linker can now produce a dependency file listing the inputs that it
    has processed, much like the -M -MP option supported by the compiler.
- Regenerate add-ulp-section.diff with -p1 due to a fuzzing issue.
- Remove binutils-2.34-branch.diff.gz.
- Regenerate binutils-build-as-needed.diff due to a fuzzing issue.
- Regenerate binutils-fix-invalid-op-errata.diff as one hunk was upstreamed.
- Remove upstreamed patch binutils-pr25593.diff.
- Regenerate unit-at-a-time.patch due to a fuzzing issue.
- Regenerate binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="matz@suse.com" date="1596801600">- Add binutils-revert-nm-symversion.diff to be compatible with old
  output of nm relied on in scripts.
- Add binutils-fix-abierrormsg.diff to work around an eager (new)
  error message occuring without inputs and as-needed (affects
  nvme-cli build).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1597492800">- Add binutils-2.35-branch.diff.gz: it includes fix for
  nm -B for objects compiled with -flto and -fcommon.</changelog>
  <changelog author="matz@suse.com" date="1600171200">- Update binutils-2.35-branch.diff.gz to commit 23f268a0:
  * Add xBPF target
  * Fix various problems with DWARF 5 support in gas
- Toolchain module update for SLE15 [jsc#ECO-2373]
- Includes changes that were SLE-only in binutils-add-z15-name.diff
  for [bsc#1160590, jsc#SLE-7903 aka jsc#SLE-7464]
- Amend binutils-revert-plt32-in-branches.diff to adjust also new
  testcases.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1600689600">- Update to 2.35.1 and rebased branch diff:
  * This is a point release over the previous 2.35 version, containing bug
  fixes, and as an exception to the usual rule, one new feature.  The
  new feature is the support for a new directive in the assembler:
  ".nop".  This directive creates a single no-op instruction in whatever
  encoding is correct for the target architecture.  Unlike the .space or
  .fill this is a real instruction, and it does affect the generation of
  DWARF line number tables, should they be enabled.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1602504000">- Reapply spec file cleanup from format_spec_file
- Remove a SLE10 version check</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606132800">- Update binutils-2.35-branch.diff.gz to commit 1c5243df:
  * Fixes PR26520, aka [bsc#1179036], a problem in addr2line with
    certain DWARF variable descriptions.
  * Also fixes PR26711, PR26656, PR26655, PR26929, PR26808, PR25878,
    PR26740, PR26778, PR26763, PR26685, PR26699, PR26902, PR26869,
    PR26711
  * The above includes fixes for dwo files produced by modern dwp,
    fixing several problems in the DWARF reader.</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
</package>
<package pkgid="d45139c7598ab4c25489b919ddab362658af2ac7f51cd949abe50c0d40c6eff8" name="cryptsetup-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="465b92c8da6c950be9846d51f41edc199b7513d201f3fb42b5979a59ae0d4b4d" name="cryptsetup-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="b9cb6c8522298db5c83857ea90f47e5c992febe512ea92f99ee76c1226feae9b" name="cryptsetup-debugsource" arch="i586">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="21fa04af361b985b89efb3c16d106efc76fadb15726ea1e1f8f578a19a3a70c6" name="cryptsetup-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp152.4.3.1"/>
  <changelog author="mpluskal@suse.com" date="1427976000">- Update to 1.6.7
  * Cryptsetup TCRYPT mode now supports VeraCrypt devices
    (TrueCrypt extension)
  * Support keyfile-offset and keyfile-size options even for plain
    volumes.
  * Support keyfile option for luksAddKey if the master key is
    specified.
  * For historic reasons, hashing in the plain mode is not used if
    keyfile is specified (with exception of --key-file=-). Print
    a warning if these parameters are ignored.
  * Support permanent device decryption for cryptsetup-reencrypt.
    To remove LUKS encryption from a device, you can now use
  - -decrypt option.
  * Allow to use --header option in all LUKS commands. The
  - -header always takes precedence over positional device argument.
  * Allow luksSuspend without need to specify a detached header.
  * Detect if O_DIRECT is usable on a device allocation. There are
    some strange storage stack configurations which wrongly allows
    to open devices with direct-io but fails on all IO operations later.
  * Add low-level performance options tuning for dmcrypt (for
    Linux 4.0 and later).
  * Get rid of libfipscheck library.
    (Note that this option was used only for Red Hat and derived
    distributions.) With recent FIPS changes we do not need to
    link to this FIPS monster anymore. Also drop some no longer
    needed FIPS mode checks.
  * Many fixes and clarifications to man pages.
  * Prevent compiler to optimize-out zeroing of buffers for on-stack
    variables.
  * Fix a crash if non-GNU strerror_r is used.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840000">- regenerate the initrd if cryptsetup tool changes
  (wanted by 90crypt dracut module)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1428840001">- Enable verbose build log.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441713600">- Update to 1.6.8
  * If the null cipher (no encryption) is used, allow only empty
    password for LUKS. (Previously cryptsetup accepted any password
    in this case.)
    The null cipher can be used only for testing and it is used
    temporarily during offline encrypting not yet encrypted device
    (cryptsetup-reencrypt tool).
    Accepting only empty password prevents situation when someone
    adds another LUKS device using the same UUID (UUID of existing
    LUKS device) with faked header containing null cipher.
    This could force user to use different LUKS device (with no
    encryption) without noticing.
    (IOW it prevents situation when attacker intentionally forces
    user to boot into different system just by LUKS header
    manipulation.)
    Properly configured systems should have an additional integrity
    protection in place here (LUKS here provides only
    confidentiality) but it is better to not allow this situation
    in the first place.
    (For more info see QubesOS Security Bulletin QSB-019-2015.)
  * Properly support stdin "-" handling for luksAddKey for both new
    and old keyfile parameters.
  * If encrypted device is file-backed (it uses underlying loop
    device), cryptsetup resize will try to resize underlying loop
    device as well. (It can be used to grow up file-backed device
    in one step.)
  * Cryptsetup now allows to use empty password through stdin pipe.
    (Intended only for testing in scripts.)</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1452340800">- update to 1.7.0:
  * The cryptsetup 1.7 release changes defaults for LUKS,
    there are no API changes.
  * Default hash function is now SHA256 (used in key derivation
    function and anti-forensic splitter).
  * Default iteration time for PBKDF2 is now 2 seconds.
  * Fix PBKDF2 iteration benchmark for longer key sizes.
  * Remove experimental warning for reencrypt tool.
  * Add optional libpasswdqc support for new LUKS passwords.
  * Update FAQ document.</changelog>
  <changelog author="alexander_naumov@opensuse.org" date="1472126400">- Update to version 1.7.2:
  * Update LUKS documentation format.
    Clarify fixed sector size and keyslots alignment.
  * Support activation options for error handling modes in
    Linux kernel dm-verity module:
  - -ignore-corruption - dm-verity just logs detected corruption
  - -restart-on-corruption - dm-verity restarts the kernel if
    corruption is detected
    If the options above are not specified, default behavior for
    dm-verity remains. Default is that I/O operation fails with
    I/O error if corrupted block is detected.
  - -ignore-zero-blocks - Instructs dm-verity to not verify
    blocks that are expected to contain zeroes and always
    return zeroes directly instead.
    NOTE that these options could have security or functional
    impacts, do not use them without assessing the risks!
  * Fix help text for cipher benchmark specification
    (mention --cipher option).
  * Fix off-by-one error in maximum keyfile size.
    Allow keyfiles up to compiled-in default and not that value
    minus one.
  * Support resume of interrupted decryption in cryptsetup-reencrypt
    utility. To resume decryption, LUKS device UUID (--uuid option)
    option must be used.
  * Do not use direct-io for LUKS header with unaligned keyslots.
    Such headers were used only by the first cryptsetup-luks-1.0.0
    release (2005).
  * Fix device block size detection to properly work on particular
    file-based containers over underlying devices with 4k sectors.
- Update to version 1.7.1:
  * Code now uses kernel crypto API backend according to new
    changes introduced in mainline kernel
    While mainline kernel should contain backward compatible
    changes, some stable series kernels do not contain fully
    backported compatibility patches.
    Without these patches  most of cryptsetup operations
    (like unlocking device) fail.
    This change in cryptsetup ensures that all operations using
    kernel crypto API works even on these kernels.
  * The cryptsetup-reencrypt utility now properly detects removal
    of underlying link to block device and does not remove
    ongoing re-encryption log.
    This allows proper recovery (resume) of reencrypt operation later.
    NOTE: Never use /dev/disk/by-uuid/ path for reencryption utility,
    this link disappears once the device metadata is temporarily
    removed from device.
  * Cryptsetup now allows special "-" (standard input) keyfile handling
    even for TCRYPT (TrueCrypt and VeraCrypt compatible) devices.
  * Cryptsetup now fails if there are more keyfiles specified
    for non-TCRYPT device.
  * The luksKillSlot command now does not suppress provided password
    in batch mode (if password is wrong slot is not destroyed).
    Note that not providing password in batch mode means that keyslot
    is destroyed unconditionally.</changelog>
  <changelog author="mpluskal@suse.com" date="1489752000">- Update to version 1.7.4:
  * Allow to specify LUKS1 hash algorithm in Python luksFormat
    wrapper.
  * Use LUKS1 compiled-in defaults also in Python wrapper.
  * OpenSSL backend: Fix OpenSSL 1.1.0 support without backward
    compatible API.
  * OpenSSL backend: Fix LibreSSL compatibility.
  * Check for data device and hash device area overlap in
    veritysetup.
  * Fix a possible race while allocating a free loop device.
  * Fix possible file descriptor leaks if libcryptsetup is run from
    a forked process.
  * Fix missing same_cpu_crypt flag in status command.
  * Various updates to FAQ and man pages.
- Changes for version 1.7.3:
  * Fix device access to hash offsets located beyond the 2GB device
    boundary in veritysetup.
  * Set configured (compile-time) default iteration time for
    devices created directly through libcryptsetup
  * Fix PBKDF2 benchmark to not double iteration count for specific
    corner case.
  * Verify passphrase in cryptsetup-reencrypt when encrypting a new
    drive.
  * OpenSSL backend: fix memory leak if hash context was repeatedly
    reused.
  * OpenSSL backend: add support for OpenSSL 1.1.0.
  * Fix several minor spelling errors.
  * Properly check maximal buffer size when parsing UUID from
    /dev/disk/.</changelog>
  <changelog author="mpluskal@suse.com" date="1493467200">- Update to version 1.7.5:
  * Fixes to luksFormat to properly support recent kernel running
    in FIPS mode (bsc#1031998).
  * Fixes accesses to unaligned hidden legacy TrueCrypt header.
  * Fixes to optional dracut ramdisk scripts for offline
    re-encryption on initial boot.</changelog>
  <changelog author="archie.cobbs@gmail.com" date="1513944000">- Update to version 2.0.0:
  * Add support for new on-disk LUKS2 format
  * Enable to use system libargon2 instead of bundled version
  * Install tmpfiles.d configuration for LUKS2 locking directory
  * New command integritysetup: support for the new dm-integrity kernel target
  * Support for larger sector sizes for crypt devices
  * Miscellaneous fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1517313600">- update to 2.0.1:
  * To store volume key into kernel keyring, kernel 4.15 with
    dm-crypt 1.18.1 is required
  * Increase maximum allowed PBKDF memory-cost limit to 4 GiB
  * Use /run/cryptsetup as default for cryptsetup locking dir
  * Introduce new 64-bit byte-offset *keyfile_device_offset functions.
  * New set of fucntions that allows 64-bit offsets even on 32bit systems
    are now availeble:
  - crypt_resume_by_keyfile_device_offset
  - crypt_keyslot_add_by_keyfile_device_offset
  - crypt_activate_by_keyfile_device_offset
  - crypt_keyfile_device_read
    The new functions have added the _device_ in name.
    Old functions are just internal wrappers around these.
  * Also cryptsetup --keyfile-offset and --new-keyfile-offset now
    allows 64-bit offsets as parameters.
  * Add error hint for wrongly formatted cipher strings in LUKS1 and
    properly fail in luksFormat if cipher format is missing required IV.</changelog>
  <changelog author="lnussel@suse.de" date="1534852800">- New version 2.0.4
  Changes since version 2.0.3
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Use the libblkid (blockid) library to detect foreign signatures
    on a device before LUKS format and LUKS2 auto-recovery.
    This change fixes an unexpected recovery using the secondary
    LUKS2 header after a device was already overwritten with
    another format (filesystem or LVM physical volume).
    LUKS2 will not recreate a primary header if it detects a valid
    foreign signature. In this situation, a user must always
    use cryptsetup repair command for the recovery.
    Note that libcryptsetup and utilities are now linked to libblkid
    as a new dependence.
    To compile code without blockid support (strongly discouraged),
    use --disable-blkid configure switch.
  * Add prompt for format and repair actions in cryptsetup and
    integritysetup if foreign signatures are detected on the device
    through the blockid library.
    After the confirmation, all known signatures are then wiped as
    part of the format or repair procedure.
  * Print consistent verbose message about keyslot and token numbers.
    For keyslot actions: Key slot &lt;number&gt; unlocked/created/removed.
    For token actions: Token &lt;number&gt; created/removed.
  * Print error, if a non-existent token is tried to be removed.
  * Add support for LUKS2 token definition export and import.
    The token command now can export/import customized token JSON file
    directly from command line. See the man page for more details.
  * Add support for new dm-integrity superblock version 2.
  * Add an error message when nothing was read from a key file.
  * Update cryptsetup man pages, including --type option usage.
  * Add a snapshot of LUKS2 format specification to documentation
    and accordingly fix supported secondary header offsets.
  * Add bundled optimized Argon2 SSE (X86_64 platform) code.
    If the bundled Argon2 code is used and the new configure switch
  - -enable-internal-sse-argon2 option is present, and compiler flags
    support required optimization, the code will try to use optimized
    and faster variant.
    Always use the shared library (--enable-libargon2) if possible.
    This option was added because an enterprise distribution
    rejected to support the shared Argon2 library and native support
    in generic cryptographic libraries is not ready yet.
  * Fix compilation with crypto backend for LibreSSL &gt;= 2.7.0.
    LibreSSL introduced OpenSSL 1.1.x API functions, so compatibility
    wrapper must be commented out.
  * Fix on-disk header size calculation for LUKS2 format if a specific
    data alignment is requested. Until now, the code used default size
    that could be wrong for converted devices.
  Changes since version 2.0.2
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Expose interface to unbound LUKS2 keyslots.
    Unbound LUKS2 keyslot allows storing a key material that is independent
    of master volume key (it is not bound to encrypted data segment).
  * New API extensions for unbound keyslots (LUKS2 only)
    crypt_keyslot_get_key_size() and crypt_volume_key_get()
    These functions allow to get key and key size for unbound keyslots.
  * New enum value CRYPT_SLOT_UNBOUND for keyslot status (LUKS2 only).
  * Add --unbound keyslot option to the cryptsetup luksAddKey command.
  * Add crypt_get_active_integrity_failures() call to get integrity
    failure count for dm-integrity devices.
  * Add crypt_get_pbkdf_default() function to get per-type PBKDF default
    setting.
  * Add new flag to crypt_keyslot_add_by_key() to force update device
    volume key. This call is mainly intended for a wrapped key change.
  * Allow volume key store in a file with cryptsetup.
    The --dump-master-key together with --master-key-file allows cryptsetup
    to store the binary volume key to a file instead of standard output.
  * Add support detached header for cryptsetup-reencrypt command.
  * Fix VeraCrypt PIM handling - use proper iterations count formula
    for PBKDF2-SHA512 and PBKDF2-Whirlpool used in system volumes.
  * Fix cryptsetup tcryptDump for VeraCrypt PIM (support --veracrypt-pim).
  * Add --with-default-luks-format configure time option.
    (Option to override default LUKS format version.)
  * Fix LUKS version conversion for detached (and trimmed) LUKS headers.
  * Add luksConvertKey cryptsetup command that converts specific keyslot
    from one PBKDF to another.
  * Do not allow conversion to LUKS2 if LUKSMETA (external tool metadata)
    header is detected.
  * More cleanup and hardening of LUKS2 keyslot specific validation options.
    Add more checks for cipher validity before writing metadata on-disk.
  * Do not allow LUKS1 version downconversion if the header contains tokens.
  * Add "paes" family ciphers (AES wrapped key scheme for mainframes)
    to allowed ciphers.
    Specific wrapped ley configuration logic must be done by 3rd party tool,
    LUKS2 stores only keyslot material and allow activation of the device.
  * Add support for --check-at-most-once option (kernel 4.17) to veritysetup.
    This flag can be dangerous; if you can control underlying device
    (you can change its content after it was verified) it will no longer
    prevent reading tampered data and also it does not prevent silent
    data corruptions that appear after the block was once read.
  * Fix return code (EPERM instead of EINVAL) and retry count for bad
    passphrase on non-tty input.
  * Enable support for FEC decoding in veritysetup to check dm-verity devices
    with additional Reed-Solomon code in userspace (verify command).
  Changes since version 2.0.1
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix a regression in early detection of inactive keyslot for luksKillSlot.
    It tried to ask for passphrase even for already erased keyslot.
  * Fix a regression in loopaesOpen processing for keyfile on standard input.
    Use of "-" argument was not working properly.
  * Add LUKS2 specific options for cryptsetup-reencrypt.
    Tokens and persistent flags are now transferred during reencryption;
    change of PBKDF keyslot parameters is now supported and allows
    to set precalculated values (no benchmarks).
  * Do not allow LUKS2 --persistent and --test-passphrase cryptsetup flags
    combination. Persistent flags are now stored only if the device was
    successfully activated with the specified flags.
  * Fix integritysetup format after recent Linux kernel changes that
    requires to setup key for HMAC in all cases.
    Previously integritysetup allowed HMAC with zero key that behaves
    like a plain hash.
  * Fix VeraCrypt PIM handling that modified internal iteration counts
    even for subsequent activations. The PIM count is no longer printed
    in debug log as it is sensitive information.
    Also, the code now skips legacy TrueCrypt algorithms if a PIM
    is specified (they cannot be used with PIM anyway).
  * PBKDF values cannot be set (even with force parameters) below
    hardcoded minimums. For PBKDF2 is it 1000 iterations, for Argon2
    it is 4 iterations and 32 KiB of memory cost.
  * Introduce new crypt_token_is_assigned() API function for reporting
    the binding between token and keyslots.
  * Allow crypt_token_json_set() API function to create internal token types.
    Do not allow unknown fields in internal token objects.
  * Print message in cryptsetup that about was aborted if a user did not
    answer YES in a query.</changelog>
  <changelog author="lnussel@suse.de" date="1540900800">- make parallell installable version for SLE12</changelog>
  <changelog author="lnussel@suse.de" date="1540900801">- Suggest hmac package (boo#1090768)
- remove old upgrade hack for upgrades from 12.1
- New version 2.0.5
  Changes since version 2.0.4
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Wipe full header areas (including unused) during LUKS format.
    Since this version, the whole area up to the data offset is zeroed,
    and subsequently, all keyslots areas are wiped with random data.
    This ensures that no remaining old data remains in the LUKS header
    areas, but it could slow down format operation on some devices.
    Previously only first 4k (or 32k for LUKS2) and the used keyslot
    was overwritten in the format operation.
  * Several fixes to error messages that were unintentionally replaced
    in previous versions with a silent exit code.
    More descriptive error messages were added, including error
    messages if
  - a device is unusable (not a block device, no access, etc.),
  - a LUKS device is not detected,
  - LUKS header load code detects unsupported version,
  - a keyslot decryption fails (also happens in the cipher check),
  - converting an inactive keyslot.
  * Device activation fails if data area overlaps with LUKS header.
  * Code now uses explicit_bzero to wipe memory if available
    (instead of own implementation).
  * Additional VeraCrypt modes are now supported, including Camellia
    and Kuznyechik symmetric ciphers (and cipher chains) and Streebog
    hash function. These were introduced in a recent VeraCrypt upstream.
    Note that Kuznyechik requires out-of-tree kernel module and
    Streebog hash function is available only with the gcrypt cryptographic
    backend for now.
  * Fixes static build for integritysetup if the pwquality library is used.
  * Allows passphrase change for unbound keyslots.
  * Fixes removed keyslot number in verbose message for luksKillSlot,
    luksRemoveKey and erase command.
  * Adds blkid scan when attempting to open a plain device and warn the user
    about existing device signatures in a ciphertext device.
  * Remove LUKS header signature if luksFormat fails to add the first keyslot.
  * Remove O_SYNC from device open and use fsync() to speed up
    wipe operation considerably.
  * Create --master-key-file in luksDump and fail if the file already exists.
  * Fixes a bug when LUKS2 authenticated encryption with a detached header
    wiped the header device instead of dm-integrity data device area (causing
    unnecessary LUKS2 header auto recovery).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1575028800">- New version 2.0.6 (jsc#SLE-5911, bsc#1165580):
  Changes since version 2.0.5
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  * Fix support of larger metadata areas in LUKS2 header.
    This release properly supports all specified metadata areas, as documented
    in LUKS2 format description (see docs/on-disk-format-luks2.pdf in archive).
    Currently, only default metadata area size is used (in format or convert).
    Later cryptsetup versions will allow increasing this metadata area size.
  * If AEAD (authenticated encryption) is used, cryptsetup now tries to check
    if the requested AEAD algorithm with specified key size is available
    in kernel crypto API.
    This change avoids formatting a device that cannot be later activated.
    For this function, the kernel must be compiled with the
    CONFIG_CRYPTO_USER_API_AEAD option enabled.
    Note that kernel user crypto API options (CONFIG_CRYPTO_USER_API and
    CONFIG_CRYPTO_USER_API_SKCIPHER) are already mandatory for LUKS2.
  * Fix setting of integrity no-journal flag.
    Now you can store this flag to metadata using --persistent option.
  * Fix cryptsetup-reencrypt to not keep temporary reencryption headers
    if interrupted during initial password prompt.
  * Adds early check to plain and LUKS2 formats to disallow device format
    if device size is not aligned to requested sector size.
    Previously it was possible, and the device was rejected to activate by
    kernel later.
  * Fix checking of hash algorithms availability for PBKDF early.
    Previously LUKS2 format allowed non-existent hash algorithm with
    invalid keyslot preventing the device from activation.
  * Allow Adiantum cipher construction (a non-authenticated length-preserving
    fast encryption scheme), so it can be used both for data encryption and
    keyslot encryption in LUKS1/2 devices.
    For benchmark, use:
    [#] cryptsetup benchmark -c xchacha12,aes-adiantum
    [#] cryptsetup benchmark -c xchacha20,aes-adiantum
    For LUKS format:
    [#] cryptsetup luksFormat -c xchacha20,aes-adiantum-plain64 -s 256 &lt;device&gt;
    The support for Adiantum will be merged in Linux kernel 4.21.
    For more info see the paper https://eprint.iacr.org/2018/720.</changelog>
</package>
<package pkgid="bbba9e899fe00a44e97f7bf60b7da5bc85e5615d49ccf307a1665844205ebfdf" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="8037ee3a646a023bdedb389c56c3c83958797f5a58749a1e00a391691dcc0546" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="ec6e92d27abaf0aad40ed6f0794676af33f0af6624d4de69bfef7513a22e9fb4" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="00dc1744f5a52e70baff201ca8adb3b5691cd94504987946f4a23bcbc347b524" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="353399eaf397f4077c77d3c77a95a534707af33da414cf5f3189d72a55ecbe4f" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="ed58a1dd9861b8db719f7fd05b9a1c75c33f2923da518976d19d27cc86c24634" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="4ccd3103ae3b31c38e58e93c052c80abd2b23328aad67a2d6ef989e29cbf2dd7" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="2b23e3d5d63755ea477ec0083b23d3af08caf0c1a474be2f76d595eb9ac7efe8" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="d30a6b4d6d3f408deee12fd5ea44990bcab267f0c80444f9de6b9f13ef90d1d6" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="85a4bcf294f2ce5fe12eadf755212c7f7cdb4ec80a78ae71692e7caa3077ace5" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="3226d8d1c9304be3c2068f8d6c284304afa794a76b6879537c2d7a9b3040bb55" name="ctdb-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="dabd349d98b005f6b897cb30e5999ab320febb7046f734e132eb760fa6a0e203" name="ctdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="d09553d4829492ad9ab11b45ea6651ef87d27dbe4c450ded81f817ab98b0fb7e" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="b978d4d2a6390d6b0cce3998e7372e3cfab2772d999cbf6a5553e623d9609e77" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="702ac0f06fa7882d0c845bed97da84081bd807c215de5b7d0025e8323b43b67f" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="00b097d45e8c2b3159f524f82d26c5af0cdeb0a310e4fd9e5988592a5ec496b8" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="baaf3d56f2bf0e0d7b97b31533e1c38557a1ff7ba5dec23ae6397257e8430eda" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="a833aa6d85b0fc4b7a63a7aef4bc6801d9873c71a7f436bfdfca5317463911f2" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="f5486f3083e4379a4abc813165878a13251e855581f5ef85e551c7d7d9ca98c4" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="4896ec10ad6deaa603b89930dfdba15231116da18c973ca8b66ead20a575b573" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="b32affdbf101c5574d8a00b231d0334c0391bdef6792004e3cca4f4e568e3ca5" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="a10f48a4c90e39c8476d10af7ff192ea5fa2af02a8250c1288335d3654617b07" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="f9806fa107c9a00c4132facd537007830b36e2c84f48c4fc5ba931efe29d4e81" name="ctdb-pcp-pmda-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="ed77987cbf042ed820780d419dc9ebe3a30b1feb9336ca6340eae7a2eef24ddc" name="ctdb-pcp-pmda-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="e47475fcc8c43db4dcc1c35768deb50364ed03e45db928ecf68513ae9a6ad52e" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="8656ac2572863805dd2f33192267a4e33ff88d78f02e0cbc6d7b7f3a80988e1c" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.3.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="12e6ba8926519b02013c6af365b3dc8c8f540d2e766961672370bf6e39560b02" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="9f9fe15cdb0d11eab60a0edb35e77dc0335781e1c7b331f8ca9726a371747c5c" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.180.2cf3b203f07" rel="lp152.3.6.1"/>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570276800">- Update to samba 4.11.0
  + For details on all items see WHATSNEW.txt in samba-doc
    package
  + Python2 runtime support removed; python 3.4 or later required
  + Security improvements:
  - SMB1 disabled by default
  - lanman and plaintext authentication deprecated
  - winbind: PAM_AUTH and NTLM_AUTH events logged
  - GnuTLS 3.2 required; system FIPS mode setting honored
  + CephFS Snapshot integration, exposed as previous file
    versions
  + ctdb changes:
  - onnode -o option removed
  - ctdbd logs when using more than 90% of a CPU thread
  - CTDB_MONITOR_SWAP_USAGE variable removed
  + AD Domain controller improvements:
  - Upgrade AD databse format
  - BIND9_FLATFILE deprecated
  - default process model chagned to prefork
  - bind9 dns operation duration logging
  - Default schema updated to 2012_R2; function level is
    unchanged
  - many performance improvements
  + Configuration webserver support removed</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
</package>
<package pkgid="e050d086b86a2ec32eddf6026ebe187554b83e882c713ceac26064d75a4dd85a" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="bc56b5450f46e97d1a99cc7cf1e6717490014111e2d70e8b04dbc9fbd0c95cb4" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.11+git.182.fe3646e9391" rel="lp152.3.10.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571400000">- CVE-2019-14833: samba: Accent with "check script password"
  Samba AD DC check password script does not receive the full
  password; (bso#12438); (bsc#1154289).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
</package>
<package pkgid="a6dfd25c3c656413780aa6a26f0a3117adfb7f376b49ac19539ce35f9be54651" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="3bef568044b7da26803527e051a718f9896c6034bfb6637cc06d335f9ec01645" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.13+git.189.e9bd318cd13" rel="lp152.3.13.1"/>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1571745600">- CVE-2019-14847: User with "get changes" permission can
  crash AD DC LDAP server via dirsync; (bso#14040); (bsc#1154598);
- CVE-2019-10218: Client code can return filenames containing path
  separators; (bso#14071); (bsc#1144902);</changelog>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
</package>
<package pkgid="c3ae49946d7fa88e9621112f429efb5d605d5c7e96849e90f0e1ffc5190a3a35" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="8984c9b3850f7e0a59882600cf58d1b7b2f18f05b5d7182def4e76ccbb6e01b3" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.202.344b137b75d" rel="lp152.3.16.1"/>
  <changelog author="Jim McDonough &lt;jmcdonough@suse.com&gt;" date="1572350400">- Update to samba 4.11.2
  + CVE-2019-10218: Client code can return filenames containing
    path separators; (bsc#1144902); (bso#14071).
  + CVE-2019-14833: Samba AD DC check password script does not
    receive the full password; (bso#12438).
  + CVE-2019-14847: User with "get changes" permission can crash
    AD DC LDAP server via dirsync; (bso#14040).
- Fixes from 4.11.1
  + Overlinking libreplace against librt and pthread against every
    binary or library causes issues; (bso#14140);
  + kpasswd fails when built with MIT Kerberos; (bso#14155);
  + Fix spnego fallback from kerberos to ntlmssp in smbd server;
    (bso#14106);
  + Stale file handle error when using mkstemp on a share; (bso#14137);
  + non-AES schannel broken; (bso#14134);
  + Joining Active Directory should not use SAMR to set the password;
    (bso#13884);
  + smbclient can blunder into the SMB1 specific cli_RNetShareEnum()
    call on an SMB2 connection; (bso#14152);
  + Deleted records can be resurrected during recovery; (bso#14147);
  + getpwnam and getpwuid need to return data for ID_TYPE_BOTH group;
    (bso#14141);
  + winbind does not list forest trusts with additional trust
    attributes; (bso#14130);
  + fault report points to outdated documentation; (bso#14139);
  + pam_winbind with krb5_auth or wbinfo -K doesn't work for users of
    trusted domains/forests; (bso#14124);
  + classicupgrade results in uncaught exception - a bytes-like object
    is required, not 'str'; (bso#14136);
  + pod2man is not longer required, stop checking at build time;
    (bso#14131);
  + Exit code of ctdb nodestatus should not be influenced by deleted
    nodes; (bso#14129);
  + username/password authentication doesn't work with CUPS and
    smbspool; (bso#14128);
  + smbc_readdirplus() is incompatible with smbc_telldir() and
    smbc_lseekdir(); (bso#14094);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575288000">-  CVE-2019-14861: DNSServer RPC server crash, an authenticated user
  can crash the DCE/RPC DNS management server by creating records
  with matching the zone name; (bso#14138); (bsc#1158108).
-  CVE-2019-14870: DelegationNotAllowed not being enforced, the
  DelegationNotAllowed Kerberos feature restriction was not being
  applied when processing protocol transition requests (S4U2Self),
  in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1575979200">- Update to samba 4.11.3
  + CVE-2019-14861: DNSServer RPC server crash, an authenticated user
    can crash the DCE/RPC DNS management server by creating records
    with matching the zone name; (bso#14138); (bsc#1158108).
  + CVE-2019-14870: DelegationNotAllowed not being enforced, the
    DelegationNotAllowed Kerberos feature restriction was not being
    applied when processing protocol transition requests (S4U2Self),
    in the AD DC KDC; (bso#14187); (bsc#1158109).</changelog>
  <changelog author="David Disseldorp &lt;ddiss@suse.com&gt;" date="1576843200">- Fix Ceph snapshot root relative path handling; (bso#14216); (bsc#1141320).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1579608000">- Update to samab 4.11.5
  + CVE-2019-14902: Replication of ACLs down subtree on
    AD Directory is not automatic; (bso#12497); (bsc#1160850).
  + CVE-2019-19344: Fix  server crash with
    dns zone scavenging = yes; (bso#14050); (bsc#1160852).
  + CVE-2019-14907: server-side crash after charset conversion
    failure (eg during NTLMSSP processing); (bso#14208);
    (bsc#1160888).
- Update to samba 4.11.4
  + Ensure SMB1 cli_qpathinfo2() doesn't return an inode number;
    (bso#14161).
  + Ensure we don't call cli_RNetShareEnum() on an SMB1
    connection; (bso#14174).
  + NT_STATUS_ACCESS_DENIED becomes EINVAL when using SMB2 in
    SMBC_opendir_ctx; (bso#14176).
  + SMB2 - Ensure we use the correct session_id if encrypting
    an interim response; (bso#14189).
  + Prevent smbd crash after invalid SMB1 negprot; (bso#14205).
  + printing: Fix %J substition; (bso#13745).
  + Remove now unneeded call to cmdline_messaging_context();
    (bso#13925).
  + Fix incomplete conversion of former parametric options;
    (bso#14069).
  + Fix sync dosmode fallback in async dosmode codepath;
    (bso#14070).
  + vfs_fruit returns capped resource fork length; (bso#14171).
  + libnet_join: Add SPNs for additional-dns-hostnames entries;
    (bso#14116).
  + smbd: Increase a debug level; (bso#14211).
  + Prevent azure ad connect from reporting discovery errors
    reference-value-not-ldap-conformant; (bso#14153).
  + krb5_plugin: Fix developer build with newer heimdal system
    library; (bso#14179).
  + replace: Only link libnsl and libsocket if required;
    (bso#14168);
  + ctdb: Incoming queue can be orphaned causing communication;
    breakdown; (bso#14175).
  + ldb: Release ldb 2.0.8. Cross-compile will not take
    cross-answers or cross-execute; (bso#13846).
  + heimdal-build: Avoid hard-coded /usr/include/heimdal in
    asn1_compile-generated code; (bso#13856).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608001">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
</package>
<package pkgid="90e859a815efc52a9eb62e2fc7a63f64c505d18a68da1a728a619877b662f47c" name="ctdb-tests-debuginfo" arch="i586">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="1f5609a5c4d91b5462eb538d2623227929feacc77de64432459d6f5b0788a066" name="ctdb-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.247.8c858f7ee14" rel="lp152.3.19.1"/>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1579608000">- Fix nmbstatus not reporting detailed information about workgroups;
  (bsc#1159464);
- Fix querying all names registered within broadcast area; (bso#8927);</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1580385600">- Revert: Allow idmap_rid to have primary group other than
  "Domain Users"; (bsc#1087931).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1581940800">- CTDB doesn't retry outgoing connections on bind (and some other)
  failures; (bso#14274); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1582891200">- Starting ctdb node that was powered off hard before results
  in recovery loop; (bso#14295); (bsc#1162680).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1587384000">- Fix smbclient crash with double free (with unresolved krb5
  credential cache); (bso#14344); (bsc#1169095).</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- CVE-2020-10704: LDAP Denial of Service (stack overflow) in
  Samba AD DC; (bso#14334); (bsc#1169851);
- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
</package>
<package pkgid="f80e9a19900da5faf1243829fa05f499925dca79d5f33b4a79f305d6aa578484" name="cups-client-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="14a44b14ad9427dfb9229840e76b6b5968bc9378a0530c404a1eff404022d195" name="cups-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="5441bc2fa0a48f49ac5bf874d173de877c7d307f72cfa78f61ef5fea43714504" name="cups-client-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="2afed38c2324fed679bc62a00dc2c79cb2b925d4318b3be69a72a57b4b37788a" name="cups-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="d138586e6bd58444375ce70eb6dbf637b1ce31effeb359c7e9b61b478102f4e8" name="cups-client-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="b979f521e74b850237ba1ef354f3c81b67d1687379f5b461f9249e405a148d3a" name="cups-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="3a53382053b9a594f85d09508171026c4ebaa46b582445bd2671dccb84dc1445" name="cups-ddk-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="c50af7d1a5811481eaee34780ad5fd485791dcdd970360e7f593cc31ffef5c0a" name="cups-ddk-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="e8c3a67445b21c49e67cc9f9b3aba8cc6576626c97bf33af62ae1dc38de3504f" name="cups-ddk-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="52e4fbc0456936a09ebbbbf6487852563298c0fb5e9ce7faaf218ab83c7fdf31" name="cups-ddk-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="efd72e9e9a8684f4f57c76d5db8e97fac4180b0fd8996be5361be2bde7d473a4" name="cups-ddk-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="bc9e6d8dfb33fafb7f1672e4dcbc45c16a59ed84bf7759747546d42c251192d6" name="cups-ddk-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="2bc3050309e34f59cbf0d59c64f494d849f14f595d5b3415e2f27500222d1009" name="cups-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="253a4d3d22277c0bf2c5ad2c63ec97be67936e701fc3a13e88c366b8f492fb87" name="cups-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="aee0b4001d6bc1c40ebf2d8e27518568b0d6b7125474accd68445d0d8c451921" name="cups-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="9a08fe2ec3fb1827aed35a5f58247fba166beec70533848aaf4c5f5a95fd639c" name="cups-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="ff06432ee89e57a9e4cc18090fee3f8a6b08f2697a3aa25b278e2de3cb02dcb8" name="cups-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="451054dcccb2a6a40d76c71d555f901f5cc1d783f83339c24f5a0fd1b88fbb29" name="cups-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="f4c289c95e387a324a8a5b249db6a94b29039276ff2a5dfff5b56e8f9d39b912" name="cups-debugsource" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="8894c871acd7e289892af91afdb4aa6e630eda8c260eac9857590f6048172492" name="cups-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.3.1"/>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
</package>
<package pkgid="8fea092e0d7c57077ae2ac60a48a312ddd38b0093122f4591a5566e3fd010abc" name="cups-debugsource" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="224ee7364d994bc7f176d5fafe6d75d0e8d0c88dbafb37e92ba70f428721448e" name="cups-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.6.1"/>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
</package>
<package pkgid="af352be87bef1e1d33a494733eb45fc0f207978aa0fda916f8edbae9bf65b4ba" name="cups-debugsource" arch="i586">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="815f4a7941283dc9ce94f7002371cce4138b9c341f385378f4973e6cb455f788" name="cups-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp152.9.9.1"/>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
</package>
<package pkgid="4ac8157dfc03b18f0573202fe1eb8d9b2590606f6ac015a9776188702433bac5" name="cups-filters-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="lp152.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525348800">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
</package>
<package pkgid="c6b381dfe672455ae8a02d29c8c747df0b3d48ad33aa5ef1a67dc6d6509d29eb" name="cups-filters-debugsource" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="lp152.2.3.1"/>
  <changelog author="olaf@aepfle.de" date="1506686400">- Obsolete also debuginfo subpackages of the packages marked as
  Obsoletes in this specfile (bsc#1047897)</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version upgrade to 1.19.0:
  * See the detailed stuff in NEWS file
  * New filters and poppler compatibility as always
- Do not require python-cups but rather python3-cups in order to
  allow build on python2 less system
- Explicitly enable ijs and opvp filters</changelog>
  <changelog author="jsmeix@suse.de" date="1519214400">- Version upgrade to 1.20.0:
  * Mainly enhancements and fixes for the PPD generator.
  * For detailed info see the NEWS file.
- fix_upstream_bug_1421.patch is the upstream fix for
  https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
- Use 'BuildRequires python3-cups' only if suse_version &gt;= 1330
  (cf. "Do not require python-cups but rather python3-cups" below)
  which means after any SLE12 service pack and after any Leap 42.x
  i.e. for Tumbleweed, Leap 15.x, and the upcoming SLE15 and later
  otherwise still use 'BuildRequires python-cups' to make it build
  and usable again not only on some newest systems according to
  https://en.opensuse.org/openSUSE:How_to_contribute_to_the_Printing_project</changelog>
  <changelog author="jsmeix@suse.de" date="1522843200">- Version upgrade to 1.20.1
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing several issues
  on the Braille support and other bugs, in particular
  (for details see the NEWS file):
  * libcupsfilters: Silenced warning when using CUPS &lt; 2.x
    by eliminating the use of a recently introduced
    CUPS library function, see
    https://bugs.linuxfoundation.org/show_bug.cgi?id=1421
  * cups-browsed: Fixed crash when CUPS reports a print queue
    without "device-uri" attribute when cups-browsed polls a
    list of local CUPS queues, see
    https://github.com/OpenPrinting/cups-filters/issues/16
- fix_upstream_bug_1421.patch is no longer needed because
  it is now fixed in the upstream sources
  (see the "libcupsfilters ... bug ... 1421" entry above).</changelog>
  <changelog author="jsmeix@suse.de" date="1523361600">- Version upgrade to 1.20.2
  to provide upstream bugfixes also for SLE15 / Leap15
  and be also already prepared for SLE12 (fate#323676).
  This is a bug fix release fixing the recognition
  of remote CUPS queues by cups-browsed, the behavior
  of cups-browsed when one creates a queue with the
  same name of a cups-browsed-generated queue overwriting
  it, and other bug fixes (for details see the NEWS file).</changelog>
  <changelog author="luizluca@gmail.com" date="1525348800">- Version upgrade to 1.20.3
  to fix regression from 1.20.2 that ignores printers published
  using legacy CUPS broadcast</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
</package>
<package pkgid="a932a2ccd7735d06aac4d81882c5bca6f260d3cd5f844794eef71c719b0e7982" name="curl-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="23d4ffd3bf90b6eb26d0392b39ea80016d0b8b2ad3d665116109420ce90b0ef9" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="c581069645aacae7d4b24ff165a022a03d9ca9500fea58949f893b4049562281" name="curl-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="a77eaf7115fae232f050df9bdcfc32de44d83f29a75f1d941ce6864f3bdde2f2" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="cb82a43804386119c2ef4ebffaca32000c140701fb656158c5cf12a3896f1cd8" name="curl-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="c36ba8a3342395ef254eca36d0dcd7eac786e31c9a0d03da1d4b64cca7343433" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="0c16b59e5be69cb9c9b8c14c432a78d44ced5b7c65a8674e3f10bd8a6d2d80e5" name="curl-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="836425127914a1a359da33bfd22258eca98b09648ecc5aef55decfc2a07b2a1a" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="63748a207e16b725bd5f2c9146148b06ece79f5dff77600729206784fb1d86e2" name="curl-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="6e27301099792468f619e06e2fcaf872105c3a1f8a2751be15e11661cb699d89" name="curl-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="d855d2d4b7bcb292520e564e40a0ef4d0008bd3fa73743bd76856cb17e040b14" name="curl-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="c78fdc187de64b4230ed418dd2b62760fb66bfeac374bb2ff13cd82b24153ced" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="d3bc8814ebf27c3f7f4de1648ad84d2f9d482f35a1421f323c49d75b5e46ee45" name="curl-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="0084ae2d4e3da337f8e802b3b4f34b7944ca9238028877531962011f574c91f1" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="d5aec1cd7267591552b0e11748057f43312252f55ff636d812c144f649af1b04" name="curl-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="b9b6f633dd15cc2adf50af76ff16a2a56b9835a90eb8e1ccd0047c87f5a1ea77" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="cc505798235a946cd8debd86becad59aec29f095089d529feffd5277f0fff16a" name="curl-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="9608385b9f9ec28bdcb664d7a27104c35f59d4f6065c98358544609aef90ca22" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.6.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="09d71e6aaa66bef38bf414afa256bc0dc6d325a2b04b3002c8230bbd4810c081" name="curl-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="8905e356f2e353e96574de90b66fd6d2933cf3715de034ffb724c07f182444b2" name="curl-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="5296ae7c8f8cdbfd989c45e8aaad36556752be27a76a240dfe7dcfe4a81af5ea" name="curl-mini-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="ac89dd6ba6a0503dd3cefa18f7bed687ed9112fbd0a134bd2583de82c1ebc3b5" name="curl-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="a62beaf26162fe488b68745050fce8ba82dd064c54aff1d292411618cb008b64" name="curl-mini-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="50aceb3f9e50c9119d9c4064e4ff6660bdab861fc9f652a95ea30cfae0c18f81" name="curl-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="deea614f6f8f43291c636a1edd2ca5580a0fb34d20bf36c99bafcc13779e0fc6" name="curl-mini-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="cd8014d348f6783bf27928b085ce938f4b35533e1b9ea0ab9517eb813a6d4d4b" name="curl-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="9eb4562f6ad29f8a5d52c537d5b6cdb639dacdc2f1e9230a8f58f785f4034510" name="curl-mini-debuginfo" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="aaf82ae5dba8e4f05c670a187aecc2f06f6e20545486fcf6d9902b087ad0d6da" name="curl-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="826421ba68f0daca573902bb50bfaebde9fd54592866e5eca0de8fd62d7eeffc" name="curl-mini-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="442cd96ee883006472f2b6df42ee14dfecd4c7a07543baa56cf42d8a17381f80" name="curl-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.12.1"/>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
</package>
<package pkgid="9962207c0d35a8ecc955587e89772ce22179eefe0607d55647de42d701998a1d" name="curl-mini-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="b5296688e56ad220b6b7f1eaabe5ea5a3cd6afe12d881286b391581d1225a09f" name="curl-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.15.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
</package>
<package pkgid="ca474befc585125b1819ea61376b3c4cddea7dc72f9cd3e3bfa9efa1d3839e9d" name="curl-mini-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="34648ecf864f7c80ba073a65199b430214d1e392e0ea9707f812ffc154dd2824" name="curl-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548676800">- Fix wrong summary, curl is at version 7, not 4.</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
</package>
<package pkgid="64d2925793b8f10b67c063c47be42af5f9f94bd0f5587caaaa242598e4bd10fd" name="curl-mini-debugsource" arch="i586">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="cec639946e2945c3be2e237be3ef03568729437fd1c017899a1402805a535dd1" name="curl-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="lp152.3.9.1"/>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763200">- Security fix [bsc#1123377, CVE-2019-3822]
  * NTLMv2 type-3 header stack buffer overflow
  * Added patch curl-CVE-2019-3822.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1548763201">- Security fix [bsc#1123378, CVE-2019-3823]
  * SMTP end-of-response out-of-bounds read
  * Added patch curl-CVE-2019-3823.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1549454400">- update to version 7.64.0
  [bcs#1123371, CVE-2018-16890][bcs#1123377, CVE-2019-3822]
  [bcs#1123378, CVE-2019-3823]
  * Changes:
  - cookies: leave secure cookies alone
  - hostip: support wildcard hosts
  - http: Implement trailing headers for chunked transfers
  - http: added options for allowing HTTP/0.9 responses
  - timeval: Use high resolution timestamps on Windows
  * Bugfixes:
  - CVE-2018-16890: NTLM type-2 out-of-bounds buffer read
  - CVE-2019-3822: NTLMv2 type-3 header stack buffer overflow
  - CVE-2019-3823: SMTP end-of-response out-of-bounds read
  - FAQ: remove mention of sourceforge for github
  - OS400: handle memory error in list conversion
  - OS400: upgrade ILE/RPG binding.
  - README: add codacy code quality badge
  - Revert http_negotiate: do not close connection
  - THANKS: added several missing names from year &lt;= 2000
  - build: make 'tidy' target work for metalink builds
  - cmake: added checks for variadic macros
  - cmake: updated check for HAVE_POLL_FINE to match autotools
  - cmake: use lowercase for function name like the rest of the code
  - configure: detect xlclang separately from clang
  - configure: fix recv/send/select detection on Android
  - configure: rewrite --enable-code-coverage
  - conncache_unlock: avoid indirection by changing input argument type
  - cookie: fix comment typo
  - cookies: allow secure override when done over HTTPS
  - cookies: extend domain checks to non psl builds
  - cookies: skip custom cookies when redirecting cross-site
  - curl --xattr: strip credentials from any URL that is stored
  - curl -J: refuse to append to the destination file
  - curl/urlapi.h: include "curl.h" first
  - curl_multi_remove_handle() don't block terminating c-ares requests
  - darwinssl: accept setting max-tls with default min-tls
  - disconnect: separate connections and easy handles better
  - disconnect: set conn-&gt;data for protocol disconnect
  - docs/version.d: mention MultiSSL
  - docs: fix the --tls-max description
  - docs: use $(INSTALL_DATA) to install man page
  - docs: use meaningless port number in CURLOPT_LOCALPORT example
  - gopher: always include the entire gopher-path in request
  - http2: clear pause stream id if it gets closed
  - if2ip: remove unused function Curl_if_is_interface_name
  - libssh: do not let libssh create socket
  - libssh: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION for libssh
  - libssh: free sftp_canonicalize_path() data correctly
  - libtest/stub_gssapi: use "real" snprintf
  - mbedtls: use VERIFYHOST
  - multi: multiplexing improvements
  - multi: set the EXPIRE_*TIMEOUT timers at TIMER_STARTSINGLE time
  - ntlm: fix NTMLv2 compliance
  - ntlm_sspi: add support for channel binding
  - openssl: adapt to 3.0.0, OpenSSL_version_num() is deprecated
  - openssl: fix the SSL_get_tlsext_status_ocsp_resp call
  - openvms: fix OpenSSL discovery on VAX
  - openvms: fix typos in documentation
  - os400: add a missing closing bracket
  - os400: fix extra parameter syntax error
  - pingpong: change default response timeout to 120 seconds
  - pingpong: ignore regular timeout in disconnect phase
  - printf: fix format specifiers
  - runtests.pl: Fix perl call to include srcdir
  - schannel: fix compiler warning
  - schannel: preserve original certificate path parameter
  - schannel: stop calling it "winssl"
  - sigpipe: if mbedTLS is used, ignore SIGPIPE
  - smb: fix incorrect path in request if connection reused
  - ssh: log the libssh2 error message when ssh session startup fails
  - test1558: verify CURLINFO_PROTOCOL on file:// transfer
  - test1561: improve test name
  - test1653: make it survive torture tests
  - tests: allow tests to pass by 2037-02-12
  - tests: move objnames-* from lib into tests
  - timediff: fix math for unsigned time_t
  - timeval: Disable MSVC Analyzer GetTickCount warning
  - tool_cb_prg: avoid integer overflow
  - travis: added cmake build for osx
  - urlapi: Fix port parsing of eol colon
  - urlapi: distinguish possibly empty query
  - urlapi: fix parsing ipv6 with zone index
  - urldata: rename easy_conn to just conn
  - winbuild: conditionally use /DZLIB_WINAPI
  - wolfssl: fix memory-leak in threaded use
  - spnego_sspi: add support for channel binding</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1551268800">- BuildRequire libcurl4-mini for !bootstrap to avoid build cycles
  due to cmake pulling libcurl4</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1552046400">- Add patches to fix use-after-free (boo#1127849):
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1552910400">- Fix variable placement that wasn't properly reset within a loop
  missing to notify sockets. [bsc#1129083, bsc#1129470]
  * Added curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811200">- update to version 7.64.1
  * Changes:
  - alt-svc: experiemental support added
  - configure: add --with-amissl
  * Bugfixes:
  - AppVeyor: switch VS 2015 builds to VS 2017 image
  - CURLU: fix NULL dereference when used over proxy
  - Curl_easy: remove req.maxfd - never used!
  - Curl_resolv: fix a gcc -Werror=maybe-uninitialized warning
  - DoH: inherit some SSL options from user's easy handle
  - Secure Transport: no more "darwinssl"
  - Secure Transport: tvOS 11 is required for ALPN support
  - cirrus: Added FreeBSD builds using Cirrus CI
  - cleanup: make local functions static
  - cli tool: do not use mime.h private structures
  - cmdline-opts/proxytunnel.d: the option tunnnels all protocols
  - configure: add additional libraries to check for LDAP support
  - configure: remove the unused fdopen macro
  - configure: show features as well in the final summary
  - conncache: use conn-&gt;data to know if a transfer owns it
  - connection: never reuse CONNECT_ONLY connections
  - connection_check: restore original conn-&gt;data after the check
  - connection_check: set -&gt;data to the transfer doing the check
  - cookie: Add support for cookie prefixes
  - cookies: dotless names can set cookies again
  - cookies: fix NULL dereference if flushing cookies with no CookieInfo set
  - curl.1: --user and --proxy-user are hidden from ps output
  - curl.1: mark the argument to --cookie as
  - curl.h: use __has_declspec_attribute for shared builds
  - curl: display --version features sorted alphabetically
  - curl: fix FreeBSD compiler warning in the --xattr code
  - curl: remove MANUAL from -M output
  - curl_easy_duphandle.3: clarify that a duped handle has no shares
  - curl_multi_remove_handle.3: use at any time, just not from within callbacks
  - curl_url.3: this API is not experimental anymore
  - dns: release sharelock as soon as possible
  - docs: update max-redirs.d phrasing
  - examples/10-at-a-time.c: improve readability and simplify
  - examples/cacertinmem.c: use multiple certificates for loading CA-chain
  - examples/crawler: Fix the Accept-Encoding setting
  - examples/ephiperfifo.c: various fixes
  - examples/externalsocket: add missing close socket calls
  - examples/http2-download: cleaned up
  - examples/http2-serverpush: add some sensible error checks
  - examples/http2-upload: cleaned up
  - examples/httpcustomheader: Value stored to 'res' is never read
  - examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
  - examples/sftpuploadresume: Value stored to 'result' is never read
  - examples: only include
  - examples: remove recursive calls to curl_multi_socket_action
  - examples: remove superfluous null-pointer checks
  - file: fix "Checking if unsigned variable 'readcount' is less than zero."
  - fnmatch: disable if FTP is disabled
  - gnutls: remove call to deprecated gnutls_compression_get_name
  - gopher: remove check for path == NULL
  - gssapi: fix deprecated header warnings
  - hostip: make create_hostcache_id avoid alloc + free
  - http2: multi_connchanged() moved from multi.c, only used for h2
  - http2: verify :athority in push promise requests
  - http: make adding a blank header thread-safe
  - http: send payload when (proxy) authentication is done
  - http: set state.infilesize when sending multipart formposts
  - makefile: make checksrc and hugefile commands "silent"
  - mbedtls: make it build even if MBEDTLS_VERSION_C isn't set
  - mbedtls: release sessionid resources on error
  - memdebug: log pointer before freeing its data
  - memdebug: make debug-specific functions use curl_dbg_ prefix
  - mime: put the boundary buffer into the curl_mime struct
  - multi: call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
  - multi: remove verbose "Expire in" ... messages
  - multi: removed unused code for request retries
  - multi: support verbose conncache closure handle
  - negotiate: fix for HTTP POST with Negotiate
  - openssl: add support for TLS ASYNC state
  - openssl: if cert type is ENG and no key specified, key is ENG too
  - pretransfer: don't strlen() POSTFIELDS set for GET requests
  - rand: Fix a mismatch between comments in source and header
  - runtests: detect "schannel" as an alias for "winssl"
  - schannel: be quiet - remove verbose output
  - schannel: close TLS before removing conn from cache
  - schannel: support CALG_ECDH_EPHEM algorithm
  - scripts/completion.pl: also generate fish completion file
  - singlesocket: fix the 'sincebefore' placement
  - source: fix two 'nread' may be used uninitialized warnings
  - ssh: fix Condition '!status' is always true
  - ssh: loop the state machine if not done and not blocking
  - strerror: make the strerror function use local buffers
  - test578: make it read data from the correct test
  - tests: Fixed XML validation errors in some test files
  - tests: add stderr comparison to the test suite
  - tests: fix multiple may be used uninitialized warnings
  - threaded-resolver: shutdown the resolver thread without error message
  - tool_cb_wrt: fix writing to Windows null device NUL
  - tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
  - tool_operate: build on AmigaOS
  - tool_operate: fix typecheck warning
  - transfer.c: do not compute length of undefined hex buffer
  - travis: add build using gnutls
  - travis: add scan-build
  - travis: bump the used wolfSSL version to 4.0.0
  - travis: enable valgrind for the iconv tests
  - travis: use updated compiler versions: clang 7 and gcc 8
  - unit1307: require FTP support
  - unit1651: survive curl_easy_init() fails
  - url/idnconvert: remove scan for &lt;= 32 ascii values
  - url: change conn shutdown order to ensure SOCKETFUNCTION callbacks
  - urlapi: reduce variable scope, remove unreachable 'break'
  - urldata: convert bools to bitfields and move to end
  - urldata: simplify bytecounters
  - urlglob: Argument with 'nonnull' attribute passed null
  - version.c: silent scan-build even when librtmp is not enabled
  - vtls: rename some of the SSL functions
  - wolfssl: stop custom-adding curves
  - x509asn1: "Dereference of null pointer"
  - x509asn1: cleanup and unify code layout
  - zsh.pl: escape ':' character
  - zsh.pl: update regex to better match curl -h output
- Dropped patches fixed upstream:
  * 0001-connection_check-set-data-to-the-transfer-doing-the-.patch
  * 0002-connection_check-restore-original-conn-data-after-th.patch
  * curl-singlesocket-sincebefore-placement.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1554811201">- Install curl.fish completions file from curl rather than from the fish package</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558008000">- Security fix [bsc#1135170, CVE-2019-5436]
  * A heap buffer overflow exists in tftp_receive_packet that
    receives data from a TFTP server
  * Added curl-CVE-2019-5436.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1558526400">- Update to 7.65.0 [bsc#1135176, CVE-2019-5435][bsc#1135170, CVE-2019-5436]
  * Changes:
  - CURLOPT_DNS_USE_GLOBAL_CACHE: removed
  - CURLOPT_MAXAGE_CONN: set the maximum allowed age for conn reuse
  - pipelining: removed
  * Bugfixes:
  - CVE-2019-5435: Integer overflows in curl_url_set
  - CVE-2019-5436: tftp: use the current blksize for recvfrom()
  - --config: clarify that initial : and = might need quoting
  - CURLMOPT_TIMERFUNCTION.3: warn about the recursive risk
  - CURLOPT_ADDRESS_SCOPE: fix range check and more
  - CURLOPT_CHUNK_BGN_FUNCTION.3: document the struct and time value
  - CURLOPT_READFUNCTION.3: see also CURLOPT_UPLOAD_BUFFERSIZE
  - CURL_MAX_INPUT_LENGTH: largest acceptable string input size
  - Curl_disconnect: treat all CONNECT_ONLY connections as "dead"
  - OS400/ccsidcurl: replace use of Curl_vsetopt
  - OpenSSL: Report -fips in version if OpenSSL is built with FIPS
  - WRITEFUNCTION: add missing set_in_callback around callback
  - altsvc: Fix building with cookies disabled
  - auth: Rename the various authentication clean up functions
  - base64: build conditionally if there are users
  - cmake: avoid linking executable for some tests with cmake 3.6+
  - cmake: clear CMAKE_REQUIRED_LIBRARIES after each use
  - cmake: set SSL_BACKENDS
  - configure: avoid unportable '==' test(1) operator
  - configure: error out if OpenSSL wasn't detected when asked for
  - configure: fix default location for fish completions
  - cookie: Guard against possible NULL ptr deref
  - curl: make code work with protocol-disabled libcurl
  - curl: report error for "--no-" on non-boolean options
  - curlver.h: use parenthesis in CURL_VERSION_BITS macro
  - docs/INSTALL: fix broken link
  - doh: acknowledge CURL_DISABLE_DOH
  - doh: disable DOH for the cases it doesn't work
  - examples: remove unused variables
  - ftplistparser: fix LGTM alert "Empty block without comment"
  - hostip: acknowledge CURL_DISABLE_SHUFFLE_DNS
  - http: Ignore HTTP/2 prior knowledge setting for HTTP proxies
  - http: acknowledge CURL_DISABLE_HTTP_AUTH
  - http: mark bundle as not for multiuse on &lt; HTTP/2 response
  - http_digest: Don't expose functions when HTTP and Crypto Auth are disabled
  - http_negotiate: do not treat failure of gss_init_sec_context() as fatal
  - http_ntlm: Corrected the name of the include guard
  - http_ntlm_wb: Handle auth for only a single request
  - http_ntlm_wb: Return the correct error on receiving an empty auth message
  - lib509: add missing include for strdup
  - lib557: initialize variables
  - mbedtls: enable use of EC keys
  - mime: acknowledge CURL_DISABLE_MIME
  - multi: improved HTTP_1_1_REQUIRED handling
  - netrc: acknowledge CURL_DISABLE_NETRC
  - nss: allow fifos and character devices for certificates
  - nss: provide more specific error messages on failed init
  - ntlm: Fix misaligned function comments for Curl_auth_ntlm_cleanup
  - ntlm: Support the NT response in the type-3 when OpenSSL doesn't include MD4
  - openssl: mark connection for close on TLS close_notify
  - openvms: Remove pre-processor for SecureTransport
  - parse_proxy: use the URL parser API
  - parsedate: disabled on CURL_DISABLE_PARSEDATE
  - pingpong: disable more when no pingpong protocols are enabled
  - polarssl_threadlock: remove conditionally unused code
  - progress: acknowledge CURL_DISABLE_PROGRESS_METER
  - proxy: acknowledge DISABLE_PROXY more
  - resolve: apply Happy Eyeballs philosophy to parallel c-ares queries
  - revert "multi: support verbose conncache closure handle"
  - sasl: Don't send authcid as authzid for the PLAIN mechanism as per RFC 4616
  - sasl: only enable if there's a protocol enabled using it
  - singleipconnect: show port in the verbose "Trying ..." message
  - socks5: user name and passwords must be shorter than 256
  - socks: fix error message
  - socksd: new SOCKS 4+5 server for tests
  - spnego_gssapi: fix return code on gss_init_sec_context() failure
  - ssh-libssh: remove unused variable
  - ssh: define USE_SSH if SSH is enabled (any backend)
  - ssh: move variable declaration to where it's used
  - test1002: correct the name
  - test2100: Fix typos in test description
  - tests: Run global cleanup at end of tests
  - tests: make Impacket (SMB server) Python 3 compatible
  - tool_cb_wrt: fix bad-function-cast warning
  - tool_formparse: remove redundant assignment
  - tool_help: Warn if curl and libcurl versions do not match
  - tool_help: include for strcasecmp
  - url: always clone the CUROPT_CURLU handle
  - url: convert the zone id from a IPv6 URL to correct scope id
  - urlapi: add CURLUPART_ZONEID to set and get
  - urlapi: increase supported scheme length to 40 bytes
  - urlapi: require a non-zero host name length when parsing URL
  - urlapi: stricter CURLUPART_PORT parsing
  - urlapi: strip off zone id from numerical IPv6 addresses
  - urlapi: urlencode characters above 0x7f correctly
  - vauth/cleartext: update the PLAIN login to match RFC 4616
  - vauth/oauth2: Fix OAUTHBEARER token generation
  - vauth: Fix incorrect function description for Curl_auth_user_contains_domain
  - vtls: fix potential ssl_buffer stack overflow
  - wildcard: disable from build when FTP isn't present
  - xattr: skip unittest on unsupported platforms</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559736000">- Update to 7.65.1
  * Bugfixes:
  - CURLOPT_LOW_SPEED_* repaired
  - NTLM: reset proxy "multipass" state when CONNECT request is done
  - PolarSSL: deprecate support step 1. Removed from configure
  - cmake: check for if_nametoindex()
  - cmake: support CMAKE_OSX_ARCHITECTURES when detecting SIZEOF variables
  - conncache: Remove the DEBUGASSERT on length check
  - conncache: make "bundles" per host name when doing proxy tunnels
  - curl_share_setopt.3: improve wording
  - dump-header.d: spell out that no headers == empty file
  - example/http2-download: fix format specifier
  - examples: cleanups and compiler warning fixes
  - http2: Stop drain from being permanently set
  - http: don't parse body-related headers in bodyless responses
  - md4: build correctly with openssl without MD4
  - md4: include the mbedtls config.h to get the MD4 info
  - multi: track users of a socket better
  - nss: allow to specify TLS 1.3 ciphers if supported by NSS
  - parse_proxy: make sure portptr is initialized
  - parse_proxy: use the IPv6 zone id if given
  - sectransp: handle errSSLPeerAuthCompleted from SSLRead()
  - singlesocket: use separate variable for inner loop
  - ssl: Update outdated "openssl-only" comments for supported backends
  - tests: add HAProxy keywords
  - tests: make test 1420 and 1406 work with rtsp-disabled libcurl
  - tls13-docs: mention it is only for OpenSSL &gt;= 1.1.1
  - tool_setopt: for builds with disabled-proxy, skip all proxy setopts()
  - url: fix bad feature-disable #ifdef
  - url: use correct port in ConnectionExists()</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563364800">- Update to 7.65.2
  * Bugfixes:
  - CIPHERS.md: Explain Schannel error SEC_E_ALGORITHM_MISMATCH
  - CMake: Fix finding Brotli on case-sensitive file systems
  - CURLOPT_RANGE.3: Caution against using it for HTTP PUT
  - CURLOPT_SEEKDATA.3: fix variable name
  - bindlocal: detect and avoid IP version mismatches in bind()
  - build: fix Codacy warnings
  - c-ares: honor port numbers in CURLOPT_DNS_SERVERS
  - config-os400: add getpeername and getsockname defines
  - configure: --disable-progress-meter
  - configure: fix --disable-code-coverage
  - configure: more --disable switches to toggle off individual features
  - configure: remove CURL_DISABLE_TLS_SRP
  - conn_maxage: move the check to prune_dead_connections()
  - curl: skip CURLOPT_PROXY_CAPATH for disabled-proxy builds
  - docs: Explain behavior change in --tlsv1. options since 7.54
  - docs: Fix links to OpenSSL docs
  - docs: fix string suggesting HTTP/2 is not the default
  - headers: Remove no longer exported functions
  - http2: call done_sending on end of upload
  - http2: don't call stream-close on already closed streams
  - http2: remove CURL_DISABLE_TYPECHECK define
  - http: allow overriding timecond with custom header
  - http: clarify header buffer size calculation
  - krb5: fix compiler warning
  - lib: Use UTF-8 encoding in comments
  - libcurl: Restrict redirect schemes to HTTP, HTTPS, FTP and FTPS
  - multi: enable multiplexing by default (again)
  - multi: fix the transfer hashes in the socket hash entries
  - multi: make sure 'data' can present in several sockhash entries
  - netrc: Return the correct error code when out of memory
  - nss: don't set unused parameter
  - nss: inspect returnvalue of token check
  - nss: only cache valid CRL entries
  - openssl: define HAVE_SSL_GET_SHUTDOWN based on version number
  - openssl: disable engine if OPENSSL_NO_UI_CONSOLE is defined
  - openssl: fix pubkey/signature algorithm detection in certinfo
  - os400: make vsetopt() non-static as Curl_vsetopt() for os400 support
  - quote.d: asterisk prefix works for SFTP as well
  - runtests: keep logfiles around by default
  - runtests: report single test time + total duration
  - test1165: verify that CURL_DISABLE_ symbols are in sync
  - test1521: adapt to SLISTPOINT
  - test1523: test CURLOPT_LOW_SPEED_LIMIT
  - test153: fix content-length to avoid occasional hang
  - test188/189: fix Content-Length
  - tests: have runtests figure out disabled features
  - tests: support non-localhost HOSTIP for dict/smb servers
  - tests: update fixed IP for hostip/clientip split
  - tool_cb_prg: Fix integer overflow in progress bar
  - typecheck: CURLOPT_CONNECT_TO takes an slist too
  - typecheck: add 3 missing strings and a callback data pointer
  - unit1654: cleanup on memory failure
  - unpause: trigger a timeout for event-based transfers
  - url: Fix CURLOPT_MAXAGE_CONN time comparison
- Rebased patch curl-use_OPENSSL_config.patch
- Disable new added failing test1165</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1563537600">- Update to 7.65.3
  * progress: make the progress meter appear again</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684800">- Security fix: [bsc#1149495,CVE-2019-5481]
  * FTP-KRB: double-free during kerberos FTP data transfer
  * Added curl-CVE-2019-5481.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1567684801">- Security fix: [bsc#1149496,CVE-2019-5482]
  * TFTP small blocksize heap buffer overflow
  * Added curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1568203200">- Update to 7.66.0 [bsc#1149496, CVE-2019-5482][bsc#1149495, CVE-2019-5481]
  [bsc#1149604, bsc#1149572, jsc#SLE-9295]
  * Changes:
  - CURLINFO_RETRY_AFTER: parse the Retry-After header value
  - HTTP3: initial (experimental still not working) support
  - curl: --sasl-authzid added to support CURLOPT_SASL_AUTHZID from the tool
  - curl: support parallel transfers with -Z
  - curl_multi_poll: a sister to curl_multi_wait() that waits more
  - sasl: Implement SASL authorisation identity via CURLOPT_SASL_AUTHZID
  * Bugfixes:
  - CVE-2019-5481: FTP-KRB double-free
  - CVE-2019-5482: TFTP small blocksize heap buffer overflow
  - CMake: remove needless newlines at end of gss variables
  - CMake: use platform dependent name for dlopen() library
  - CURLINFO docs: mention that in redirects times are added
  - CURLOPT_ALTSVC.3: use a "" file name to not load from a file
  - CURLOPT_ALTSVC_CTRL.3: remove CURLALTSVC_ALTUSED
  - CURLOPT_HEADERFUNCTION.3: clarify
  - CURLOPT_HTTP_VERSION: seting this to 3 forces HTTP/3 use directly
  - CURLOPT_READFUNCTION.3: provide inline example
  - CURLOPT_SSL_VERIFYHOST: treat the value 1 as 2
  - Curl_addr2string: take an addrlen argument too
  - Curl_fillreadbuffer: avoid double-free trailer buf on error
  - HTTP: use chunked Transfer-Encoding for HTTP_POST if size unknown
  - alt-svc: add protocol version selection masking
  - alt-svc: fix removal of expired cache entry
  - alt-svc: make it use h3-22 with ngtcp2 as well
  - alt-svc: more liberal ALPN name parsing
  - alt-svc: send Alt-Used: in redirected requests
  - alt-svc: with quiche, use the quiche h3 alpn string
  - asyn-thread: create a socketpair to wait on
  - cleanup: move functions out of url.c and make them static
  - cleanup: remove the 'numsocks' argument used in many places
  - configure: avoid undefined check_for_ca_bundle
  - curl.h: add CURL_HTTP_VERSION_3 to the version enum
  - curl: cap the maximum allowed values for retry time arguments
  - curl: handle a libcurl build without netrc support
  - curl: make use of CURLINFO_RETRY_AFTER when retrying
  - curl: use CURLINFO_PROTOCOL to check for HTTP(s)
  - curl_global_init_mem.3: mention it was added in 7.12.0
  - curl_version: bump string buffer size to 250
  - curl_version_info.3: mentioned ALTSVC and HTTP3
  - curl_version_info: offer quic (and h3) library info
  - curl_version_info: provide nghttp2 details
  - defines: avoid underscore-prefixed defines
  - docs/ALTSVC: remove what works and the experimental explanation
  - docs/EXPERIMENTAL: explain what it means and what's experimental now
  - docs/MANUAL.md: converted to markdown from plain text
  - docs/examples/curlx: fix errors
  - docs: s/curl_debug/curl_dbg_debug in comments and docs
  - easy: resize receive buffer on easy handle reset
  - examples: Avoid reserved names in hiperfifo examples
  - examples: add http3.c, altsvc.c and http3-present.c
  - http09: disable HTTP/0.9 by default in both tool and library
  - http2: when marked for closure and wanted to close == OK
  - http2_recv: trigger another read when the last data is returned
  - http: fix use of credentials from URL when using HTTP proxy
  - http_negotiate: improve handling of gss_init_sec_context() failures
  - md4: Use our own MD4 when no crypto libraries are available
  - multi: call detach_connection before Curl_disconnect
  - nss: use TLSv1.3 as default if supported
  - openssl: build warning free with boringssl
  - openssl: use SSL_CTX_set__proto_version() when available
  - plan9: add support for running on Plan 9
  - progress: reset download/uploaded counter between transfers
  - readwrite_data: repair setting the TIMER_STARTTRANSFER stamp
  - scp: fix directory name length used in memcpy
  - smb: init *msg to NULL in smb_send_and_recv()
  - smtp: check for and bail out on too short EHLO response
  - source: remove names from source comments
  - spnego_sspi: add typecast to fix build warning
  - src/makefile: fix uncompressed hugehelp.c generation
  - ssh-libssh: do not specify O_APPEND when not in append mode
  - ssh: move code into vssh for SSH backends
  - sspi: fix memory leaks
  - tests: Replace outdated test case numbering documentation
  - tftp: return error when packet is too small for options
  - timediff: make it 64 bit (if possible) even with 32 bit time_t
  - travis: reduce number of torture tests in 'coverage'
  - url: make use of new HTTP version if alt-svc has one
  - urlapi: verify the IPv6 numerical address
  - urldata: avoid 'generic', use dedicated pointers
  - vauth: Use CURLE_AUTH_ERROR for auth function errors
  * Removed patches:
  - curl-CVE-2018-0500.patch
  - curl-CVE-2018-14618.patch
  - curl-CVE-2018-16839.patch
  - curl-CVE-2018-16840.patch
  - curl-CVE-2018-16842.patch
  - curl-CVE-2018-16890.patch
  - curl-CVE-2019-3822.patch
  - curl-CVE-2019-3823.patch
  - curl-CVE-2019-5436.patch
  - curl-CVE-2019-5481.patch
  - curl-CVE-2019-5482.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1573732800">- Fix segfault in zypper ref: [bsc#1156481]
  * remove_handle: clear expire timers after multi_done()
  * Add patch curl-expire-clear.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
</package>
<package pkgid="14b3422b2115dc7253fc5ce02defbfe0b61d9c4fc123f39ea8512d95c2eccc5c" name="dash-debuginfo" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="56b23584b19f0bc7d4e7a918caa85d795b5cc6d7485ab710742090d6a696c688" name="dash-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="beb5528824f8753b1b8c64cb9193f4f09ad93e294f51e03d2c37ed4b64272f07" name="dash-debuginfo" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="b9127c72224786d6bf5d65c0ecdace4b2cce74cbe220622dfa4cc42338b2f298" name="dash-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="55d7caf511653583db36bd110306f72fa555f1cf68aac4a329b613051f8bbc7a" name="dash-debugsource" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="e141bb15f7d8d3ce0e3065da49123a1464a9589950faf7a1f91ba1ef233dfac6" name="dash-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.3.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- update to version 0.5.7
  - optimize dash -c "command" to avoid a fork
  - improve LINENO support
  - dotcmd should exit with zero when doing nothing
  - replace GPL noclobberopen code with the FreeBSD version
  - do not split the result of tilde expansion
  - use exit status 127 when the script to run does not exist
  - document optional open parenthesis for case patterns
  - use faccessat if available
- added dash-0.5.7-do-not-close-stderr.patch in order to prevent
  stderr from being closed when /dev/tty fails to open (backported
  from upstream git)
- added
  dash-remove-backslash-before-in-double-quotes-in-variable.patch
  which removes a backslash before } in double-quotes in variable
  as it prevents the closing brace from terminating the
  substitution (from FreeBSD/Debian)</changelog>
  <changelog author="gber@opensuse.org" date="1317902401">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
</package>
<package pkgid="9220d986b7d09f2aa42ea649600fb40ca0e360fc2df1fe98093c971fb0955f4d" name="dash-debugsource" arch="i586">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="f1125106cbab8b73edc657bb904dceec7fd21f696af769c88889c4af69999807" name="dash-debugsource" arch="x86_64">
  <version epoch="0" ver="0.5.11.2" rel="lp152.4.6.1"/>
  <changelog author="gber@opensuse.org" date="1317902400">- remove libeditline dependency again as libeditline lives in /usr</changelog>
  <changelog author="gber@opensuse.org" date="1380283200">- install into %{_bindir} and add a compatibility symlink to /bin
- reenable commandline editor</changelog>
  <changelog author="gber@opensuse.org" date="1412942400">- update to version 0.5.8
  - Small optimisation of command -pv change
  - Set command -p path to /usr/sbin:/usr/bin:/sbin:/bin
  - Change "characters" for printf precision to "bytes"
  - Clarify "trap '' signals" syntax in manual page
  - Clarify that 0 and EXIT are both acceptable for exit traps
  - command: allow combining -p with -v
  - getjob: Fix off-by-one error for multiple of four job numbers
  - Propagate EXP_QPAT in subevalvar
  - Initialise OPTIND after importing environment
  - Fixed argument parsing crash in test
  - Add newline when tracing in poplocalvars
  - Markup fixes in manual for mandoc 1.12.1
  - Use PRIdMAX instead of %j in printf
  - Fix typo for wait in manual
  - Add support for ulimit -r
  - Avoid overflow for very long variable name
  - Sanitise environment variable names on entry
  - Allow building without LINEO support
  - Add top-level autogen.sh
  - Avoid imaxdiv when only one of the results is wanted
  - Fix klibc DEBUG compilation
  - Merge SKIPFUNC/SKIPFILE and only clear SKIPFUNC when leaving
    dotcmd</changelog>
  <changelog author="mpluskal@suse.com" date="1428580800">- Use fnmatch and glob from glibc
- Use url for source</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 0.5.9.1 (bsc#1177691)
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.8..v0.5.9.1
- lint with spec-cleaner</changelog>
  <changelog author="sean@suspend.net" date="1540468800">- update to version 0.5.10
  * For complete list of changes, see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.9.1..v0.5.10
- remove upstreamed patches:
  * drop dash-0.5.7-do-not-close-stderr.patch
  * drop dash-remove-backslash-before-in-double-quotes-in-variable.patch</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585656000">- Add -fcommon to %optflags in order to fix boo#1160260.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- update to 0.5.11.1:
  * For complete list of changes see:
    https://git.kernel.org/pub/scm/utils/dash/dash.git/log/?qt=range&amp;q=v0.5.10..v0.5.11.1</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603022400">- update to 0.5.11.2 (bsc#1177691):
  * shell: Group readdir64/dirent64 with open64
- add LICENSE file</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1605787200">- add check-nflag-in-evaltree.patch (bsc#1178978)</changelog>
</package>
<package pkgid="9d6380378fa27998751cc2c207f8ee2fec351e194a1726e83c97d67e40027f67" name="datefudge-debuginfo" arch="i586">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="5f7b309be2937af09da126137093c7260260aa32bccf2562bef361ab3a22d954" name="datefudge-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="88d7ad22586931f37788644558726c41626a94c5b47a9bbaa7d1c918c90dfdfe" name="datefudge-debugsource" arch="i586">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="23f3a48f6377159aa4931d40eefd0b83c20b0d85809e82739a395607f7a230fe" name="datefudge-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1453118400">- Initial release</changelog>
  <changelog author="astieger@suse.com" date="1510574400">- update to 1.22:
  * Operate more efficiently, especially if fudging to the epoch.
  * Fix running on 32-bit systems with 64-bit time_t (such as x32).
  * datefudge.man: Document that datefudge might be affected by the
    Y2K38 problem on some systems.
- includes changes from 1.21:
  * datefudge.sh: don't fail when its date argument happens to be
    equal to the current time (i.e. make `datefudge now
    some_command' work).
  * Update man page to mention that the date can be given in any
    format accepted by date(1) command.
- add upstream signing key and verify source signature</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix FTBFS build with glibc 2.31 [bsc#1183784]
  * conflicting gettimeofday prototype
- Add datefudge-glibc-2.31-fix.patch</changelog>
</package>
<package pkgid="7716dc8b5a54385d31ac5d9fda5e7cb0fdb84f561b1ae42a424e5f4fe53efa7e" name="davfs2-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="lp152.4.3.1"/>
  <changelog author="conrad@quisquis.de" date="1360756800">- Added missing file</changelog>
  <changelog author="conrad@quisquis.de" date="1360929600">- Specfile fixes for fedora + SLES</changelog>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
</package>
<package pkgid="6f2cdcd6934b28d3b42496613d4380d71c9ed7f8298009b7b2c8a64834406b12" name="davfs2-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="lp152.4.3.1"/>
  <changelog author="conrad@quisquis.de" date="1360756800">- Added missing file</changelog>
  <changelog author="conrad@quisquis.de" date="1360929600">- Specfile fixes for fedora + SLES</changelog>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="Goldwyn Rodrigues &lt;rgoldwyn@suse.com&gt;" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
</package>
<package pkgid="291800aa3f74f821f37727260a8ee2167978e263586c1c3e526376dca8ded876" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="a673dc83161d04904c4431ef416f14b82ea27ea5ee51dc5cd34e9f651d1c3556" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.12.1"/>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
</package>
<package pkgid="c9626b675a3dfdfd9be74fa81ba1fb73ed4c55de7034b4dc4d673e61db16044b" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="402560570c5ca488c794f65611a8ab00d41b746556b4bb96681d0693999073ed" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.15.1"/>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
</package>
<package pkgid="53ff159d0feadae375dd0dbace052a96659180bd4b27ef170079bdb90c1c42fe" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="c9cf8b61a014cb623f05359420a41371940d5dfbd1b947bbc1fe919ca9fbf81f" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.18.1"/>
  <changelog author="heming.zhao@suse.com" date="1568030400">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
</package>
<package pkgid="fd78fcd5d6a76fe480867e711486dc2ae1848e69c167942f6dedd502c78cea7f" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="b77eafa096038da9577dac34cc43bed3ed9117da575656f86896944eb8ddfff2" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.21.1"/>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
</package>
<package pkgid="eedbc7ff43b673e2fa26aa8e5a62fb779dc7c82aaaf91504f0f23b29ab5f9aa7" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="e50a71263d588220763cb858e600fc15997b347904066feb828c984ca7eaff5d" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.3.1"/>
  <changelog author="ghe@suse.com" date="1549022400">- Disable the LVM lock daemon using sanlock, in order to avoid the
  dependence on sanlock related packages (bsc#1121382)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
</package>
<package pkgid="e91448d7b0177910e9b4180d38e7dba08705b166f25657a7d9ea865d7388a329" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="40cb2623a149969d1ef0f9354502f3906978b8523124cd5a9e0a64dc9ebf81fd" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1552996800">- Use %make_build in order to provide verbose output.</changelog>
  <changelog author="ghe@suse.com" date="1556625600">- Fix devices drop open error message (bsc#1122666)
  + bug-1122666_devices-drop-open-error-message.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1561636800">- Fix using device aliases with lvmetad (bsc#1137296)
  + bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch</changelog>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
</package>
<package pkgid="ca3983832c6e080cb1677506fb5b00384147dbc0790cab1db18e95ba1ac5a54c" name="device-mapper-debuginfo" arch="i586">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="16c6d663884f8e5e815ebf185063d7e32bc92caed3baf0a5ad82337f580c6735" name="device-mapper-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.02.163" rel="lp152.7.9.1"/>
  <changelog author="ghe@suse.com" date="1562673600">- Fix unknown feature in status message (bsc#1135984)
  + bug-1135984_cache-support-no_discard_passdown.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1567425600">- Update to LVM2.2.03.05
  - To drop lvm2-clvm and lvm2-cmirrord rpms (jsc#PM-1324)
  - Fix Out of date package (bsc#1111734)
  - Fix occasional slow shutdowns with kernel 5.0.0 and up (bsc#1137648)
  - Remove clvmd
  - Remove lvmlib (api)
  - Remove lvmetad
- Drop patches that have been merged into upstream
  - bug-1114113_metadata-prevent-writing-beyond-metadata-area.patch
  - bug-1137296_pvremove-vgextend-fix-using-device-aliases-with-lvmetad.patch
  - bug-1135984_cache-support-no_discard_passdown.patch
- Drop patches that have been nonexist/unsupport in upstream
  - bsc1080299-detect-clvm-properly.patch
  - bug-998893_make_pvscan_service_after_multipathd.patch
  - bug-978055_clvmd-try-to-refresh-device-cache-on-the-first-failu.patch
  - bug-950089_test-fix-lvm2-testsuite-build-error.patch
  - bug-1072624_test-lvmetad_dump-always-timed-out-when-using-nc.patch
  - tests-specify-python3-as-the-script-interpreter.patch
- Update spec files
  - merge device-mapper, lvm2-lockd, lvm2 into one spec file
  - clvmd/lvmlib (api)/lvmetad had been removed, so delete related context in spec file
- Update lvm.conf files
  - remove all lvmetad lines/keywords
  - add event_activation
  - remove fallback_to_lvm1 &amp; related items
  - remove locking_type/fallback_to_clustered_locking/fallback_to_local_locking items
  - remove locking_library item
  - remove all special filter rules</changelog>
  <changelog author="ghe@suse.com" date="1568030400">- Avoid creation of mixed-blocksize PV on LVM volume groups (bsc#1149408)
  + bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  + bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
- Update lvm.conf files
  - add devices/allow_mixed_block_sizes item</changelog>
  <changelog author="heming.zhao@suse.com" date="1568030401">- Update lvm2.spec: make baselibs.conf to a common source.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1570017600">- Fix LV activation issues (boo#1152378, rh#1727270)
  + bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  + bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571659200">- lvm2-pvscan needs process speed improvement on a large scale PVs (jcs#SLE-5498)
  + jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1571832000">- Fix udev rules issue (bsc#1154655)
  + bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979200">- backport upstream patches for passing lvm2 testsuite (bsc#1158628)
  + bug-1158628_01-tests-replaces-grep-q-usage.patch
  + bug-1158628_02-tests-fix-ra-checking.patch
  + bug-1158628_03-tests-simplify-some-var-settings.patch
  + bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_05-activation-add-synchronization-point.patch
  + bug-1158628_06-pvmove-add-missing-synchronization.patch
  + bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  + bug-1158628_08-lv_manip-add-synchronizations.patch
  + bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  + bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  + bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  + bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  + bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  + bug-1158628_14-tests-add-extra-settle.patch
  + bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1043040_test-fix-read-ahead-issues-in-test-scripts.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1575979201">- backport patches for lvm2 to avoid software abnormal work (bsc#1158861)
  + bug-1158861_01-config-remove-filter-typo.patch
  + bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  + bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  + bug-1158861_04-fix-duplicate-pv-size-check.patch
  + bug-1158861_05-hints-fix-copy-of-filter.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  + bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  + bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  + bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1577102400">- LVM Metadata Error: Error writing device at 4096 length 512 (bsc#1150021)
  + bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  + bug-1150021_02-bcache-add-bcache_abort.patch
  + bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  + bug-1150021_04-bcache-add-unit-test.patch
  + bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  + bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
- Update patch, according to bug-1150021_01-scanning-xxx.patch
  + bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch</changelog>
  <changelog author="ghe@suse.com" date="1578571200">- Update lvm.conf file (bsc#1159238)
  - enable issue_discards by default</changelog>
  <changelog author="heming.zhao@suse.com" date="1582804800">- vgreduce --removemissing with cache devices will remove lvs (bsc#1157736)
  + bug-1157736-add-suggestion-message-for-mirror-LVs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1584014400">- fix patch name typo
  - bug-1158628-04-pvmove-correcting-read_ahead-setting.patch
  + bug-1158628_04-pvmove-correcting-read_ahead-setting.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1589371200">- Add missing patch, which mistakenly removed in lvm2 update
  + bug-998893_make_pvscan_service_after_multipathd.patch
- Change lvm2.spec for fixing build error
  + lvm2.spec</changelog>
  <changelog author="heming.zhao@suse.com" date="1590580800">- removing LVM cache with cache volume does not remove the cache volume (bsc#1171907)
  + bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1591963200">- problem with LVM cache (data loss) (bsc#1172566)
  + bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1598011200">- LVM failing to activate hot spare on surprise removal (bsc#1175110)
  + bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
- change lvm2.spec source URL
  - lvm2.spec</changelog>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
</package>
<package pkgid="5218abd69051ae2c76214edb33af0559c0e944a548e13222d30d714c1addcc8d" name="devscripts-debuginfo" arch="i586">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="10a32c94e0b04555485b95878911c90d5b2877a9f5b2f0c26bc22ef2bad87d1c" name="devscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.19.5" rel="lp152.4.3.1"/>
  <changelog author="coolo@suse.com" date="1359979200">- update license to new format</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360584000">- separate checkbashisms package so that rpmlint can
  depend on it without depending on all the other stuff.
  (bnc#802887)</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1360670400">- Make BuildArch: noarch for checkbashisms conditional to
  allow building on SLE 11.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1372507200">- Added a patch (fix_pod_syntax.patch) to fix build with perl 5.18.</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1372680000">- update to 2.12.6 (current stable)
  * see /usr/share/doc/packages/devscripts/changelog for details</changelog>
  <changelog author="Denisart Benjamin &lt;p.drouand@gmail.com&gt;" date="1420372800">- Update to version 2.15.1
  + see  /usr/share/doc/packages/devscripts/changelog for details
- Upstream moved to python3
  + Use python3-{devel,setuptools} instead of python-{devel,setuptools}
  That means compatibility with SLE11 is broken
- Remove now unapplied patches
  + devscripts-pod2man-no-utf8.patch
  + devscripts-old-File-Path.patch
- Adapt devscripts-2.11.7-remove-install-layout-deb.patch to upstream
  changes &gt; devscripts-2.15.1-remove-install-layout-deb.patch
- Remove yet obsolete compatibility stuff
- Remove obsolete patch:
  * fix_pod_syntax.patch</changelog>
  <changelog author="Alexei Sorokin &lt;sor.alexei@meowr.ru&gt;" date="1544875200">- Update to version 2.18.10:
  * See /usr/share/doc/packages/devscripts/changelog
- Rebase and rename devscripts-2.11.7-buildfix.patch to
  devscripts-fix-build.patch.
- Rebase and rename devscripts-2.15.1-remove-install-layout-deb.patch
  to devscripts-fix-python-install-layout.patch.
- Rebase and rename devscripts-2.11.7-debcommit-hg16.patch to
  devscripts-debcommit-hg16.patch (is it still relevant?).
- Kill support for ancient openSUSE and non-SUSE distributions.
- Spec clean-up.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1553774400">- Changed download location for source tarball from Debian package
  pool to salsa.debian.org to avoid download errors in OBS.
  * format must be changed to tar.bz2, because salsa.debian.org
  doesn't support tar.xz.
  * verified identical contents of new and old tarball</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554206400">- Fixed license tag as suggested by licensedigger.</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1567512000">- Update to 2.19.5 bsc#1174163:
  * various fixes in scripts all around:
    + See /usr/share/doc/packages/devscripts/changelog
- Add conflicts on packages with the same binaries</changelog>
</package>
<package pkgid="6f3c407629e2a57007753293e90ffc6669310d9d17c74a11f37d347e94891f96" name="dfu-tool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="832734eb3217e1855a7ffc1945642a8fd6219ea5418358192b18aceb0f2167b5" name="dfu-tool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
</package>
<package pkgid="1a705380be79fefc656872c8595557a45417118fa7e4d4958266e0cd1bb6300b" name="dfu-tool-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Update to version 1.2.14: (jsc#SLE-16809, bsc#1182057)
  * Release fwupd 1.2.14
  * Fix using a very new libxmlb with a very old fwupd daemon
  * uefi-capsule: Specify the section flags for .sbat
  * uefi-capsule: Ensure SBAT metadata is added correctly
  * uefi-capsule: Set the component generation to 1
  * uefi-capsule: Include all the sections when using objcopy
  * Allow building without SBAT metadata
  * uefi-capsule: Fix objcopy failing to add a .sbat section on
    aarch64
  * uefi-capsule: Add SBAT metadata to the fwupd EFI binary
  * uefi: add configuration option for objcopy utility.
  * uefi: Make generate_binary.sh more robust
  * efi: use a wildcard section copy for final EFI generation
  * Fix the DeviceID set by GetDetails
  * synaptics-prometheus: Force the minor version from 0x02 to 0x01
    to make sure the devices can be updated back to 0x01.
  * Validate that gpgme_op_verify_result() returned at least one
    signature (boo#1172643 CVE-2020-10759)
  * trivial: uefi: fix dell TPM updates
  * prevent updates to occur via synaptics-mst plugin
  * upower: Decrease minimum battery requirement to 10%
  * src: fu-engine: check version was updated by checking version
  * Correctly import PKCS-7 remote metadata
  * Disable the battery percentage checks if UPower is unavailable
  * efi: use a wildcard section copy for final EFI generation
  * fu-engine: Read all releases and convert versions when
    comparing
  * Do not do semver conversion in fu_common_vercmp()
  * unifying: use the correct timeout for IO channel writes
  * Only check the vendor ID if the device has one set
  * wacom-raw: Correct HWID support
  * modem-manager: increase re-enumeration delay to 20000ms
  * modem-manager: add counterpart GUID for the DW5821e/eSIM
  * usb: make loading vendor/product/serial strings non-fatal
  * Strip trailing whitespace from USB descriptors
  * udev-device: fix offset of vendor id of hidraw devices
  * thunderbolt-power: avoid checking for bolt support
  * modem-manager: Fix a tiny memory leak when starting the daemon
  * Fix usage of incorrect type for return value
  * fu-common: Use environment variables for systemd managed
    directories
  * Use more systemd directives for directories
- Specify the SBAT metadata (bsc#1182057)
- Drop upstreamed patch: CVE-2020-10759.patch</changelog>
</package>
<package pkgid="3b06fe2ccc7c0783a8807fe8f909b53575b92a54dd7e040fb619a5f3d4b8f900" name="dhcp-client-debuginfo" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="ebe7e26c06a60354b378d6dd059ec219414f17df13e227f59c161f96a22e57f9" name="dhcp-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="f87a49ffefea25ba178f37f571d6027c042091bfa4f1bea3e0b313d338796cc4" name="dhcp-debuginfo" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="71c3007f95b5539bf607c579189841aab7976a1ed65120db9b4dca135a938a4a" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="a5d23a510eab45eaf1fe310d6c48f13e1ee0db0cac02d4a6c3fef62aa2fcd86a" name="dhcp-debugsource" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="be1fb354ba897e3f1681e806ead7c1ed9bc812e692354d642202fde6574b00b6" name="dhcp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="1562f4118198d0357126fc6e1973b289d1a71e18a809aad5f7c9f30915eaf19f" name="dhcp-relay-debuginfo" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="d70acaa60c9dbc22e62373577f2dd98e288f14684f3b70073fb1a6d9cafd9448" name="dhcp-relay-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="9c9b8a9c55669bc8bc13bde10494e9dc517150baf10ccde7c576bb85e664b4dd" name="dhcp-server-debuginfo" arch="i586">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="9c963533c9bd6731aabed9da34b706404e909bb58b703c8f4e88d2d01458bb92" name="dhcp-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.3.5" rel="lp152.8.3.1"/>
  <changelog author="mt@suse.de" date="1442232000">- Update to dhcp-4.3.3 (fate#319067) provinding many bug fixes,
  features and obsoletes several patches we were using before.
  For complete changelog, please read the RELNOTES file shipped
  along with this package or online at:
  https://kb.isc.org/article/AA-01297/82/DHCP-4.3.3-Release-Notes.html
- Replaced hostname patch with a dhcpv6 and fqdn aware variant:
  [- 0006-dhcp-4.2.5-dhclient-send-hostname-rml.patch,
  + 0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch]
- Removed obsolete patches included upstream now:
  [- 0007-dhcp-4.2.6-ldap-mt01.patch,
  - 0009-dhcp-4.2.6-xen-checksum.patch,
  - 0013-dhcp-4.2.3-P1-dhclient-log-pid.patch,
  - 0015-Ignore-SIGPIPE-to-not-die-in-socket-code.patch,
  - 0016-server-log-DHCPv6-addresses-assigned-to-clients.patch,
  - 0019-dhcp-4.2.x-ldap-debug-write.bnc835818.patch,
  - 0021-dhcp-4.2.4-P2-bnc878846-conf-to-ldap.patch,
  - 0022-dhcp-4.2.x-contrib-conf-to-ldap-reorder.886094.patch,
  - 0023-dhcp-4.2.x-ddns-tsig-hmac-sha-support.890731.patch,
  - 0025-dhcp-4.2.x-dhcpv6-retransmission-until-MRD.872609.patch,
  - 0026-dhcp-4.2.x-disable-unused-ddns-port-in-server.891655.patch]
- Adjusted patch numbers in the spec file:
  [- 0008-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  - 0010-dhcp-4.2.2-dhclient-option-checks.patch,
  - 0011-dhcp-4.2.6-close-on-exec.patch,
  - 0012-dhcp-4.2.2-quiet-dhclient.patch,
  - 0014-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  - 0020-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  - 0024-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  + 0007-dhcp-4.1.1-P1-lpf-bind-msg-fix.patch,
  + 0008-dhcp-4.2.2-dhclient-option-checks.patch,
  + 0009-dhcp-4.2.6-close-on-exec.patch,
  + 0010-dhcp-4.2.2-quiet-dhclient.patch,
  + 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  + 0012-dhcp-4.2.x-chown-server-leases.bnc868253.patch,
  + 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch]
- Fixed to not pass DHCPv6 address lifetimes a positive (unsigned
  32bit) integers to scripts and properly format timestamps as long
  to not break them on 64bit architectures (bsc#926159).
  [+ 0014-dhclient6-unsigned-lifetimes-for-script-bsc-926159.patch]
- dhclient: expose next-server DHCPv4 option to script (bsc#928390)
  [+ 0015-Expose-next-server-DHCPv4-option-to-dhclient-script.patch]
- Replaced infiniband support patch with fixed variant (bsc#910984):
  [- 0017-dhcp-4.2.6-lpf-ip-over-ib-support.patch,
  - 0018-dhcp-4.2.6-improved-xid.patch,
  - 0027-dhcp-4.2.x-handle-ifa_addr-NULL.909189.patch,
  + 0016-infiniband-support.patch]
- Moved dhcp-devel package include files and static libraries
  to /usr/include/dhcp and /usr/lib/dhcp subdirectories.
  DHCP requires a specific bind library version and conflicts
  with the files shipped by bind-devel package, which is not
  source and binary compatible (bsc#910686).
- Corrected changes to provide complete patch file references.
- Fixed server to not report success before send (bsc#919959)
  [+ 0017-server-no-success-report-before-send.919959.patch]
- Fixed dhclient to check pre-init results reported by dhclient-script
  and fail if pre-init fails for a requested interface (bsc#912098).
  [+ 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mt@suse.de" date="1444737600">- Applied a patch by Jiri Popelka catching dhcp server aborts with
  "Unable to set up timer: out of range" on very long or infinite
  timer intervals / lease lifetimes (bsc#947780)
  [+ 0019-dhcp-4.2.4-P1-interval.patch]
- Corrected patch references in and a missed (bsc#919959) patch
  description in previous changelog entry.</changelog>
  <changelog author="ndas@suse.de" date="1453809600">- Update to dhcp-4.3.3-P1 correcting bounds checking when
  receiving a packet (bsc#961305,CVE-2015-8605,ISC-Bugs#41267).
- adjusted interval check.
  [*0019-dhcp-4.2.4-P1-interval.patch]
- Fixed improper lease duration checking. Also added fixes for integer
  overflows in the date and time handling code(bsc#936923, bsc#880984).
  [+0020-dhcp-4.x.x-fixed-improper-lease-duration-checking.patch]
- fixed service files to start dhcpd after slapd (bsc#956159)
- dhclient-script: complain in the log about conflicts, added
  a see log messages to the dhclient log message (bsc#960506)
  [* 0018-client-fail-on-script-pre-init-error-bsc-912098.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
</package>
<package pkgid="d374fffec3f25e08e1de028281a82cdf2c7e6e320a08d7956070dc2deb02b216" name="diffutils-debuginfo" arch="i586">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="dc3b5de90976f523dd435cf099c42bc644b54a93251aed93bcf5f17338f32c16" name="diffutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="3aabdb252db47707ad474398e52b3e87d8bf47ae7081336977695636fc34ac1b" name="diffutils-debugsource" arch="i586">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="7f90127d045d42144299075136f94d71bf4f2559536f68ced3076cb850d311db" name="diffutils-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6" rel="lp152.5.3.1"/>
  <changelog author="meissner@suse.com" date="1420286400">- build with PIE</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Make building more verbose
- Move info page removal to preun
- Cleanup spec file with spec-cleaner
- Update provides/obsoletes</changelog>
  <changelog author="mpluskal@suse.com" date="1470744000">- Update to version 3.4
  * diff accepts two new options --color and --palette to generate
    and configure colored output.  --color takes an optional
    argument specifying when to colorize a line: --color=always,
  - -color=auto, --color=never.  --palette is used to configure
    which colors are used.
  * many bugfixes
- New -lang subpackage
- Drop no longer needed gnulib-perl522.patch</changelog>
  <changelog author="astieger@suse.com" date="1471867200">- Diffutils 3.5:
  * diff3 no longer malfunctions due to use-after-free
    [bug introduced in 3.4]
  * diff --color no longer colorizes when TERM=dumb</changelog>
  <changelog author="schwab@suse.de" date="1477483200">- gnulib-diffseq.patch, big-file-performance.patch: Avoid performance
  regression on big files (bsc#1004991)</changelog>
  <changelog author="mliska@suse.cz" date="1487764800">- Update to a pre-release version (3.5.15):
  * remove big-file-performance.patch and gnulib-diffseq.patch
  * comment signature source as the release is not officially signed yet</changelog>
  <changelog author="mpluskal@suse.com" date="1495454400">- Update to version 3.6:
  * When one file is a prefix of the other, cmp now appends the
    shorter file's size to the EOF diagnostic.
  * diff's default algorithm has been tweaked to deal better with
    larger files, reversing some of the changes made in
    diffutils-3.4.
- Define packager and bug reporting url</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1593604800">- Add ppc64_disable_failing_test to  disable a sporadically failing
  test for ppc64 and ppc64le builds (boo#1156913)</changelog>
</package>
<package pkgid="005c120d971a5f14990897414200facd0164ce0c62ff8256423861aec6d64295" name="dlm-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="2e7107a7c0b2f353144bcd4d374e42e39397403177b15a1296081f2338985e5e" name="dlm-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="c97d3483a2d4cf3f61b1c09893388ff85ff6fa79a2ace03fde01779abe04ad46" name="dlm-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="5781dcbdbb96bcf25fbb20928638e3ca37d042fc4bae9793912fdde549a1e629" name="dlm-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="206b681ad1321ccbba08301c5cd796ab07e633a84ba1614213d54438cc87f870" name="dmidecode-debuginfo" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="23965dd588989a30a2cbd7588b1c3ffcaf9aae64d320157370b0247b89204ee2" name="dmidecode-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="b58f12af2beab239ce1a8e8b8fa2065e395f6bdcfa2982dc0eb0bf7b97ced98b" name="dmidecode-debuginfo" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="29805978414a24cf576f208945f2f61940b3ea6a9ff59c2ce806f159cdcd8fb0" name="dmidecode-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="47e33f5c1e115e8c26701cef7ed6106d4537bfb3e62751bda0f0ece52083981d" name="dmidecode-debugsource" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="28439b8a260b3a50859cd2883b8e171420ed9bc6f3e64a3fdb3b52867a7ff8b9" name="dmidecode-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.3.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
</package>
<package pkgid="4f0068a51e04837589e7d5aa8c7efa397b69da7b63755276499b4099030aa01a" name="dmidecode-debugsource" arch="i586">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="a9b336b77194df7ebd421c933619aa3c75734f882802ddd8c261193b2c1dace7" name="dmidecode-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2" rel="lp152.6.6.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.de&gt;" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
</package>
<package pkgid="a74c149b049d50cf57d79176190217071f6b7e9769761c23ce3d70f2405fa6ec" name="dnsmasq-debuginfo" arch="i586">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="3195a3f905e74e870c448f9f64435a7e19ccc39c20238cfbd2e4579af29977b4" name="dnsmasq-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="2cb283267c32d65fd8f2e6e082a13c325b2fae66ff2ed1a359f1c36b036f4e9c" name="dnsmasq-debugsource" arch="i586">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="64416555a5f1f58116550628344105ca9abe40b949cdccbaf75810e819ecab2e" name="dnsmasq-debugsource" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="12007df2ab23668b2c6f6bc4ef11e62dc61e8049307c7f22a6eef676e4034d80" name="dnsmasq-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="0212f02b514f618be46a08d10783a1bcd67f8d71b06432fba6ced1a718161cd1" name="dnsmasq-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.78" rel="lp152.7.3.1"/>
  <changelog author="jslaby@suse.com" date="1420545600">- The change from Wed Dec 24 messed group w/ user IDs. Switch them
  back and be more careful w/ what is changed.</changelog>
  <changelog author="abergmann@suse.com" date="1429531200">- Move trust-anchors.conf into /etc/dnsmasq.d to be AppArmor conform.
  (bnc#908137)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1434542400">- dnsmasq.service: Order Before=nss-lookup.target  and
  Wants=nss-lookup.target as this service may provide
  name resolution even for the localhost.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1439294400">- Update to 2.75, announce message:
    Fix reversion on 2.74 which caused 100% CPU use when a
    dhcp-script is configured. Thanks to Adrian Davey for
    reporting the bug and testing the fix.
- Update to 2.74, announce message:
    Fix reversion in 2.73 where --conf-file would attempt to
    read the default file, rather than no file.
    Fix inotify code to handle dangling symlinks better and
    not SEGV in some circumstances.
    DNSSEC fix. In the case of a signed CNAME generated by a
    wildcard which pointed to an unsigned domain, the wrong
    status would be logged, and some necessary checks omitted.
- Update to 2.73, announce message:
    Fix crash at startup when an empty suffix is supplied to
  - -conf-dir, also trivial memory leak. Thanks to
    Tomas Hozza for spotting this.
    Remove floor of 4096 on advertised EDNS0 packet size when
    DNSSEC in use, the original rationale for this has long gone.
    Thanks to Anders Kaseorg for spotting this.
    Use inotify for checking on updates to /etc/resolv.conf and
    friends under Linux. This fixes race conditions when the files are
    updated rapidly and saves CPU by noy polling. To build
    a binary that runs on old Linux kernels without inotify,
    use make COPTS=-DNO_INOTIFY
    Fix breakage of --domain=&lt;domain&gt;,&lt;subnet&gt;,local - only reverse
    queries were intercepted. THis appears to have been broken
    since 2.69. Thanks to Josh Stone for finding the bug.
    Eliminate IPv6 privacy addresses and deprecated addresses from
    the answers given by --interface-name. Note that reverse queries
    (ie looking for names, given addresses) are not affected.
    Thanks to Michael Gorbach for the suggestion.
    Fix crash in DNSSEC code with long RRs. Thanks to Marco Davids
    for the bug report.
    Add --ignore-address option. Ignore replies to A-record
    queries which include the specified address. No error is
    generated, dnsmasq simply continues to listen for another
    reply. This is useful to defeat blocking strategies which
    rely on quickly supplying a forged answer to a DNS
    request for certain domains, before the correct answer can
    arrive. Thanks to Glen Huang for the patch.
    Revisit the part of DNSSEC validation which determines if an
    unsigned answer is legit, or is in some part of the DNS
    tree which should be signed. Dnsmasq now works from the
    DNS root downward looking for the limit of signed
    delegations, rather than working bottom up. This is
    both more correct, and less likely to trip over broken
    nameservers in the unsigned parts of the DNS tree
    which don't respond well to DNSSEC queries.
    Add --log-queries=extra option, which makes logs easier
    to search automatically.
    Add --min-cache-ttl option. I've resisted this for a long
    time, on the grounds that disbelieving TTLs is never a
    good idea, but I've been persuaded that there are
    sometimes reasons to do it. (Step forward, GFW).
    To avoid misuse, there's a hard limit on the TTL
    floor of one hour. Thansk to RinSatsuki for the patch.
    Cope with multiple interfaces with the same link-local
    address. (IPv6 addresses are scoped, so this is allowed.)
    Thanks to Cory Benfield for help with this.
    Add --dhcp-hostsdir. This allows addition of new host
    configurations to a running dnsmasq instance much more
    cheaply than having dnsmasq re-read all its existing
    configuration each time.
    Don't reply to DHCPv6 SOLICIT messages if we're not
    configured to do stateful DHCPv6. Thanks to Win King Wan
    for the patch.
    Fix broken DNSSEC validation of ECDSA signatures.
    Add --dnssec-timestamp option, which provides an automatic
    way to detect when the system time becomes valid after
    boot on systems without an RTC, whilst allowing DNS
    queries before the clock is valid so that NTP can run.
    Thanks to Kevin Darbyshire-Bryant for developing this idea.
    Add --tftp-no-fail option. Thanks to Stefan Tomanek for
    the patch.
    Fix crash caused by looking up servers.bind, CHAOS text
    record, when more than about five --servers= lines are
    in the dnsmasq config. This causes memory corruption
    which causes a crash later. Thanks to Matt Coddington for
    sterling work chasing this down.
    Fix crash on receipt of certain malformed DNS requests.
    Thanks to Nick Sampanis for spotting the problem.
    Note that this is could allow the dnsmasq process's
    memory to be read by an attacker under certain
    circumstances, so it has a CVE, CVE-2015-3294
    Fix crash in authoritative DNS code, if a .arpa zone
    is declared as authoritative, and then a PTR query which
    is not to be treated as authoritative arrived. Normally,
    directly declaring .arpa zone as authoritative is not
    done, so this crash wouldn't be seen. Instead the
    relevant .arpa zone should be specified as a subnet
    in the auth-zone declaration. Thanks to Johnny S. Lee
    for the bugreport and initial patch.
    Fix authoritative DNS code to correctly reply to NS
    and SOA queries for .arpa zones for which we are
    declared authoritative by means of a subnet in auth-zone.
    Previously we provided correct answers to PTR queries
    in such zones (including NS and SOA) but not direct
    NS and SOA queries. Thanks to Johnny S. Lee for
    pointing out the problem.
    Fix logging of DHCPREPLY which should be suppressed
    by quiet-dhcp6. Thanks to J. Pablo Abonia for
    spotting the problem.
    Try and handle net connections with broken fragmentation
    that lose large UDP packets. If a server times out,
    reduce the maximum UDP packet size field in the EDNS0
    header to 1280 bytes. If it then answers, make that
    change permanent.
    Check IPv4-mapped IPv6 addresses when --stop-rebind
    is active. Thanks to Jordan Milne for spotting this.
    Allow DHCPv4 options T1 and T2 to be set using --dhcp-option.
    Thanks to Kevin Benton for patches and work on this.
    Fix code for DHCPCONFIRM DHCPv6 messages to confirm addresses
    in the correct subnet, even of not in dynamic address
    allocation range. Thanks to Steve Hirsch for spotting
    the problem.
    Add AddDhcpLease and DeleteDhcpLease DBus methods. Thanks
    to Nicolas Cavallari for the patch.
    Allow configuration of router advertisements without the
    "on-link" bit set. Thanks to Neil Jerram for the patch.
    Extend --bridge-interface to DHCPv6 and router
    advertisements. Thanks to Neil Jerram for the patch.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1440417600">- spec file cleanup, get rid of redifinition warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1454414400">- Add gpg signature</changelog>
  <changelog author="max@suse.com" date="1466078400">- dnsmasq-groups.patch: Initialize the supplementary groups of the
  dnsmasq user (bsc#859298).</changelog>
  <changelog author="max@suse.com" date="1470225600">- Update to 2.76:
  * Include 0.0.0.0/8 in DNS rebind checks.
  * Enhance --add-subnet to allow arbitrary subnet addresses.
  * Respect the --no-resolv flag in inotify code. Fixes bug
    which caused dnsmasq to fail to start if a resolv-file
    was a dangling symbolic link, even of --no-resolv set.
  * Fix crash when an A or AAAA record is defined locally,
    in a hosts file, and an upstream server sends a reply
    that the same name is empty (CVE-2015-8899, bsc#983273).
  * Fix failure to correctly calculate cache-size when reading a
    hosts-file fails.
  * Fix wrong answer to simple name query when --domain-needed
    set, but no upstream servers configured.
  * Return REFUSED when running out of forwarding table slots,
    not SERVFAIL.
  * Add --max-port configuration.
  * Add --script-arp and two new functions for the dhcp-script.
  * Extend --add-mac to allow a new encoding of the MAC address
    as base64, by configurting --add-mac=base64
  * Add --add-cpe-id option.
  * Don't crash with divide-by-zero if an IPv6 dhcp-range is
    declared as a whole /64.
    (ie xx::0 to xx::ffff:ffff:ffff:ffff)
  * Add support for a TTL parameter in --host-record and --cname.
  * Add --dhcp-ttl option.
  * Add --tftp-mtu option.
  * Check return-code of inet_pton() when parsing dhcp-option.
  * Fix wrong value for EDNS UDP packet size when using
  - -servers-file to define upstream DNS servers.
  * Add dhcp_release6 to contrib/lease-tools.</changelog>
  <changelog author="martin.wilck@suse.com" date="1483531200">- Handle binding upstream servers to an interface if interface
  is destroyed and recreated (boo#1018160)
  Added two patches from upstream:
  * added Handle-binding-upstream-servers-to-an-interface.patch
  * added Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch</changelog>
  <changelog author="dmueller@suse.com" date="1503057600">- reload system dbus to pick up policy change on install (bsc#1054429)</changelog>
  <changelog author="tchvatal@suse.com" date="1505217600">- Fix /srv/tftpboot permissions wrt bsc#940608</changelog>
  <changelog author="max@suse.com" date="1506945600">- Security update to version 2.78:
  * bsc#1060354, CVE-2017-14491: 2 byte heap based overflow.
  * bsc#1060355, CVE-2017-14492: heap based overflow.
  * bsc#1060360, CVE-2017-14493: stack based overflow.
  * bsc#1060361, CVE-2017-14494: DHCP - info leak.
  * bsc#1060362, CVE-2017-14495: DNS - OOM DoS.
  * bsc#1060364, CVE-2017-14496: DNS - DoS Integer underflow.
  * Fix DHCP relaying, broken in 2.76 and 2.77.
  * For other changes, see
    http://www.thekelleys.org.uk/dnsmasq/CHANGELOG
- Obsoleted patches:
  * Fix-crash-introduced-in-2675f2061525bc954be14988d643.patch
  * Handle-binding-upstream-servers-to-an-interface.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Get rid of python dependency due to examples. (fate#323526)</changelog>
  <changelog author="idonmez@suse.com" date="1512388800">- Update keyring</changelog>
  <changelog author="kukuk@suse.de" date="1531742400">- Don't require systemd explicit, fix spec file to handle both
  cases correct. In containers we don't have systemd.
- Adjust pre/post install for transactional updates.
- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="dmueller@suse.com" date="1535544000">- add missing prereq on the group to be created (bsc#1106446)</changelog>
  <changelog author="cgoll@suse.com" date="1539950400">- enabled lua scripting interface (FATE#327143).</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1573646400">- bsc#1154849, CVE-2019-14834, dnsmasq-CVE-2019-14834.patch:
  memory leak in the create_helper() function in /src/helper.c
- bsc#1156543: include linux/sockios.h to get SIOCGSTAMP
  (dnsmasq-siocgstamp.patch).
- bsc#1138743: remove cache size limit (dnsmasq-cache-size.patch).
- bsc#1152539: include config files from /etc/dnsmasq.d/*.conf .
- bsc#1076958, CVE-2017-15107, dnsmasq-CVE-2017-15107.patch:
  A vulnerability in DNSSEC implementation of Dnsmasq was found.
  Processing of wildcard synthesized NSEC records may result in
  improper validation for non-existance in some implementations of
  DNSSEC. While synthesis of NSEC records is allowed by RFC4592,
  the synthesized owner names should not be used in the NSEC
  processing.
- Package contrib/lease-tools/dhcp_release6.</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1608292800">- Retry query to other servers on receipt of SERVFAIL rcode
  (bsc#1176076, dnsmasq-servfail.patch)</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1610625600">- bsc#1177077: Fixed DNSpooq vulnerabilities (dnsmasq-dnspooq.patch)
- CVE-2020-25684, CVE-2020-25685, CVE-2020-25686:
  Fixed multiple Cache Poisoning attacks.
- CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687:
  Fixed multiple potential Heap-based overflows when DNSSEC is
  enabled.</changelog>
</package>
<package pkgid="e82fd796da5a7343ebf47d4085c1d1873e1eaf3a58e43ffa7d813f08a10fafa9" name="docker-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="563a6b817954f84c2564197d1177c923b95e60e3aa42ed2458e0083c2f1497b3" name="docker-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="516603e8b54228d737270ef803b7d114df066278f0e8745cbd0f77f9531854f0" name="docker-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="69901d6280c9a43c45b70eee400e08598e5c08977620881ffb4162a01ccd882a" name="docker-libnetwork-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2908_55e924b8a842" rel="lp152.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1518091200">- Add Provides for equivalent non-kubic packages</changelog>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to libnetwork 026aabaa6598, which is required for Docker 19.03.12-ce.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="0620e2387ec6f01730a1d8dcc6214393ae76b26d10284d0516cbaeaf27217e35" name="docker-libnetwork-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.0.1+gitr2908_55e924b8a842" rel="lp152.2.6.1"/>
  <changelog author="rbrown@suse.com" date="1518436800">- Add ${version} to equivalent non-kubic package provides</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Switch to Go 1.10 for build.
- Upgrade to version 3ac297bc7fd0afec9051bbb47024c9bc1d75bf5b which is requried
  by the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
  * Use fmt precision to limit string length
  * Fix error handling about bridgeSetup
  * ipam: Test rejection of overlapping pool requests
  * ipam, types: Expand documentation
  * CircleCI use latest image
  * Optimize networkDB queue
  * Enhance testing infra
  * Allows to set generic knobs on the Sandbox</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1543492800">- Update to version git.6da50d1978302f04c3e2089e29112ea24812f05b which is
  required for Docker v18.09.0-ce.
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support
  * Move SSD image to docker
  * Give LB sandboxes predictable names
  * Fix handling of the resolv.conf
  * Create internal directory</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to version git.2cfbf9b1f98162a55829a21cc603c76072a75382 which is
  required for Docker v18.09.1-ce bsc#1124308:
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing
  * Add getter function for Default Address Pools
  * Global Default Address Pool support</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to version git.4725f2163fb214a6312f3beae5991f838ec36326 which is
  required for Docker v18.09.5-ce: bsc#1128376 boo#1134068
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState
  * vndr runc 96ec217
  * Update golint tool
  * debian has iptables-legacy and iptables-nft now
  * Make DSR an overlay-specific driver "option"
  * Set east-west load balancing to use direct routing</changelog>
  <changelog author="asarai@suse.com" date="1557144000">- Update to version git.872f0a83c98add6cae255c8859e29532febc0039 which is
  required for Docker v18.09.6-ce.
  * Pick a random host port if the user does not specify a host port.
  * Cleanup the cluster provider when the agent is closed
  * Adding error log if peerAdd fails
  * Adding synchronization to endpoint addition/deletion to prevent network connectivity issue
  * Revert "Merge pull request #2286 from thaJeztah/18.09_backport_iptables_legacy"
  * Bump Go to 1.10.7
  * Fix possible nil pointer exception
  * Fix gosimple
  * account for removal of configs.HookState</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to version git.e7933d41e7b206756115aa9df5e0599fc5169742, which is
  required for Docker v18.09.7-ce. bsc#1139649</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1563796800">- Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is
  required for Docker v19.03.0-ce. bsc#1142413</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to libnetwork 45c710223c5f, which is required for Docker 19.03.3-ce.
  bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1572004800">- Update to libnetwork 3eb39382bfa6, which is required for Docker 19.03.4-ce.
  bsc#1158590</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to libnetwork 153d0769a118, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to libnetwork 026aabaa6598, which is required for Docker 19.03.12-ce.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add patch which makes libnetwork compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to libnetwork 55e924b8a842, which is required for Docker 19.03.14-ce.
  bsc#1180243</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="731bf7308b8c62938e8734f30da5404d08df3f5896354421229c4d63437001b7" name="docker-runc-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.0rc10+gitr3981_dc9208a3303f" rel="lp152.2.3.1"/>
  <changelog author="dcassany@suse.com" date="1528200000">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1528372800">- Backport of https://github.com/opencontainers/runc/pull/1698 to help fix
  bsc#1094680, which is caused by the race described in the upstream issue.
  * bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch</changelog>
  <changelog author="asarai@suse.com" date="1532520000">- Upgrade to docker-runc 69663f0bd4b60df09991c08812a60108003fa340 which is
  required for the Docker v18.06.0-ce upgrade. bsc#1102522 bsc#1113313
- Switch to Go 1.10 for building.
- Removed the following patches because they were merged upstream in the
  meantime:
  - bsc1094680-0001-Avoid-race-when-opening-exec-fifo.patch
  - bsc1053532-0001-makefile-drop-usage-of-install.patch</changelog>
  <changelog author="asarai@suse.com" date="1533124800">- Enable seccomp support on SLE12, since libseccomp is now a new enough vintage
  to work with Docker and containerd. fate#325877</changelog>
  <changelog author="asarai@suse.com" date="1534420800">- Merge -kubic packages back into the main Virtualization:containers packages.
  This is done using _multibuild to add a "kubic" flavour, which is then used
  to conditionally compile patches and other kubic-specific features.
  bsc#1105000</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Update go requirements to &gt;= go1.10 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1547208000">- Disable leap based builds for kubic flavor. bsc#1121412</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549368000">- Update to runc 96ec2177ae84, which is required for Docker v18.09.1-ce.
  bsc#1124308
  This contains changes for rc6:
  * https://github.com/opencontainers/runc/releases
  Plus additional changes:
  * may kill other process when container has been stopped
  (https://github.com/opencontainers/runc/commit/87a188996e229bf382c27865584765d1a50c021)
  * kill: allow to signal paused containers:
  (https://github.com/opencontainers/runc/commit/07d1ad44c83c4274f01e2db18776f31b4dd8e13c)
  * Modify check-config.sh in accordance with Moby Project updates
  (https://github.com/opencontainers/runc/commit/30817421efbc761c0adcb1d67b8ef84ae32171be)
  * cr: get pid from criu notify when restore
  (https://github.com/opencontainers/runc/commit/dce70cdff53f576e1334de2a545326599ec824a6)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1549454400">- Add fix for CVE-2019-5736 (effectively copying /proc/self/exe during re-exec
  to avoid write attacks to the host runc binary). bsc#1121967
  + CVE-2019-5736.patch
- Add docker-runc-rpmlintrc for docker-runc-test.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1553256000">- Update to runc 6635b4f0c6af, which is required for Docker v18.09.3-ce.
- Remove patches that were merged upstream:
  * CVE-2019-5736.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556107200">- Backport various upstream patches to fix some kernel regression related to
  O_TMPFILE. bsc#1131314 bsc#1131553
  * bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1556884800">- Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce.
  bsc#1128376 boo#1134068
- Remove patches which were merged upstream:
  - bsc1131553-0001-nsenter-cloned_binary-various-cleanups.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1561723200">- Update to runc 425e105d5a03, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove docker-runc-test (it's not useful for actual testing).</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569499200">- Add backported fix for CVE-2019-16884. bsc#1152308
  + CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Update to runc 3e425f80a8c9, which is required for Docker 19.03.3-ce.
  bsc#1153367
- Rebase CVE-2019-16884 fix (3e425f80a8c9 doesn't contain the entire fix).
  bsc#1152308
  - CVE-2019-16884.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579003200">- Add backported fix for CVE-2019-19921. bsc#1160452
  + CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1579262400">- Update CVE-2019-19921 patch to match upstream PR.
  * CVE-2019-19921.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to runc v1.0.0-rc10, which is required for Docker 19.03.11-ce.
  bsc#1172377
- Remove upstreamed patches:
  - CVE-2019-16884.patch
  - CVE-2019-19921.patch
- Synchronise patches with 'runc' package:
  + bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  * bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Switch to Go 1.13 for build.</changelog>
</package>
<package pkgid="8e162578625ea302e2c1c4634f96e318b93fc40025f3f9669410bedf5c0046dc" name="docker-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.3.1"/>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1564488000">- Fix default installation such that --userns-remap=default works properly
  (this appears to be an upstream regression, where --userns-remap=default
  doesn't auto-create the group and results in an error on-start). boo#1143349</changelog>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
</package>
<package pkgid="590314e7e655e9eaa762a63a38d58d4b9314816e7ae8eb60d3f5f16cb28515d1" name="docker-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.6.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1613217600">- disable firewalld patch unconditionally. (official fix will come)
  (bsc#1182168)</changelog>
</package>
<package pkgid="abcdbfce88f293f31b51cc00f229ef59d222f8e37d037633c27af7564c65f5f1" name="docker-test-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.03.15_ce" rel="lp152.2.9.1"/>
  <changelog author="Chris Coutinho &lt;chrisbcoutinho@gmail.com&gt;" date="1569153600">- Fix zsh-completion (docker -&gt; _docker)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1569931200">- Update to Docker 19.03.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1150397</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1570536000">- Drop containerd.service workaround (we've released enough versions without
  containerd.service -- there's no need to support package upgrades that old).
- Update to Docker 19.03.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1153367</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1571486400">- Update to Docker 19.03.4-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1574078400">- Update to Docker 19.03.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1158590 bsc#1157330</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576065600">- Support older SLE systems which don't have "usermod -w -v".</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1576152000">- Add backport of https://github.com/docker/docker/pull/39121. bsc#1122469
  + bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1591099200">- Update to Docker 19.03.11-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1172377 CVE-2020-13401
- Backport https://github.com/gotestyourself/gotest.tools/pull/169 so that we
  can build Docker with Go 1.14 (upstream uses Go 1.13).
  + bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1593086400">- Update to Docker 19.03.12-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md.
- Use Go 1.13 instead of Go 1.14 because Go 1.14 can cause all sorts of
  spurrious errors due to Go returning -EINTR from I/O syscalls much more often
  (due to Go 1.14's pre-emptive goroutine support).
  - bsc1172377-0001-unexport-testcase.Cleanup-to-fix-Go-1.14.patch
- Add BuildRequires for all -git dependencies so that we catch missing
  dependencies much more quickly.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1593518400">- Emergency fix: %requires_eq does not work with provide symbols,
  only effective package names. Convert back to regular Requires.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1596456000">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1600430400">- Update to Docker 19.03.13-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1176708</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@suse.com&gt;" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="Robert Munteanu &lt;rombert@apache.org&gt;" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="Aleksa Sarai &lt;asarai@suse.com&gt;" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
</package>
<package pkgid="b6024af296390b1aebdf10974986fcd61161300d89794f6955bbf86b826fc8f0" name="dovecot23-backend-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="2bf189512cead2b12771adede2470d3e3ec9a52cc8e6b8425de559ca737ba00c" name="dovecot23-backend-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="f2e008f49242bc54489af3808111f5fc361034de04e5681894a69da5490f0704" name="dovecot23-backend-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="bf494b4ca7e119429dc76109aafbcd82052c7ff32dc7c31811abd961910e33a5" name="dovecot23-backend-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="2196673f419cfec2858de21f401a049a863d3376cfdb0b787a7f6cbd8f620282" name="dovecot23-backend-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="1374a591906db1456c0c6402d64227cffa2edb5393b64b2876c8d070d475bc95" name="dovecot23-backend-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="ed2ad735c84f8b7a4c98d53384edbfc4b0b1a897461bf19f74af869f624c5651" name="dovecot23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="eb7290ef483daeba001a6f0fb1872594ab593107973a0acb12bb8a9ded018939" name="dovecot23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="7de40390952ddd34da01f0cdb3d2eba4106843ab7e7b983485125815e40ffff8" name="dovecot23-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="a4ce494372194a395f872b1e671106a8d6131d5ae55250bfd1135bfc0c960568" name="dovecot23-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="63621b730b38f382dfb1e6aab765fd664ed5f0a1bed11c5160b458904a377a65" name="dovecot23-fts-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="514e96a1b8a9be6739d3995c8d8a25499cde09bc5382c55640c939d397762c24" name="dovecot23-fts-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="95507921771344eb8315f79c95e7fce175a8f64403697509543d5ca0b2efd842" name="dovecot23-fts-lucene-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="17ce6970d8e2acdebe2848423c78b45999599b61625bc0c7eb67a3fa8b9f8bfa" name="dovecot23-fts-lucene-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="5d8b1215fd609ee4eb21da58f8d02cb17fdb8a15ba0f70ca8dcd591ccfb741da" name="dovecot23-fts-solr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="8f5c867b056d58b168be07be9c2a5367839e5de9427511f92c772789606286ee" name="dovecot23-fts-solr-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="9f4c0d098a8d0f25fea9ce3eacbd803e0d30e05f736da81d70957be76693f427" name="dovecot23-fts-squat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.10" rel="lp152.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- pull backport patch dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520337601">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
</package>
<package pkgid="b0f3a5446659a6d1fc7b9e73118d65e02cb2625747256029a3def2994e708cca" name="dovecot23-fts-squat-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.11.3" rel="lp152.2.6.1"/>
  <changelog author="mrueckert@suse.de" date="1520337600">- update pigeonhole to 0.5.0.1
  - imap4flags extension: Fix binary corruption occurring when
    setflag/addflag/removeflag flag-list is a variable.
  - sieve-extprograms plugin: Fix segfault occurring when used in
    IMAPSieve context.
- drop 321a39be974deb2e7eff7b2a509a3ee6ff2e5ae1.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1520424000">- update license to SPDX-3</changelog>
  <changelog author="mrueckert@suse.de" date="1520424001">- added 23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520942400">- Fix License tag.</changelog>
  <changelog author="mrueckert@suse.de" date="1522152000">- update to 2.3.1
  * Submission server support improvements and bug fixes
  - Lots of bug fixes to submission server
  * API CHANGE: array_idx_modifiable will no longer allocate space
  - Particularly affects how you should check MODULE_CONTEXT
    result, or use REQUIRE_MODULE_CONTEXT.
  + mail_attachment_detection_options setting controls when
    $HasAttachment and $HasNoAttachment keywords are set for mails.
  + imap: Support fetching body snippets using FETCH (SNIPPET) or
    (SNIPPET (LAZY=FUZZY))
  + fs-compress: Automatically detect whether input is compressed
    or not.  Prefix the compression algorithm with "maybe-" to
    enable the detection, for example: "compress:maybe-gz:6:..."
  + Added settings to change dovecot.index* files' optimization
    behavior.  See https://wiki2.dovecot.org/IndexFiles#Settings
  + Auth cache can now utilize auth workers to do password hash
    verification by setting
    auth_cache_verify_password_with_worker=yes.
  + Added charset_alias plugin. See
    https://wiki2.dovecot.org/Plugins/CharsetAlias
  + imap_logout_format and pop3_logout_format settings now support
    all of the generic variables (e.g. %{rip}, %{session}, etc.)
  + Added auth_policy_check_before_auth,
    auth_policy_check_after_auth and auth_policy_report_after_auth
    settings.
  + master: Support HAProxy PP2_TYPE_SSL command and set "secured"
    variable appropriately
  - Invalid UCS4 escape in HTML can cause crashes
  - imap: IMAP COMPRESS -enabled client crashes on disconnect
  - lmtp: Fix crash when user is over quota
  - lib-lda: Parsing Return-Path header address fails when it
    contains CFWS
  - auth: SASL with Exim fails for AUTH commands without an initial
    response
  - imap: SPECIAL-USE capability isn't automatically added
  - auth: LDAP subqueries do not support standard auth variables in
    var-expand
  - auth: SHA256-CRYPT and SHA512-CRYPT schemes do not work
  - lib-index: mail_always/never_cache_fields are not used for
    existing cache files
  - imap: Fetching headers leaks memory if search doesn't find any
    mails
  - lmtp: ORCPT support in RCPT TO
  - imap-login: Process sometimes ends up in infinite loop
  - sdbox: Rolled back save/copy transaction doesn't delete temp
    files
  - mail: lock_method=dotlock causes crashes
- drop patches which are included in the update
  23da0fa1b30cc11bcc1d467674a0950c527e9ff1.patch
  dovecot-2.3.0.1-over-quota-lmtp-crash.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1522238400">- update pigeonhole to 0.5.1
  - Explicitly disallow UTF-8 in localpart in addresses parsed from
    Sieve script.
  - editheader extension: Corrected the stream position
    calculations performed while making the modified message
    available as a stream.  Pigeonhole Sieve crashed in LMTP with
    an assertion panic when the Sieve editheader extension was used
    before the message was redirected.  Experiments indicate that
    the problem occurred only with LMTP and that LDA is not
    affected.
  - fileinto extension: Fix assert panic occurring when fileinto is
    used without being listed in the require line, while the copy
    extension is listed there. This is a very old bug.
  - imapsieve plugin: Do not assert crash or log an error for
    messages that disappear concurrently while applying Sieve
    scripts. This event is now logged as a debug message.
  - Sieve extprograms plugin: Large output from "execute" command
    crashed delivery. Fixed buffering issue in code that handles
    output from the external program.</changelog>
  <changelog author="varkoly@suse.com" date="1523361600">- bnc#1088911 - dovecot23 can not build ond s390
  add: 35497604d80090a02619024aeec069b32568e4b4.diff
  add: 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signatures provided upstream
- Added dovecot23.keyring, which contains the keys from the upstream projects</changelog>
  <changelog author="mrueckert@suse.de" date="1527422400">- added 847790d5aab84df38256a6f9b4849af0eb408419.patch:
  Fix crash for over quota users</changelog>
  <changelog author="mrueckert@suse.de" date="1530360000">- update to 2.3.2
  * old-stats plugin: Don't temporarily enable PR_SET_DUMPABLE
    while opening /proc/self/io. This may still cause security
    problems if the process is ptrace()d at the same time.
    Instead, open it while still running as root.
  + doveadm: Added mailbox cache decision&amp;remove commands. See
    doveadm-mailbox(1) man page for details.
  + doveadm: Added rebuild attachments command for rebuilding
    $HasAttachment or $HasNoAttachment flags for matching mails.
    See doveadm-rebuild(1) man page for details.
  + cassandra: Use fallback_consistency on more types of errors
  + lmtp proxy: Support outgoing SSL/TLS connections
  + lmtp: Add lmtp_rawlog_dir and lmtp_proxy_rawlog_dir settings.
  + submission: Add support for rawlog_dir
  + submission: Add submission_client_workarounds setting.
  + lua auth: Add password_verify() function and additional fields
    in auth request.
  - doveadm-server: TCP connections are hanging when there is a lot
    of network output. This especially caused hangs in
    dsync-replication.
  - Using multiple type=shared mdbox namespaces crashed
  - mail_fsync setting was ignored. It was always set to
    "optimized".
  - lua auth: Fix potential crash at deinit
  - SSL/TLS servers may have crashed if client disconnected during
    handshake.
  - SSL/TLS servers: Don't send extraneous certificates to client
    when alt certs are used.
  - lda, lmtp: Return-Path header without '&lt;' may have
    assert-crashed.
  - lda, lmtp: Unencoded UTF-8 in email address headers may
    assert-crash
  - lda: -f parameter didn't allow empty/null/domainless address
  - lmtp, submission: Message size limit was hardcoded to 40 MB.
    Exceeding it caused the connection to get dropped during
    transfer.
  - lmtp: Fix potential crash when delivery fails at DATA stage
  - lmtp: login_greeting setting was ignored
  - Fix to work with OpenSSL v1.0.2f
  - systemd unit restrictions were too strict by default
  - Fix potential crashes when a lot of log output was produced
  - SMTP client may have assert-crashed when sending mail
  - IMAP COMPRESS: Send "end of compression" marker when
    disconnecting.
  - cassandra: Fix consistency=quorum to work
  - dsync: Lock file generation failed if home directory didn't
    exist
  - Snippet generation for HTML mails didn't ignore &amp;entities
    inside blockquotes, producing strange looking snippets.
  - imapc: Fix assert-crash if getting disconnected and after
    reconnection all mails in the selected mailbox are gone.
  - pop3c: Handle unexpected server disconnections without
    assert-crash
  - fts: Fixes to indexing mails via virtual mailboxes.
  - fts: If mails contained NUL characters, the text around it
    wasn't indexed.
  - Obsolete dovecot.index.cache offsets were sometimes used.
    Trying to fetch a field that was just added to cache file may
    not have always found it.
- update pigeonhole to 0.5.2
  + Implement plugin for the a vendor-defined IMAP capability
    called "FILTER=SIEVE". It adds the ability to manually invoke
    Sieve filtering in IMAP. More information can be found in
    doc/plugins/imap_filter_sieve.txt.
  - The Sieve addess test caused an assertion panic for invalid
    addresses with UTF-8 codepoints in the localpart. Fixed by
    properly detecting invalid addresses with UTF-8 codepoints in
    the localpart and skipping these like other invalid addresses
    while iterating addresses for the address test.
  - Make the length of the subject header for the vacation response
    configurable and enforce the limit in UTF-8 codepoints rather
    than bytes. The subject header for a vacation response was
    statically truncated to 256 bytes, which is too limited for
    multi-byte UTF-8 characters.
  - Sieve editheader extension: Fix assertion panic occurring when
    it is used to manipulate a message header with a very large
    header field.
  - Properly abort execution of the sieve_discard script upon
    error.  Before, the LDA Sieve plugin attempted to execute the
    sieve_discard script when an error occurs. This can lead to the
    message being lost.
  - Fix the interaction between quota and the sieve_discard script.
    When quota was used together with a sieve_discard script, the
    message delivery did not bounce when the quota was exceeded.
- refreshed to apply cleanly again dovecot-2.3.0-better_ssl_defaults.patch
- dropped patches:
  - 35497604d80090a02619024aeec069b32568e4b4.diff
  - 5522b8b3d3ed1a99c3b63bb120216af0bd427403.diff
  - 847790d5aab84df38256a6f9b4849af0eb408419.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1531310400">- update to 2.3.2.1
  - SSL/TLS servers may have crashed during client disconnection
  - lmtp: With lmtp_rcpt_check_quota=yes mail deliveries may have
    sometimes assert-crashed.
  - v2.3.2: "make check" may have crashed with 32bit systems</changelog>
  <changelog author="mrueckert@suse.de" date="1531483200">- added
  https://github.com/dovecot/core/commit/4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395200">- update to 2.3.3
  * doveconf hides more secrets now in the default output.
  * ssl_dh setting is no longer enforced at startup. If it's not
    set and non-ECC DH key exchange happens, error is logged and
    client is disconnected.
  + Added log_debug=&lt;filter&gt; setting.
  + Added log_core_filter=&lt;log filter&gt; setting.
  + quota-clone: Write to dict asynchronously
  + --enable-hardening attempts to use retpoline Spectre 2
    mitigations
  + lmtp proxy: Support source_ip passdb extra field.
  + doveadm stats dump: Support more fields and output stddev
    by default.
  + push-notification: Add SSL support for OX backend.
  - NUL bytes in mail headers can cause truncated replies when
    fetched.
  - director: Conflicting host up/down state changes may in some
    rare situations ended up in a loop of two directors constantly
    overwriting each others' changes.
  - director: Fix hang/crash when multiple doveadm commands are
    being handled concurrently.
  - director: Fix assert-crash if doveadm disconnects too early
  - virtual plugin: Some searches used 100% CPU for many seconds
  - dsync assert-crashed with acl plugin in some situations.
  - mail_attachment_detection_options=add-flags-on-save
    assert-crashed with some specific Sieve scripts.
  - Mail snippet generation crashed with mails containing invalid
    Content-Type:multipart header.
  - Log prefix ordering was different for some log lines.
  - quota: With noenforcing option current quota usage wasn't
    updated.
  - auth: Kerberos authentication against Samba assert-crashed.
  - stats clients were unnecessarily chatty with the stats server.
  - imapc: Fixed various assert-crashes when reconnecting to
    server.
  - lmtp, submission: Fix potential crash if client disconnects
    while handling a command.
  - quota: Fixed compiling with glibc-2.26 / support libtirpc.
  - fts-solr: Empty search values resulted in 400 Bad Request
    errors
  - fts-solr: default_ns parameter couldn't be used
  - submission server crashed if relay server returned over 7 lines
    in a reply (e.g. to EHLO)
- dropped 4ff4bd024a9b6e7973b76b186ce085c2ca669d3e.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1538395201">- update pigeonhole to 0.5.3
  - Fix assertion panic occurring when managesieve service fails to
    open INBOX while saving a Sieve script. This was caused by a
    lack of cleanup after failure.
  - Fix specific messages causing an assert panic with actions that
    compose a reply (e.g. vacation). With some rather weird input
    from the original message, the header folding algorithm (as
    used for composing the References header for the reply) got
    confused, causing the panic.
  - IMAP FILTER=SIEVE capability: Fix FILTER SIEVE SCRIPT command
    parsing.  After finishing reading the Sieve script, the command
    parsing sometimes didn't continue with the search arguments.
    This is a time- critical bug that likely only occurs when the
    Sieve script is sent in the next TCP frame.</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569326400">- bsc#1145559 VUL-0: CVE-2019-11500: dovecot22, dovecot23:
  IMAP and ManageSieve protocol parsers do not properly handle NUL byte
  applyed upstream patches:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1569412800">- bsc#1133625 - (CVE-2019-11499) VUL-0: CVE-2019-11499: dovecot23:
  Submission-login crashes over TLS authentication
- bsc#1133624 VUL-0: CVE-2019-11494: dovecot23: Submission-login
  crashes over aborted/disconected authentication
  applyed upstream patches:
  dovecot-CVE-2019-11499-fix-pending-starttls.patch
  dovecot-CVE-2019-11494-fix-disconnects.patch
  dovecot-CVE-2019-11494-fix-error-handling.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1589544000">- update pigeonhole to 0.5.10
  * imap_sieve_filter: Change result action logging to include IMAP UID
  - vacation: Addresses were compared case-sensitively.
  + Added events for Sieve and ManageSieve, see
    https://doc.dovecot.org/admin_manual/list_of_events/#pigeonhole
  + Pigeonhole: Implement the Sieve "special-use" extension described in
    RFC 8579.
  - duplicate: Test only compared the handles which would cause
    different values to be cached as the same duplicate test. Fix to also
    compare the actual hashes.
  - imap_sieve_filter: IMAP FILTER Command had various bugs in error
    handling. Errors may have been duplicated for each email, errors
    may have been missing entirely, command tag and ERRORS/WARNINGS
    parameters were swapped.
  - Sieve may leak resources in rare cases when a redirect, vacation or
    report action fails to send the message. This mainly applies when
    Sieve is executed in IMAP context; i.e., for the IMAPSIEVE or
    FILTER=SIEVE capabilities.
  - dsync: Sieve script syncing failed if mailbox attributes weren't
    enabled.
  + vacation: Made the subject for the automatic response message produced
    by the Sieve vacation action configurable. Both the default subject
    (if the script defines none) and the subject template (e.g. used to
    add a subject prefix) can be configured.
  - dsync: dsync-replication does not synchronize Sieve scripts.
  - imap_sieve_filter: Reduce FILTER=SIEVE verbosity over IMAP connection.
  - testsuite: Pigeonhole testsuite segfaulted if it was compiled with
    GCC 9
  + sieve: Redirect loop prevention is sometimes ineffective. Improve
    existing loop detection by also recognizing the
    X-Sieve-Redirected-From header in incoming messages and dropping
    redirect actions when it points to the sending account. This header
    is already added by the redirect action, so this improvement only
    adds an additional use of this header.
  - sieve: Prevent execution of implicit keep upon temporary failure
    occurring at runtime.
  + IMAPSieve: Add new plugin/imapsieve_expunge_discarded setting which
    causes messages discarded by an IMAPSieve script to be expunged
    immediately, rather than only being marked as "\Deleted" (which is
    still the default behavior).
  - IMAPSieve: Fix panic crash occurring when a COPY command copies
    messages from a virtual mailbox where the source messages originate
    from more than a single real mailbox.
  - imap4flags extension: Fix deleting all keywords. When the action
    resulted in all keywords being removed, no changes were actually
    applied.
  - variables extension: Fix truncation of UTF-8 variable content. The
    maximum size of Sieve variables was enforced by truncating the
    variable string content bluntly at the limit, but this does not
    consider UTF-8 code point boundaries. This resulted in broken UTF-8
    strings. This problem also surfaced for variable modifiers, such as
    the ":encodeurl" modifier provided by the Sieve "enotify" extension.
    In that case, the resulting URI escaping could also be truncated
    inappropriately.
  - IMAPSieve, IMAP FILTER=SIEVE: Fix replacing a modified message. Sieve
    scripts running in IMAPSIEVE or IMAP FILTER=SIEVE context that
    modify the message, stored the message a second time, rather than
    replacing the originally stored unmodified message.
  - Fix segmentation fault occurring when both the sieve_extprograms
    plugin (for the Sieve interpreter) and the imap_filter_sieve plugin
    (for IMAP) are loaded at the same time. A symbol was defined by both
    plugins, causing a clash when both were loaded.
  * Adjustments to several changes in Dovecot v2.3.4 make this Pigeonhole
    release dependent on that Dovecot release; it will not compile against
    older Dovecot versions. And, conversely, you need to upgrade
    Pigeonhole when upgrading Dovecot to v2.3.4.
  * The changes regarding the default postmaster_address in Dovecot v2.3.4
    mainly apply to Pigeonhole. The new default should work for all
    existing installations, thereby fixing several reported v2.3/v0.5
    migration problems.
  - IMAP FILTER=SIEVE capability: Fix assert crash occurring when running
    UID FILTER on a Sieve script with errors.
- update to 2.3.10
  * Disable retpoline migitations by default. These can cause severe
    performance regressions, so they should be only enabled when
    applicable.
  * IMAP MOVE now commits transactions in batches of 1000 mails. This
    helps especially with lazy_expunge when moving a lot of mails. It
    mainly avoids situations where multiple IMAP sessions are running the
    same MOVE command and duplicating the mails in the lazy_expunge folder.
    With this change there can still be some duplication, but the MOVE
    always progresses forward. Also if the MOVE fails at some point, the
    changes up to the last 1000 mails are still committed instead of
    rolled back. Note that the COPY command behavior hasn't changed,
    because it is required by IMAP standard to be an atomic operation.
  * IMAP EXPUNGE and CLOSE now expunges mails in batches of 1000 mails.
    This helps especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  * Autoexpunging now expunges mails in batches of 1000 mails. This helps
    especially with lazy_expunge when expunging a lot of mails
    (e.g. millions) to make sure that the progress always moves forward
    even if the process is killed.
  + Add tool for generating sysreport called dovecot-sysreport.
    This generates a bundle of information usually needed for support
    requests.
  + Add support for the new IMAP \Important SPECIAL-USE flag (RFC 8457).
  + Add metric { group_by } setting. This allows automatically creating
    new metrics based on the fields you want to group statistics by.
    NOTE: This feature is considered experimental and syntax is subject
    to change in future release.
  + auth: Support SCRAM-SHA-256 authentication mechanism.
  + imap: Support the new IMAP STATUS=SIZE extension.
  + Use TCP_QUICKACK to reduce latency for some TCP connections.
  + quota-status: Made the service more robust against erroneous use with
    Postfix ACL policies other than smtpd_recipient_restrictions.
  + Add "revision" field support to imap_id_send setting. Using
    "revision *" will send in IMAP ID command response the short commit
    hash of the Dovecot git source tree HEAD (same as in dovecot --version).
  + IMAP ENVELOPE includes now all addresses when there are multiple
    headers (From, To, Cc, etc.) The standard way of having multiple
    addresses is to just list them all in a single header. It's
    non-standard to have multiple headers. However, since MTAs allow these
    mails to pass through and different software may handle them in
    different ways, it's better from security point of view to show all
    the addresses.
  + Event filters now support using "field_name=" to match a field that
    doesn't exist or has an empty value. For example use "error=" to match
    only events that didn't fail.
  - acl: INBOX ACLs shouldn't apply for IMAP GETMETADATA/SETMETADATA
    commands.
  - cassandra: CASS_ERROR_SERVER_WRITE_FAILURE error should also be
    treated as "uncertain write failure".
  - dict-redis: Using quota_clone configured with dict-redis could have
    crashed when Redis responded slowly.
  - imap-hibernate: Communication trouble with imap-master leads to
    segfault.
  - imap-hibernate: Unhibernation retrying wasn't working.
  - imap: Fixed auth lookup privilege problem when imap process was reused
    and user was being un-hibernated.
  - Fix potential crash when copying/moving mails within the same folder.
    This happened only when there were a lot of fields in dovecot.index.cache.
  - lib-index: Recreating dovecot.index.cache file could have crashed when
    merging bitmask fields.
  - lib-index: Using public/shared folders with INDEXPVT configured to use
    private \Seen flags, trying to search seen/unseen in an empty folder
    crashes with segfault.
  - lib-mail: Large base64-encoded mails weren't decoded properly.
    This could have affected searching/indexing mails and message snippet
    generation.
  - lib-mail: Message with only quoted text could have caused message
    snippet to ignore its 200 character limit and return the entire
    message. This was added also to dovecot.index.cache file, which
    increased disk space and memory usage unnecessarily.
    v2.3.9.2 regression (previous versions cached the quoted snippet as
    empty). In a large mail quoted text could have become wrongly added
    to the snippet, possibly mixed together with non-quoted text.
  - lib-smtp: client could have assert-crashed if STARTTLS handshake
    finished earlier than usually.
  - lib-ssl-iostream: remove -static flag for lib-ssl-iostream linking to
    prevent a compile issue.
  - lib-storage: Mailbox synchronization may have assert-crashed in some
    rare situations.
  - lib-storage: mdbox didn't preserve date.saved with dsync.
  - lib: Don't require EAI_{ADDRFAMILY,NODATA}, breaks FreeBSD
  - master: Some services could respawn unthrottled if they crash during
    startup.
  - push-notification: Do not send push_notification_finished event if
    nothing was done. This happens when mail transaction is started and
    ended with no changes.
  - quota-status: Addresses with special characters in the local part caused
    problems in the interaction between Postfix and Dovecot. Postfix sent
    its own internal representation in the recipient field, while Dovecot
    expected a valid RFC5321 mailbox address.
  - submission-login: SESSION was not correctly encoded field for the
    XCLIENT command. Particularly, a '+' character introduced by the
    session ID's Base64 encoding causes problems.
  - submission: Fix submission_max_mail_size to work correctly on 32-bit
    systems.
  - submission: Trusted connections crashed in second connection's EHLO
    if submission-login { service_count } is something else than 1 (which
    is the default).
  - submission: XCLIENT command was never used in the protocol exchange
    with the relay MTA when submission_backend_capabilities is configured,
    even when the relay MTA was properly configured to accept the XCLIENT
    command.
  * CVE-2020-7046: Truncated UTF-8 can be used to DoS
    submission-login and lmtp processes.
  * CVE-2020-7957: Specially crafted mail can crash snippet generation.
  - Mails with empty From/To headers can also cause crash
    in push notification drivers.
  * CVE-2019-19722: Mails with group addresses in From or To fields
    caused crash in push notification drivers.
  * Changed several event field names for consistency and to avoid
    conflicts in parent-child event relationships:
  * SMTP server command events: Renamed "name" to "cmd_name"
  * Events inheriting from a mailbox: Renamed "name" to "mailbox"
  * Server connection events have only "remote_ip", "remote_port",
    "local_ip" and "local_port".
  * Removed duplicate "client_ip", "ip" and "port".
  * Mail storage events: Removed "service" field.
    Use "service:&lt;name&gt;" category instead.
  * HTTP client connection events: Renamed "host" to "dest_host" and
    "port" to "dest_port"
  * auth: Drop Postfix socketmap support. It hasn't been working
    with recent Postfix versions for a while now.
  * push-notification-lua: The "subject" field is now decoded to UTF8
    instead of kept as MIME-encoded.
  + push-notification-lua: Added new "from_address", "from_display_name",
    "to_address" and "to_display_name" fields. The display names are
    decoded to UTF8.
  + Added various new fields to existing events.
    See http://doc.dovecot.net/admin_manual/list_of_events.html
  + Add lmtp_add_received_header setting. It can be used to prevent LMTP
    from adding "Received:" headers.
  + doveadm: Support SSL/STARTTLS for proxied doveadm connections based on
    doveadm_ssl setting and proxy ssl/tls settings.
  + Log filters support now "service:&lt;name&gt;", which matches all events for
    the given service. It can also be used as a category.
  + lib: Use libunwind to get abort backtraces with function names
    where available.
  + lmtp: When the LMTP proxy changes the username (from passdb lookup)
    add an appropriate ORCPT parameter.
  - lmtp: Add lmtp_client_workarounds setting to implement workarounds for
    clients that send MAIL and RCPT commands with additional spaces before
    the path and for clients that omit &lt;&gt; brackets around the path.
    See example-config/conf.d/20-lmtp.conf.
  - lda/lmtp: Invalid MAIL FROM addresses were rejcted too aggressively.
    Now mails from addresses with unicode characters are delivered, but
    their Return-Path header will be &lt;&gt; instead of the given MAIL FROM
    address.
  - lmtp: The lmtp_hdr_delivery_address setting is ignored.
  - imap: imap_command_finished event's "args" and "human_args" parameters
    were always empty.
  - mbox: Seeking in zlib and bzip2 compressed input streams didn't work
    correctly.
  - imap-hibernate: Process crashed when client got destroyed while it was
    attempted to be unhibernated, and the unhibernation fails.
  - *-login: Proxying may have crashed if SSL handshake to the backend
    failed immediately. This was unlikely to happen in normal operation.
  - *-login: If TLS handshake to upstream server failed during proxying,
    login process could crash due to invalid memory access.
  - *-login: v2.3 regression: Using SASL authentication without initial
    response may have caused SSL connections to hang. This happened often
    at least with PHP's IMAP library.
  - *-login: When login processes are flooded with authentication attempts
    it starts logging errors about "Authentication server sent unknown id".
    This is still expected. However, it also caused the login process to
    disconnect from auth server and potentially log some user's password
    in the error message.
  - dict-sql: SQL prepared statements were not shared between sessions.
    This resulted in creating a lot of prepared statements, which was
    especially inefficient when using Cassandra backend with a lot of
    Cassandra nodes.
  - auth: auth_request_finished event didn't have success=yes parameter
    set for successful authentications.
  - auth: userdb dict - Trying to list users crashed.
  - submission: Service could be configured to allow anonymous
    authentication mechanism and anonymous user access.
  - LAYOUT=index: Corrupted dovecot.list.index caused folder creation to
    panic.
  - doveadm: HTTP server crashes if request target starts with double "/".
  - dsync: Remote dsync started hanging if the initial doveadm
    "dsync-server" command was sent in the same TCP packet as the
    following dsync handshake. v2.3.8 regression.
  - lib: Several "input streams" had a bug that in some rare situations
    might cause it to access freed memory. This could lead to crashes or
    corruption.
    The only currently known effect of this is that using zlib plugin with
    external mail attachments (mail_attachment_dir) could cause fetching
    the mail to return a few bytes of garbage data at the beginning of the
    header. Note that the mail wasn't saved corrupted, but fetching it
    caused corrupted mail to be sent to the client.
  - lib-storage: If a mail only has quoted content, use the quoted text
    for generating message snippet (IMAP PREVIEW) instead of returning
    empty snippet.
  - lib-storage: When vsize header was rebuilt, newly calculated message
    sizes were added to dovecot.index.cache instead of being directly
    saved into vsize records in dovecot.index.
  - lib: JSON generator was escaping UTF-8 characters unnecessarily.
  + Added mail_delivery_started and mail_delivery_finished events, see
    https://doc.dovecot.org/admin_manual/list_of_events/ for details.
  + dsync-replication: Don't replicate users who have "noreplicate" extra
    field in userdb.
  + doveadm service status: Show total number of processes created.
  + When logging to syslog, use instance_name setting's value for the
    ident. This commonly is added as a log prefix.
  + Base64 encoding/decoding code was rewritten with additional features.
    It shouldn't cause any user visible changes.
  - v2.3.7 regression: If a folder only receives new mails without any
    other mail access, dovecot.index.log keeps growing forever and
    dovecot.index keeps being rewritten for every mail delivery.
  - dsync-replication may lose keywords after syncing mails restored from
    another replica. This only happened if the mail only had keywords and
    no system flags.
  - event filters: Non-textual event fields could not be filtered using
    wildcards.
  - auth: Scope parameter was missing from OAuth password grant
    request.
  - doveadm client-server communication may hang in some situations.
    It is also using unnecessarily small TCP/IP packet sizes.
  - doveadm who and kick did not flush protocol output correctly.
  - imap: SETMETADATA with literal value would delete the metadata value
    instead of updating it.
  - imap: When client issues FETCH PREVIEW (LAZY=FUZZY) command, the
    caching decisions should be updated so that newly saved mails will
    have the preview cached.
  - With mail_nfs_index=yes and/or mail_nfs_storage=yes setuid/setgid
    permission bits in some files may have become dropped with some NFS
    servers. Changed NFS flushing to now use chmod() instead of chown().
  - quota: warnings did not work if quota root was noenforcing
  - acl: Global ACL file ignored the last line if it didn't end with LF.
  - doveadm stats dump: With JSON formatter output numbers using the
    number type instead of as strings
  - lmtp_proxy: Ensure that real_* variables are correctly set when using
    lmtp_proxy.
  - event exporter: http-post driver had hardcoded timeout and did not
    support DNS lookups or TLS connections.
  - auth: Fix user iteration to work with userdb passwd with glibc v2.28.
  - auth: auth service can crash if auth-policy JSON response is invalid
    or returned too fast.
  - In some rare situations "ps" output could have shown a lot of "?"
    characters after Dovecot process titles.
  - When dovecot.index.pvt is empty, an unnecessary error is logged:
    Error: .../dovecot.index.pvt reset, view is now inconsistent
  - SMTP address encoder duplicated initial double quote character when
    the localpart of an address ended in '..'. For example
    "user+..@example.com" became ""user+.."@example.com in a
    sieve redirect.
  - Fix TCP_NODELAY errors being logged on non-Linux OSes
  - lmtp proxy: Fix assert-crash when client uses BODY=8BITMIME
  - Remove wrongly added checks in namespace prefix checking
  * fts-solr: Removed break-imap-search parameter
  + Added more events for the new statistics, see
    https://doc.dovecot.org/admin_manual/list_of_events/
  + mail-lua: Add IMAP metadata accessors, see
    https://doc.dovecot.org/admin_manual/lua/
  + Add event exporters that allow exporting raw events to log files and
    external systems, see
    https://doc.dovecot.org/configuration_manual/event_export/
  + SNIPPET is now PREVIEW and size has been increased to 200 characters.
  + Add body option to fts_enforced. This triggers building FTS index only
    on body search, and an error using FTS index fails the search rather
    than reads through all the mails.
  - Submission/LMTP: Fixed crash when domain argument is invalid in a
    second EHLO/LHLO command.
  - Copying/moving mails using Maildir format loses IMAP keywords in the
    destination if the mail also has no system flags.
  - mail_attachment_detection_options=add-flags-on-save caused email body
    to be unnecessarily opened when FETCHing mail headers that were
    already cached.
  - mail attachment detection keywords not saved with maildir.
  - dovecot.index.cache may have grown excessively large in some
    situations. This happened especially when using autoexpunging with
    lazy_expunge folders. Also with mdbox format in general the cache file
    wasn't recreated as often as it should have.
  - Autoexpunged mails weren't immediately deleted from the disk. Instead,
    the deletion from disk happened the next time the folder was opened.
    This could have caused unnecessary delays if the opening was done by
    an interactive IMAP session.
  - Dovecot's TCP connections sometimes add extra 40ms latency due to not
    enabling TCP_NODELAY. HTTP and SMTP/LMTP connections weren't
    affected, but everything else was. This delay wasn't always visible -
    only in some situations with some message/packet sizes.
  - imapc: Fix various crash conditions
  - Dovecot builds were not always reproducible.
  - login-proxy: With shutdown_clients=no after config reload the
    existing connections could no longer be listed or kicked with doveadm.
  - "doveadm proxy kick" with -f parameter caused a crash in some
    situations.
  - Auth policy can cause segmentation fault crash during auth process
    shutdown if all auth requests have not been finished.
  - Fix various minor bugs leading into incorrect behaviour in mailbox
    list index handling. These rarely caused noticeable problems.
  - LDAP auth: Iteration accesses freed memory, possibly crashing
    auth-worker
  - local_name { .. } filter in dovecot.conf does not correctly support
    multiple names and wildcards were matched incorrectly.
  - replicator: dsync assert-crashes if it can't connect to remote TCP
    server.
  - config: Memory leak in config process when ssl_dh setting wasn't
    set and there was no ssl-parameters.dat file.
    This caused config process to die once in a while
    with "out of memory".
  * auth: Support password grant with passdb oauth2.
  + Use system default CAs for outbound TLS connections.
  + Simplify array handling with new helper macros.
  + fts_solr: Enable configuring batch_size and soft_commit features.
  - lmtp/submission: Fixed various bugs in XCLIENT handling, including a
    hang when XCLIENT commands were sent infinitely to the remote server.
  - lmtp/submission: Forwarded multi-line replies were erroneously sent
    as two replies to the client.
  - lib-smtp: client: Message was not guaranteed to contain CRLF
    consistently when CHUNKING was used.
  - fts_solr: Plugin was no longer compatible with Solr 7.
  - Make it possible to disable certificate checking without
    setting ssl_client_ca_* settings.
  - pop3c: SSL support was broken.
  - mysql: Closing connection twice lead to crash on some systems.
  - auth: Multiple oauth2 passdbs crashed auth process on deinit.
  - HTTP client connection errors infrequently triggered a segmentation
    fault when the connection was idle and not used for a particular
    client instance.
  + Lua push notification driver: mail keywords and flags are provided
    in MessageNew and MessageAppend events.
  + submission: Implement support for plugins.
  + auth: When auth_policy_log_only=yes, only log what the policy server
    response would do without actually doing it.
  + auth: Always log policy server decisions with auth_verbose=yes
  - v2.3.[34]: doveadm log errors: Output was missing user/session
  - lda: Debug log lines could have shown slightly corrupted
  - login proxy: Login processes may have crashed in various ways when
    login_proxy_max_disconnect_delay was set.
  - imap: Fix crash with Maildir+zlib if client disconnects during APPEND
  - lmtp proxy: Fix potential assert-crash
  - lmtp/submission: Fix crash when SMTP client transaction times out
  - submission: Split large XCLIENT commands to 512 bytes per command,
    so Postfix accepts them.
  - submission: Fix crash when client sends invalid BURL command
  - submission: relay backend: VRFY command: Avoid forwarding 500 and
    502 replies back to client.
  - lib-http: Fix potential assert-crash when DNS lookup fails
  - lib-fts: Fix search query generation when one language ignores a
    token (e.g. via stopwords).
  * The default postmaster_address is now "postmaster@&lt;user domain or
    server hostname&gt;". If username contains the @domain part, that's
    used. If not, then the server's hostname is used.
  * "doveadm stats dump" now returns two decimals for the "avg" field.
  + Added push notification driver that uses a Lua script
  + Added new SQL, DNS and connection events.
    See https://wiki2.dovecot.org/Events
  + Added "doveadm mailbox cache purge" command.
  + Added events API support for Lua scripts
  + doveadm force-resync -f parameter performs "index fsck" while opening
    the index. This may be useful to fix some types of broken index files.
    This may become the default behavior in a later version.
  - director: Kicking a user crashes if login process is very slow
  - pop3_no_flag_updates=no: Don't expunge DELEted and RETRed messages
    unless QUIT is sent.
  - auth: Fix crypt() segfault with glibc-2.28+
  - imap: Running UID FILTER script with errors assert-crashes
  - dsync, pop3-migration: POP3 UIDLs weren't added to
    dovecot.index.cache while mails were saved.
  - dict clients may have been using 100% CPU while waiting for dict
    server to finish commands.
  - doveadm user: Fixed user listing via HTTP API
  - All levels of Cassandra log messages were logged as Dovecot errors.
  - http/smtp client may have crashed after SSL handshake
  - Lua auth converted strings that looked like numbers into numbers.
- CVE-2020-10967: dovecot23: Sending mail with empty quoted localpart
  causes submission or lmtp componentto crash. (bsc#1171456)
- CVE-2020-10957: dovecot23: Sending malformed NOOP command causesi
  crash in submission, submission-login orlmtp service. (bsc#1171457)
- CVE-2020-10958: dovecot23: use-after-free with too many newlines
  (bsc#1171458)
  applyed upstream patches:
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch
- Removed patches containing by the updates:
    0001-lib-managesieve-Don-t-accept-strings-with-NULs.patch
    0002-lib-managesieve-Make-sure-str_unescape-won-t-be-writ.patch
    0001-lib-imap-Don-t-accept-strings-with-NULs.patch
    0002-lib-imap-Make-sure-str_unescape-won-t-be-writing-pas.patch
    dovecot-CVE-2019-11494-fix-disconnects.patch
    dovecot-CVE-2019-11494-fix-error-handling.patch
    dovecot-CVE-2019-11499-fix-pending-starttls.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1596888000">- CVE-2020-12673: dovecot22,dovecot23: improper implementation of
  NTLM does not check message buffer size (bsc#1174922)
  applyed upstream patche:
    0002-lib-ntlm-Check-buffer-length-on-responses.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1597233600">- CVE-2020-12674: improper implementation of RPA mechanism
  (bsc#1174923)
  apply upstream patch:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1609588800">- Update pigeonhole to version 0.5.11
  * managesieve: managesieve_max_line_length setting is now a "size" type
    instead of just number of bytes. This allows using e.g. "64k" as the
    value.
  - lib-sieve: When folding white space is used in the Message-ID header,
    it is not stripped away correctly before the message ID value is used,
    causing e.g. garbled log lines at delivery.
- Update to version 2.3.11.3
  - pop3-login: Login didn't handle commands in multiple IP packets properly.
    This mainly affected large XCLIENT commands or a large SASL initial
    response parameter in the AUTH command.
  - pop3: pop3_deleted_flag setting was broken, causing:
    Panic: file seq-range-array.c: line 472 (seq_range_array_invert):
    assertion failed: (range[count-1].seq2 &lt;= max_seq)
  - auth: Lua passdb/userdb leaks stack elements per call, eventually
    causing the stack to become too deep and crashing the auth or
    auth-worker process.
  - lib-mail: v2.3.11 regression: MIME parts not returned correctly by
    Dovecot MIME parser.
  - pop3-login: Login would fail with "Input buffer full" if the initial
    response for SASL was too long.
  * CVE-2020-12100: Parsing mails with a large number of MIME parts could
    have resulted in excessive CPU usage or a crash due to running out of
    stack memory.
    nested MIME parts leads to resource exhaustion (bsc#1174920)
  * CVE-2020-12673: Dovecot's NTLM implementation does not correctly check
    message buffer size, which leads to reading past allocation which can
    lead to crash.
  * CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an
    address that has the empty quoted string as local-part causes the lmtp
    service to crash.
  * CVE-2020-12674: Dovecot's RPA mechanism implementation accepts
    zero-length message, which leads to assert-crash later on.
  * Events: Fix inconsistency in events. See event documentation in
    https://doc.dovecot.org.
  * imap_command_finished event's cmd_name field now contains "unknown"
    for unknown commands. A new "cmd_input_name" field contains the
    command name exactly as it was sent.
  * lib-index: Renamed mail_cache_compress_* settings to mail_cache_purge_*.
    Note that these settings are mainly intended for testing and usually
    shouldn't be changed.
  * events: Renamed "index" event category to "mail-index".
  * events: service:&lt;name&gt; category is now using the name from
    configuration file.
  * dns-client: service dns_client was renamed to dns-client.
  * log: Prefixes generally use the service name from configuration file.
    For example dict-async service will now use
    "dict-async(pid): " log prefix instead of "dict(pid): "
  * *-login: Changed logging done by proxying to use a consistent prefix
    containing the IP address and port.
  * *-login: Changed disconnection log messages to be slightly clearer.
  + dict: Add events for dictionaries.
  + lib-index: Finish logging with events.
  + oauth2: Support local validation of JWT tokens.
  + stats: Add support for dynamic histograms and grouping. See
    https://doc.dovecot.org/configuration_manual/stats/.
  + imap: Implement RFC 8514: IMAP SAVEDATE
  + lib-index: If a long-running transaction (e.g. SORT/FETCH on a huge
    folder) adds a lot of data to dovecot.index.cache file, commit those
    changes periodically to make them visible to other concurrent sessions
    as well.
  + stats: Add OpenMetrics exporter for statistics. See
    https://doc.dovecot.org/configuration_manual/stats/openmetrics/.
  + stats: Support disabling stats-writer socket by setting
    stats_writer_socket_path="".
  - auth-worker: Process keeps slowly increasing its memory usage and
    eventually dies with "out of memory" due to reaching vsz_limit.
  - auth: Prevent potential timing attacks in authentication secret
    comparisons: OAUTH2 JWT-token HMAC, imap-urlauth token, crypt() result.
  - auth: Several auth-mechanisms allowed input to be truncated by NUL
    which can potentially lead to unintentional issues or even successful
    logins which should have failed.
  - auth: When auth policy returned a delay, auth_request_finished event
    had policy_result=ok field instead of policy_result=delayed.
  - auth: auth process crash when auth_policy_server_url is set to an
    invalid URL.
  - dict-ldap: Crash occurs if var_expand template expansion fails.
  - dict: If dict client disconnected while iteration was still running,
    dict process could have started using 100% CPU, although it was still
    handling clients.
  - doveadm: Running doveadm commands via proxying may hang, especially
    when doveadm is printing a lot of output.
  - imap: "MOVE * destfolder" goes to a loop copying the last mail to the
    destination until the imap process dies due to running out of memory.
  - imap: Running "UID MOVE 1:* Trash" on an empty folder goes to infinite
    loop.
  - imap: SEARCH doesn't support $.
  - lib-compress: Buffer over-read in zlib stream read.
  - lib-dns: If DNS lookup times out, lib-dns can cause crash in calling
    process.
  - lib-index: Fixed several bugs in dovecot.index.cache handling that
    could have caused cached data to be lost.
  - lib-index: Writing to &gt;=1 GB dovecot.index.cache files may cause
    assert-crashes:
    Panic: file mail-index-util.c: line 37 (mail_index_uint32_to_offset):
    assertion failed: (offset &lt; 0x40000000)
  - lib-ssl-iostream: Fix buggy OpenSSL error handling without
    assert-crashing. If there is no error available, log it as an error
  instead of crashing:
    Panic: file iostream-openssl.c: line 599 (openssl_iostream_handle_error):
    assertion failed: (errno != 0)
  - lib-ssl-iostream: ssl_key_password setting did not work.
  - submission: A segfault crash may occur when the client or server
    disconnects while a non-transaction command like NOOP or VRFY is still
    being processed.
  - virtual: Copying/moving mails with IMAP into a virtual folder assert-crashes:
    Panic: file cmd-copy.c: line 152 (fetch_and_copy): assertion failed:
    (copy_ctx-&gt;copy_count == seq_range_count(&amp;copy_ctx-&gt;saved_uids))
- VUL-1: CVE-2020-25275: dovecot22,dovecot23: Mail delivery / parsing
  crashed when the 10 000th MIME part was message/rfc822
  (bsc#1180406)
- apply upstream patches:
- CVE-2020-24386: dovecot: IMAP hibernation allows users to access
  other users' emails (bsc#1180405)
- apply upstream patches:
    0002-imap-Add-unit-test-for-imap-client-hibernate.patch
    0001-imap-Escape-tag-when-sending-it-to-imap-hibernate-pr.patch
    0001-lib-mail-message-parser-Fix-assert-crash-when-enforc.patch
    0002-lib-imap-Don-t-generate-invalid-BODYSTRUCTURE-when-r.patch
- remove paches containing by update:
    0001-auth-mech-rpa-Fail-on-zero-len-buffer.patch
    0001-lib-smtp-smtp-server-cmd-vrfy-Restructure-parameter-.patch
    0002-lib-ntlm-Check-buffer-length-on-responses.patch
    0002-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0003-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0004-lib-smtp-smtp-syntax-Do-not-allow-NULL-return-parame.patch
    0005-lib-smtp-smtp-syntax-Return-0-for-smtp_string_parse-.patch
    0006-lib-smtp-Add-tests-for-smtp_string_parse-and-smtp_st.patch
    0007-lib-smtp-test-smtp-server-errors-Add-tests-for-VRFY-.patch
    0008-lib-smtp-smtp-server-command-Guarantee-that-non-dest.patch
    0009-lib-smtp-smtp-server-command-Assign-cmd-reg-immediat.patch
    0010-lib-smtp-smtp-server-command-Perform-initial-command.patch
    0011-lib-smtp-smtp-server-connection-Hold-a-command-refer.patch
    0012-lib-smtp-test-smtp-server-errors-Add-tests-for-large.patch
    0013-lib-smtp-smtp-address-Don-t-return-NULL-from-smtp_ad.patch
    0014-lib-smtp-smtp-address-Don-t-recognize-an-address-wit.patch
    0015-lib-smtp-smtp-address-Only-produce-a-address-in-smtp.patch
    0016-lmtp-lmtp-commands-Explicity-prohibit-empty-RCPT-pat.patch</changelog>
</package>
<package pkgid="2b80795ce166e3858016da956c6f2e5b4a078feb627ee6a77c056f7ca4ff06c2" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="c7ec2fb98a010efb14741e3013131fa2d51a1ebffb0545d8470eca488a47b2a2" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="f87bf8ffb084998c0bd739217ea1dc72af38ef6f3cfc25562297902a1cbf478e" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="70d9d33320fa3f8c1f8cb543a68e1e9809e82d714c54ee52f2ea019d1290ae15" name="dpdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="63145304ed9d1649a61cacad463f8fb2795da9f6737ac276d9b11d6b5e2c65ae" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="218056479218146a527be39bd14d7a0ec6fe76ada9f91eaf778de59996bb86f0" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="6805550e58065bf8ff7d320b98b67c4f71b8305a56506c0e3c3a6c4a9fd17726" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="af3776f44f622e4b1901d18f100b7c29435253958d30ce54caa91a8151c7de8a" name="dpdk-debugsource" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="621e8d797266ed4ee88f57205f8ff68d7471a35f99cb5fc11d199a83d265f435" name="dpdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="5754c3cb011a3e4d8224e59d9e19e4b0433b3c5de517e7d8d29307f2952b3ffd" name="dpdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="1400e431ecdde915db10c294a4fcaabf5acc16bbc7868a94114a4c6e04eb430a" name="dpdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="d4cd9964ea18b5d247eb2b0eacf0ee7c6a87aea7155e82d8b9e8d4c91a8034f8" name="dpdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="b614a731cc79dd7017576a1bdd36a813a49a6c8d94d11ef3f83ade5484dbece0" name="dpdk-examples-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="463673e8ff4c881f8e82fdb60df0fa84e5f33628ea9f8a4728e52768dc0662c0" name="dpdk-examples-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="b2d9e67b9fcbc8cf77f1176914567f2b8d1b68146b389761f6f0c26e4577039b" name="dpdk-examples-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="3fdc5d3765831d51db0262a88f22385c5c01458f1ff9ce8198f34db031ef90ba" name="dpdk-examples-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="56d33b1355dddaba565be0af21521ac311dad4d3dfd2862ecbade8ba67344083" name="dpdk-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.33" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="f93fa53805614672af5076eecfb235bf3587de6a901bb9680e29b0cfecc82bbc" name="dpdk-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.36" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="85a4ff7cf613465f643d2f403c203502f26960976143ef93a56faf487573c4be" name="dpdk-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.41" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="3fc24bb5eb70877b6047bc713060c640ab36ef61915674bafdb77655148e3e90" name="dpdk-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.69" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="4f026faa732d7180c6044981a1350e6b0475e34c231a36480367b25cd4ef78ec" name="dpdk-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.33" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="2b6f5b94458e533b5e9608e31e6b7c5a92bf0b322b473a060491843b84345f52" name="dpdk-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1_k5.3.18_lp152.36" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="dd7905c028231433475a4cfe2dd656ced95b790d13662de74d7596d7b3ae8b4d" name="dpdk-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.41" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="1aa116ab1d293b6cb05707452a2f4110d494dab24d5cc5559861a0ccef5c369b" name="dpdk-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_lp152.69" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="e8047d211ab486b3aacaa3b070f4dc53940e1beaab7ceab10b6faae71e9d4bd3" name="dpdk-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.3.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="f42e409127161c49aaf110a471f7ef3667d723d0e668a2cc0ab0d06355e6f683" name="dpdk-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.1" rel="lp152.2.5.1"/>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
</package>
<package pkgid="2a64f4ce45e00e8fac84555a13f4a2cfbbc7549f525d0eda1a42b46a9c0daa43" name="dpdk-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.12.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="cbd9db3bef3dbeb2cfea8d24fd9ac861deeb5760b080650b2121f020a9eafc6d" name="dpdk-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="19.11.4" rel="lp152.2.8.1"/>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="marco.varlese@suse.de" date="1520337600">- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since no longer referenced in .spec files
- Added 0002-dpdk-eal-ppc-rte_smp_mb.patch to fix an issue on ppc64le platforms with v18.02
- Updated to version 18.02; some of the changes include:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx5 driver
  * Updated mlx4 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added Wireless Base Band Device (bbdev) abstraction
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added new pipeline use case for dpdk-test-eventdev application
  * Updated Eventdev sample application to support event devices based on capability
  * Added Rawdev, a generic device support library
  * Added new multi-process communication channel
  * Added GRO support for VxLAN-tunneled packets
  * Increased default Rx and Tx ring size in sample applications
  * Added new DPDK build system using the tools ?meson? and ?ninja? [EXPERIMENTAL]</changelog>
  <changelog author="ndas@suse.de" date="1524225600">- Enable MLX4/5 PMD only in Factory and &gt;= SLES15
  It needs rdma-core &gt;= v16.</changelog>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="Marco Varlese &lt;marco.varlese@suse.com&gt;" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="&lt;jcaamano@suse.com&gt;" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="Stefan Weiberg &lt;sweiberg@suse.com&gt;" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="Jaime Caama&#xF1;o Ruiz &lt;jcaamano@suse.com&gt;" date="1600430400">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (CVE-2020-14374,CVE-2020-14375,CVE-2020-14376,
  CVE-2020-14377,CVE-2020-14378bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
</package>
<package pkgid="a837b3ab726cf00b84d9fb0546ae19db38829358a7e0bc7c5b13cffa7a752b96" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="5ee5c5c5a85ee9299ba9f3c03f79c2bac8fdc25d4122c98fa08d413874efe090" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="c7cd1f398fd4adc3f9cfd988fff2f31649ddefd355e15acfc2ed77b6fc8b0aab" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="a82e3d1234976f287c0e94a71ec67c9758dc63c7501ef33d5ad254f7ecc6ed9a" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="45677c7431815c28b0889072dff8df2ba7073ac740ac572b8cd6ac736d7a7362" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="a6c7600cb68e64ffe2e582c7bd31413c5e00183609db154a92ef5f304131823a" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="69a266580bfc681138aa50cfd43ceb62abbfe0844ad72e832b20e33609ba305a" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="f466eeea9d02ee2f7121b209ec3c2ea103dc442e6561af0d7c0c841b032efbdb" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="7ead085964a5e7aa392631eaa2bf068038f67e06744420dc404f928f46e72002" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="a884674bc49224cee0024fdf1a645fd228cd99ea2c4b7aba3b448dad615aab71" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="df84d77ea5b1fce19dc7ad062a5af70ad2343f95073e7b2db76b919dda7462e6" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="8ac399e7cfbd3d1d3afb3fde8a080d5daba965ddecf92099edb7f6788662e3df" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="4c045f31480f54188aa37bfb3cda369d7f40f75e3840956b15ba6f2a70a29621" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="c885b905927511d981bff56f9fe6231a0085153ce144cf9af56983c1ce850650" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="04631e1dbe1906e0519d550fe9612904046e64cd898882ce93c84933551a6ccf" name="dracut-debuginfo" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="c192f72fdf146a71d2e27b13c144f42c21706f71e7677ab2411c475b8f9d9dac" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="28a40a7140919230226941b0ad62d4f977ec033be728fa595f04301c4f0c0584" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="4c4cc78825ac14e580bac13ca25fe9a9007fa7a5e208fb624cd95c18f92dcded" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.146.g6f5195cf" rel="lp152.2.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1569931200">- Update to version 049+git114.058e566c:
  * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
  * fixup "Dracut: only login to one target at a time" (bsc#1152650)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1574942400">- Update to version 049+git115.c2d8d6fb:
  * suse: Remove incorrect usage of %_libexecdir (boo#1155785)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
</package>
<package pkgid="5bb3fb6958743f127f28a5dfda4180fed56e5cb7d8f4cac24059cb83047922ea" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="6e04d1b61dff5f0ef5f9eb8b69f5be817045f85ac66427b6d812ad917563eb78" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.152.g8506e86f" rel="lp152.2.6.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1575979200">- Update to version 049+git116.e9995c78:
  * dracut.spec: add convertfs module correctly (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
</package>
<package pkgid="6cf05afd0c1aa465463539f535f961e765ba4ccdc2cdee14b1bd02fdeef47e31" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="df2fe81b26e74c510ce8ea8a6f035502829d57f88055e6942c4aca6f3fb24fa8" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.156.g7d852636" rel="lp152.2.9.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1578571200">- Update to version 049+git117.d3206e79:
  * Remove purge-kernels scripts and service (jsc#SLE-10162)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
</package>
<package pkgid="2e2ae0a21b927954fbab7fccd5f02dcc01ba194b87175cfd5e38a7d92a4bafaf" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="e916c414bea5770517e1406f5f96b7b492e92d4a3ee390e24b7b1c1665364326" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.171.g65b2addf" rel="lp152.2.12.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1579003200">- Update to version 049+git118.a6090e2f:
  * Implement support for verifying the boot with fipscheck (bsc#1158530)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580299200">- Update to version 049.1+git119.abf1a408:
  * 30convertfs: adopt for SUSE (boo#1158777)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
</package>
<package pkgid="8521b138249a04d7b9e5f95fe33aeb083e9ba988c87cd627e833cdf292321fb6" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="2d8d7d39d01cc49c645b478f6d21759bd36cbfa3d7bcce98bff7e5cbaf8f9e16" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.183.g7282fe92" rel="lp152.2.15.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1580817600">- Update to version 049.1+git120.dbfbfcb8:
  * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
</package>
<package pkgid="ba2fc72e77160ac6d81d1ed684c4b9c6b072940960ee6299cc767b25046f5569" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="e3d732bad772998d24f8ff73acaceb8f86b70b30e2a76126894ff62921bb2b1b" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.185.g9324648a" rel="lp152.2.18.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git123.c2a6645e:
  * dracut: add warning when including unsupported modules (bsc#1163055)
  * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
  * 01fips: Use correct kernel image name for more platforms (bsc#1164076)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1582286401">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
</package>
<package pkgid="f028b43c79d72fc87a72bdbc1277a65e1bb60378b1bbaeafc254effe8d0dc713" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="ea9e868677d52e6b96484aad5f3f574cebe46e6018fe7c35b42c10db7edb788b" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.186.g320cc3d1" rel="lp152.2.21.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1582286400">- Update to version 049.1+git124.70941b30:
  * 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
</package>
<package pkgid="968ab1febe31f52552d7d929d5bf57d5aa1501cda53e61ac955a91acbb1f36d6" name="dracut-debugsource" arch="i586">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="b05e5e2fd35d70a340ecdcfc761e976342b7c4a1c346f9bf1d7af17551a548f1" name="dracut-debugsource" arch="x86_64">
  <version epoch="0" ver="049.1+suse.187.g63c1504f" rel="lp152.2.24.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1583236800">- Update to version 049.1+git125.e2b2c9ef:
  * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
  * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583841600">- Update to version 049.1+git129.0f19bbfd:
  * 35network-legacy: dhclient is optional (bsc#1166188)
  * suse.spec: Create -extra package (bsc#1166188)
  * suse.spec: Remove obsolete permission fixups
  * 00warpclock: Fix permissions in warpclock.sh</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1583928000">- Update to version 049.1+git135.46dceb02:
  * 40network: Do not require hostname binary
  * suse.spec: add new modules 90nvdimm and 99suse-initrd
  * 95fcoe: default rd.nofcoe to false (bsc#1163343)
  * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
    Dependent commits:
  * Add module "90nvdimm" for NVDIMM support
  * 90kernel-modules: remove nfit from static module list</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584619200">- Changed scheme to 049.1+suse.139.g8a7d3d9e to match systemd package
  * Scheme pattern&gt; &lt;PARENT_TAG&gt;+suse.&lt;TAG_OFFSET&gt;.g&lt;SHA1&gt;
  * No functional change</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1584878400">- Update to version 049.1+git138.9068a629:
  * systemd: install systemd-tty-ask-password-agent systemd-ask-password
  * Mark interface setup after dhcp (bsc#1167161)
  * Store nameserver received from wicked dhcp lease (bsc#1167161)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591099200">- Update to version 049.1+suse.141.g7563c620:
  * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)
  * 35network-legacy: call initqueue/online for DHCP, too (boo#1161438)
  * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185600">- Update to version 049.1+suse.142.gf8776da4:
  * Run format_spec_file</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591185601">- Update to version 049.1+suse.143.g368f585a:
  * modules.d: fix udev rules detection of multipath devices (bsc#1171370)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591272000">- Update to version 049.1+suse.144.ge0eaf296:
  * Add wicked specific config files (bsc#1089333)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1591790400">- Update to version 049.1+suse.145.g8ae82192:
  * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1592395200">- Update to version 049.1+suse.146.g6f5195cf:
  * 35network-legacy: Fix dual stack setups (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1593604800">- Update to version 049.1+suse.148.gc4a6c2dd:
  * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
  * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
    (bsc#bsc#1161573)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1594296000">- Update to version 049.1+suse.152.g8506e86f:
  * 01fips: modprobe failures during manual module loading is not fatal (bsc#bsc#1169997)
  * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
  * 95iscsi: fix ipv6 target discovery (bsc#1172807)
  * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1597838400">- Update to version 049.1+suse.156.g7d852636:
  * net-lib.sh: support infiniband network mac addresses (bsc#996146)
  * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
  * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
  * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)</changelog>
  <changelog author="Daniel Molkentin &lt;daniel.molkentin@suse.com&gt;" date="1604923200">- Update to version 049.1+suse.171.g65b2addf:
  * dracut.sh: FIPS workaround for openssl-libs (bsc#1178217)
  * 01fips: turn info calls into fips_info calls (bsc#1164076)
  * 00systemd: add missing cryptsetup-related targets (bsc#1177811)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1608292800">- Update to version 049.1+suse.174.g150b9981:
  * make collect optional (bsc#1177870)
  * Inclusion of dracut modifications to enable nvme-fc boot support (bsc#1142248)
  * suse.spec: add nvmf module
  * 95nvmf: Implement 'fc,auto' commandline syntax
  * 95nvmf: add nvmf-autoconnect script
  * 95nvmf: Fixup FC connections
  * 95nvmf: rework parameter handling
  * 95nvmf: fix typo in the example documentation
  * 95nvmf: add NVMe over TCP support
  * 95nvmf: add module for NVMe-oF
  Adds new module 95nvmf, see jsc#ECO-3063.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1610971200">- Update to version 049.1+suse.183.g7282fe92:
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated
    (multiple backported commits, bsc#1180119)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1613563200">- Update to version 049.1+suse.185.g9324648a:
  * 90kernel-modules: arm/arm64: Add reset controllers (bsc#1180336)
  * Prevent creating unexpected files on the host when running dracut (bsc#1176171)</changelog>
  <changelog author="thomas.blume@suse.com" date="1614686400">- Update to version 049.1+suse.186.g320cc3d1:
  * network-legacy: fix route parsing issues in ifup (bsc#1182688)
  * 90kernel-modules: arm/arm64: Add reset controllers
  * Prevent creating unexpected files on the host when running dracut
  * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1618920000">- Update to version 049.1+suse.187.g63c1504f:
  * fix(shutdown): add timeout to umount calls (bsc#1178219)</changelog>
</package>
<package pkgid="1536bc4fe7153845fe1efb3079127cf0c50fea35e07a8c0226b864c5a174278d" name="drbd-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="75e23817c586f40ab94604cce07e1a2cc336674e611014f11fadd0e816b7a48f" name="drbd-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="5d342377a800017bb5efbeb7cd1e28f1c6f83bcef67e73fb388267f2dfa6b27b" name="drbd-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="861260ff2e9208785379b42dd017bc4eaeb6addd27190d77b3c349befd3a7013" name="drbd-debugsource" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="65fd77c3864f16b096359f73a9b9fd687428f9a1fd472a17f99d0f42ff25f718" name="drbd-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.36" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="e5ca4a872d215a2d5c41dbc9d3a6ed2652e0465c28f688c3cc15b8de3cb71d98" name="drbd-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.50" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="fc827e88e00e725d2a993f64c0544f90f5ea3d64d5247a1b9a3d55cf1f48b21e" name="drbd-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.69" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="0978813f7da98cfbf21685ebfb161d6e6d71e6c074fb51bf6414f9ecae088478" name="drbd-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.72" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="381cc9383a19e46f02cc6097313e9b146ceacc0fb14301961b93661dc95f7cc6" name="drbd-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.36" rel="lp152.2.2.1"/>
  <changelog author="nwang@suse.com" date="1525348800">- Update to 9.0.14-1
  * fix regression in 9.0.13: call after-split-brain-recovery
  handlers no auto-recovery strategies (not even the default:
  disconnect) would be applied, nodes would stay connected
  and all nodes would try to become the source of the resync.
  * fix spurious temporary promotion failure: if after Primary
  loss failover happened too quickly, transparently retry internally.
  * fixup recently introduced P_ZEROES to actually work as intended
  * fix online-verify to account for skipped blocks; otherwise,
  it won't notice that it has finished, apparently being stuck
  near "100% done"
  * expose more resync and online-verify statistics and details
  * improve accounting of "in-flight" data and resync requests
  * allow taking down an already useless minor device during "down",
  even if it is (temporarily) opened by for example udev scanning
  * fix for a node staying "only" Consistent and not returning
  to UpToDate in certain scenarios when fencing is enabled
  * fix data generation UUID propagate during resync
  * compat for upstream kernels up to v4.17</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
</package>
<package pkgid="30c7763e80e17d25ddb4aaaf0beb9902cb3245f479d4b7a2814bf1f90c11ade3" name="drbd-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.50" rel="lp152.2.5.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="cc9a495f8b91b148654b0010f949f600e4b8e1749fe540cfe31170c6e6e4eaa9" name="drbd-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.69" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.0.15-1
  * fix tracking of changes (on a secondary) against the lost disk of a
  primary and also fix re-attaching in case the disk is replaced
  * fix live migrate of VMs on DRBD when migrated to/from diskless nodes
  * fix an IO deadlock in DRBD when the activity log on a secondary runs
  full
  * fix hanging demote after IO error followed by attaching the disk
  again and the corresponding resync
  * fix DRBD dopping connection after an IO error on the secondary node
  * improve details when online changing devices from diskless to with
  disk and vice versa. (Including peers freeing bitmap slots)
  * new module parameter to disable support for older protocol versions
  * improve details when online changing devices from diskless to with disk
  * remove no longer relevant compat tests
  * expose openers via debugfs
  * optimize IO submit code path
  * compat for v4.18 kernel</changelog>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
</package>
<package pkgid="53744c631c7e9835c62b515af85a49d2cca4519949666216e854bccb4663c3f5" name="drbd-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.0.22~1+git.fe2b5983_k5.3.18_lp152.72" rel="lp152.2.12.2"/>
  <changelog author="nwang@suse.com" date="1540555200">- bsc#1115606, Update to 9.0.16-1
  * Fix regression (introduced with 9.0.15) in handling request timeouts
  * Fix a possible distributed loop when establishing a connection
  * Fix a corner case in case a resync "overtakes" an other one
  * Fix clearing of the PRIMARY_LOST_QUORUM flag
  * Check peers before generating new current UUID after loosing a node
  * In case the locally configured address of a connection is not
  available keep on retrying until it comes back</changelog>
  <changelog author="nwang@suse.com" date="1542801600">- bsc#1116820, kernel compatible issue of sle15sp1
- Add patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1544443200">- bsc#1118841, kernel compatible issue.
  Have bioset_init but no bioset_initialized
- Add patch compat_no_bioset_initialized.patch
  Remove patch compat_have_mempool_init.patch</changelog>
  <changelog author="nwang@suse.com" date="1547121600">- bsc#1118732, split brain handles malfunction when 2 primaries.
- Add patch rely-on-sb-handlers.patch</changelog>
  <changelog author="nwang@suse.com" date="1553256000">- Upgrade to 9.0.17-1
  * Fix UUID handling of a diskless primary that has not peer with
  usable data may not touch the current UUID
  * Fix resync-after dependencies; cross-resource dependencies
  and missing resources
  * Fix resync when the sync source suddenly connects to a more recent
  data set via an other connection and becomes sync target on that
  other connection; pause first resync; fix wrong display of negative
  resync progress percentage in this case
  * Fix volume numbers between 32767 and 65534
  * Fix the data integrity implementation; it was broken since drbd-9.0
  and reported only false positives
  * Fix for a corner-case when a promote action happens concurrently with
  a reconciliation resync
  * Improve resync code to be able to fully utilize fast storage
  backend devices and fast networks with resync traffic; as a side
  effect the settling time of the resync controller got shorter in
  for most cases
  * Show in the user-visible message who the opener is if if demote/down
  fails doe to someone holding a drbd device open
  * docker file for a "load drbd module container" and allow to disable
  user-mode-helpers, which is necessary for this container
- Add patch fix-make-error.patch for build error of make against TW.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Upgrade to 9.0.18-1
  * Fix an IO deadlock under memory pressure
  * Fix disconnect timing in case the network connection suddenly
  drops all packets
  * Fix some misbehavior that surfaced with Ahead/Behind
  * Fix potential spinlock deadlock in IRQ
  * Minor fixes: forget-peer, _rcu iterators
  * Quickly stop resync during AHEAD/BEHIND by introducing new
  packet for that purpose.
  * The quorum feature can now use the connectivity to
  the majority of Diskless nodes as tiebreaker
  * Access meta-data using DAX if it is on persistent memory
  (NVDIMM or PMEM); For write intense workloads this is a x2 to x4 speedup!
- Remove patch fix-make-error.patch since merged into upstream(46e8e3fc)</changelog>
  <changelog author="nwang@suse.com" date="1563537600">- Update to 9.0.19-1
  * check on CAP_SYS_ADMIN instead of CAP_NET_ADMIN for certain operations
  * fix detection of unstable resync
  * fix possible stuck resync when resync started from an other secondary
  and later continued from a primary
  * fix NULL dereference with disk-timeout enabled; was introduced in 9.0.9
  * retry connect when own current UUID changes during UUID exchange
  * fix quorum tie-breaker diskless logic for settings other than "majority"
  * disable quorum tie-breaker for 0 voters
  * fix dax_direct_access() error return check
  * fix resync stuck at near completion; bug was intorduces with 9.0.17
  * unblock IO when on-quorum-lost policy is changed (suspend -&gt; io-error)
  * introduce allow-remote-read configuration option; set it to "no" for
  DR links you only want to write, but never read
  * only complain about UUID changes during initial handshake</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568030400">- bsc#1149945, update to 8e93a5d93 (drbd-9.0 branch)
  * Coccinelle support
  * compat with up to Linux-5.3
- Remove patch compat_no_bioset_initialized.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Restore higher summary specifity.
- Drop old-age %clean, %defattr.</changelog>
  <changelog author="nwang@suse.com" date="1568721600">- bsc#1146117, disallow dual primaries when not configured.
  Modify patch rely-on-sb-handles.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1151579, fix collinelle default path and always trigger in obs
  Add patch suse-coccinelle.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1570795200">- Update to drbd-9.0.20-1
  * fix a case of false split brain detection if a diskless node promotes
  multiple times, by aligning the rules for generating a new current-UUID
  on a diskless nodes with them on a node with disk
  * check if we still have quorum by exchanging a drbd-ping with peers
  before creating new current UUID after loosing one peer
  * fix after weak handling to not interfere with reconciliation resyncs
  * retry connect when one of the relevant flags changes during UUID exchange
  * fix reconciliation resync if one of the secondary got an current-UUID update
  * fix resync to make progress after it was paused by an other resync operation
  * fix false split-brains when a resync source changes current-UUID during
  resync operation
  * fix restore of D_OUTDATED when the resource first only attached and
  then the peer objects are created (in contrast to the usual, new-peer,
  attach, connect)
  * abort creating new current-UUID when writing to meta-data fails in
  the moment where the new-current-UUID should be written
  * removed DRBD marking itself as read-only when secondary; this flag
  was exposed using the BLKROGET ioctl; that should be left to user-land
  use; recent KVM checks that flag, and does not dare auto-promote when
  set by DRBD
  * fix a small memory-leak when creating peer devices
  * fix a possible information leak of kernel memory that pads net-link packets
  * completing implications of "allow-remote-read=no"; i.e.  when not to
  create a new-current-UUID as read-write access to the data set was lost;
  also fail both reads and writes if reads are no longer possible
  * new option value "rr-conflict=retry-connect"; that helps in scenarios with
  quorum where stopping a service takes longer than a temporarily network
  outage and DRBD's reconnect
  * code cleanups, introduced enums for remaining magic numbers
  * new kernel-backward-compatibility framework based on spatch/coccinelle,
  replacing an unmaintainable moloch of C preprocessor hell; Merged the
  complete kernel-compat submodule
  * ships with pre-computed compat-patches for main distros' kernels; in case
  an other kernel is found it tries to use local spatch, if that is not
  installed the build process tries to use a LINBIT hosted web service
  to create the compat patch ("spatch-as-a-service").
  * compat with up to Linux-5.3-rc2
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1576497600">- bsc#1158446, fix metadata limit due to 64k page size of ppc64le.
  add patch drbd-fix-zero-metadata-limit-by-page-size-misaligned.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1577361600">- bsc#1159333, back port patch for duplicate resync.
  add patch drbd-update-resync-target-s-dagtag.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1578052800">- bsc#1159786, fix build issue against v5.5
  add patch without_pr_warning.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to drbd-9.0.21-1, require coccinelle &gt;= 1.0.8
  * fix compat for write same on linux 4.9 and the Debian users
  * fix kernel compat for linux 4.8 and 4.9; this mainly affected Debian
  users; The symptoms where slow resync and resync getting stuck always at
  the same point
  * enable resync of lost and re-created backing devices (think lost node) when
  the backing device was thinly provisioned and its current uuid is pre-set
  to a 'day0 UUID' (by LINSTOR); that works by copying a unused bitmap slot
  which tracks all changes since day 0
  * fix attach when bitmap is on PMEM; before it was set to
  'all blocks out-of-sync' upon attach
  * avoid doing reconciliation resync multiple times by updating the
  resync target's dagtag after if completed successfully
  * return disk-state from Outdated to UpToDate when it loses connection
  while in WFBitMapT and we have a stable and UpToDate peer
  * new option --force-resync flag can be passed to new-current-uuid, that
  can be used to trigger initial resync without touching the role
- Remove upstream drbd-update-resync-target-s-dagtag.patch
- Modify patch suse-coccinelle.patch to adopt spaas</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166298, Update to drbd-9.0.22-1
  * introduce locking to avoid connection retries when UUIDs or
  relevant flags change during the exchange of this data
  * improve serialization of events after loosing a primary
  * fix a constraint in sanitize state that can caused a promote to be
  deliced by some other node
  * fix a case of a false positive detection of a split brain condition
  * allow a resync target to switch to the resync source with less
  bits out of sync
  * fix bitmap UUID after resync to use current UUID from self rather
  than sync source
  * fix pushing bitmap UUID into history when changed
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a reconciliation resync
  * fix regression introduced with 9.0.20, that can cause a missed
  resync after a promote on a diskless node
  * fix UUID handling in case a node promotes during (a short)
  reconciliation resync
  * fix removing of a diskless node when quorum is enabled</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1604404800">- bsc#1178388, build error with -Wreturn-type
  Add patch fix-err-of-wrong-return-type.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1616760000">- bsc#1183970, disconnect when invalid dual primaries
  Add patch disconnect-invalid-two-primaries.patch</changelog>
</package>
<package pkgid="16443ff4b0ee56d6c62f8bdbff6e9698adf8192d3c6878a71436aa735c8c47a2" name="drbd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="311f376164f4f9aea59f3514e110755e26bcd51f12f299aeed84c931ca3d4b56" name="drbd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
</package>
<package pkgid="6eecae211772469f5704e6411fe3ef6be8f6b55935f2be5ded7dd02cdd090c3c" name="drbd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
</package>
<package pkgid="62a49964fd6078ee338ecb06d9dfd649dc5b87729c653e8ef95c7b2574aeaec9" name="drbd-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.3.1"/>
  <changelog author="nwang@suse.com" date="1516622400">- bsc#1076936, from bwiedemann@suse.com.
  Reproducible builds support merged in upstream, but
  the changes in spec is lost.</changelog>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
</package>
<package pkgid="60ef45dfa017c2ba390a5b379bc6ddbc63d44fd1dd216da772650ff888fb79fb" name="drbd-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.6.1"/>
  <changelog author="nwang@suse.com" date="1517832000">- bsc#1077176, pass the string to backend.
- bsc#1058770, fix kernel trace while starting
  sync stacked drbd
- Add patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Add patch Support-pass-force-to-dump-md.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
</package>
<package pkgid="2def6eb747b8c5373008a610afb46175dfb461fa76903036392e825d07e51560" name="drbd-utils-debugsource" arch="x86_64">
  <version epoch="0" ver="9.13.0" rel="lp152.2.9.1"/>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.3.1
  * update to Japanese man pages
  * fixes for stacking in drbd-9.0
  * fixes for proxy support in drbd-9.0
  * fix adjusting --bitmap=no peer to diskfull
  * VCS: typos and fixes for stacked resources
- Remove upstream patch Fix-no-bitmap-allocate-for-stacked-res.patch
- Remove upstream patch Support-pass-force-to-dump-md.patch
- Remove patch fix-segfault-up-stacked-resource.patch with
  upstream fix 74b1cbb274
- drbdadm v84: fixup for disable-write-same
- Fix IPv4 &amp; IPv6 address comparisons for 'drbdadm adjust'</changelog>
  <changelog author="nwang@suse.com" date="1525953600">- Update to 9.4.0
  * drbdmeta: don't exit with negative return codes
  * usage counts: only register if we know driver version
  * drbdsetup,v9: expose detailed verify/resync statistics
  * drbdsetup,v9,json: saner types for client/peer-client/quorum
  on --json
  * drbdsetup,v9: expose client/peer-client in status if !isatty()
- Including fix for SLE12SP3:
  bsc#1064402, remove hardcoded local5 of logfacility
  bsc#1037109, drbdmeta does not propagate full bitmap</changelog>
  <changelog author="nwang@suse.com" date="1532347200">- Update to 9.5.0
  * drbdmon: allow to start in problems view (--problems)
  * drbdadm,v9: fix always failing stacked handlers from kernel
  * drbdadm,v9: adjust now hands over the information that a
  diskfull-&gt;diskless change was intentional.
  * drbdadm,v9: adjust verifies now IPs
- Remove patch: fix_call_khelper_with_stack.patch in 60ec9fa68</changelog>
  <changelog author="nwang@suse.com" date="1540900800">- bsc#1115606. Update to new upstream release 9.6.0
  * usage-count: also count notty users if possible.
  * drbd-overview: remove it, we have drbdtop/drbdmon. saves all the Perl deps.
  * drbdmon: update frequency limiting, debug log for drbdevents, use
  altbuffer,...
  * drbdsetup show: on 9 allow json output.
  mainly used in our CI, don't expect a stable field names yet.
  * drbdsetup satus: on 9 fix json output to not include NaN/Infinity
  * allow higher resync rates: first customers hit a limit. this requires an
  updated kernel module as well (e.g., 9.0.16)
  * init: fix some 8-only leftovers (sh-b-pri), sanitize the retry logic
  * doc: document various 9 features that got forgotten (e.g., quorum-lost)
  * build: various small fixes that popped up while playing with meson
- Remove patch: skip_sh-b-pri_in_v9.patch fix in ace704aac</changelog>
  <changelog author="nwang@suse.com" date="1544011200">- Update to 9.7.0
  * drbdadm,v9,v84: fix resync-after
  * drbd.ocf: connect_only_after_promote, require kernel version
  * drbdmon: display resync progress
  * parser,v9: require-drbd-module-version
  * windrbd: add WinDRBD support</changelog>
  <changelog author="nwang@suse.com" date="1547726400">- Update to 9.8.0
  * i18n: use propper po files
  * v9,stacked: allow node-id in stacked section
  but one should not use stacked with v9 anyways
  * dry run: remove trailing white space
  This eases test integration.
  Mentioned here because strictly speaking output changed.
  * regression tests: if at ./configure time "clitest" is detected,
  one can run tests via "make test". Target is a noop otherwise.
  * drbdsetup,v9: fix wait-for (same patch as in 9.7.1)
  * doc,v9:  require-drbd-module-version-*, events2 --now --poll
  * drbdadm,v9: allow stacked-on-top-of sections without address
  * drbdadm,v9: bring up only the correct paths in multi-site scenaios.
  * drbdadm,v9: fix parser segfault if node-id is missing.
  * tests: require that they pass on release.
  * drbdsetup,v9: fix key collision in show --json.
- bsc#1121794, use drbd9 man pages.</changelog>
  <changelog author="nwang@suse.com" date="1559044800">- Update to 9.9.0
  * drbdadm,v9: do not ignore stacked/upper implicit paths.
  * docker: provide initial integration.
  * doc,v9: document transport keyword
  * drbdmeta,v9: support for PMEM activity log format
  * drbdadm: allow faking of drbdsetup show output
  * drbdmeta,v9: fix forget-peer</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560254400">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="ohering@suse.de" date="1567684800">- In our effort to make /etc fully admin controlled, move /etc/xen/scripts
  to libexec/xen/scripts</changelog>
  <changelog author="nwang@suse.com" date="1567771200">- Update to 9.10.0
  * drbdmon: limit desplay lenght, minor fixes
  * drbdsetup,v9: avoid underflow when resync regresses
  * drbdmeta,v9: allow huge (~1PB volumes)
  * drbdsetup,v9: add allow-remote-read flag(9.0.19)
  * docker: switch to UBI images
  * doc: update JA doc</changelog>
  <changelog author="nwang@suse.com" date="1567771201">- Support Kernel 5.2, bsc#1149945 and bsc#1144702
- Add patch netlink-prepare-for-kernel-v5.2.patch
  Add patch netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1568980800">- bsc#1145296, fix the wrong return code with cib_apply_diff
  Add patch cibadmin-return-code-convert.patch</changelog>
  <changelog author="Richard Brown &lt;rbrown@suse.com&gt;" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1602763200">- Back port bsc#1177531, move block-drbd back to /etc/xen/scripts
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="nick wang &lt;nwang@suse.com&gt;" date="1613736000">- bsc#1182361, pacemaker2 compat issue for crm-fence-peer.9
  use --xml format of crm_mon
  Add patch crm-fence-peer-pacemaker2-format.patch
  Add patch crm-fence-peer-pacemaker2-use-xml.patch</changelog>
</package>
<package pkgid="0b1589ed88c699023638eec63297ddcdaf42348be83b712f79d4c0f833e9ae26" name="dwarves-debuginfo" arch="i586">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="9bbc3397bb6b3797e944cccd52df5963261edcda301e13474ab991599582485a" name="dwarves-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="d8413c620c8047b9cc366eb8219bab9645b79d532b69121c722794983b518fc3" name="dwarves-debugsource" arch="i586">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="72bc8815fa10c6aa3ce9ce767fb188a6414893a730d21a2f25d3079822276b47" name="dwarves-debugsource" arch="x86_64">
  <version epoch="0" ver="1.19" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1413374400">- Drop libdwarf dependency; it is not needed for build (libdw
  is used instead)</changelog>
  <changelog author="dimstar@opensuse.org" date="1421928000">- Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
  libdwarf versions: DW_TAG_mutable_type was a mistake in an early
  DWARFv3 draft and was removed in the final version.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Use cmake macros</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- dwarves needs elfutils to have the EBL plugins available
  to carry out its work. [boo#1049871]
- Update to new upstream release 1.11
  * dwarf_loader: Do not stop processing after finding
    unsupported tags
  * dwarf_loader: Support DW_FORM_data{4,8} for reading class
    member offsets
  * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
  * dwarf_loader: Add support for DW_TAG_restrict_type
  * dwarf_loader: Initial support for DW_TAG_unspecified_type
- Remove dwarves-no-DW_TAG_mutable.patch (already applied)</changelog>
  <changelog author="jengelh@inai.de" date="1534420800">- Update to new upstream release 1.12
  * Added a BTF (BPF Type Format) encoder
  * Initial support for DW_TAG_partial_unit
  * Print cacheline boundaries in multiple union members
  * Show offsets at union members</changelog>
  <changelog author="dsterba@suse.cz" date="1556712000">- version 1.13
  - Use of the recently introduced BTF deduplication algorithm
  - Introduce a 'btfdiff' utility
  - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
    and unions in the same fashion as with DWARF info
  - Better union support
  - Infer __attribute__((__packed__)) when structs have no alignment holes
  - Support DWARF5's DW_AT_alignment
  - Add a '--compile' option to 'pfunct'</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561636800">- Update to new upstream release 1.15
  * Avoid null dereference with NULL configs
  * Fixup printing "const" early with "const void"
  * Fix recursively printing named structs in --expand_types</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.16
  * btf_loader: Add support for BTF_KIND_FUNC</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584273600">- Update to release 1.17
  * Support raw BTF as available in /sys/kernel/btf/vmlinux.
  * Make --find_pointers_to consider unions.
  * Make --contains and --find_pointers_to honour --unions.
  * Add support for finding pointers to void.
  * Make --contains and --find_pointers_to to work with base types.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1589889600">- Don't require libebl-plugins on suse_version &gt;= 1550</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1599048000">- add libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport fixes for segfault when processing dwz-ed kernel
  [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
  * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1601640000">- Update to release 1.18
  * pahole now should be segfault free when handling gdb test
    suit DWARF files, including ADA, FORTRAN, rust and dwp
    compressed files (the latter is refused).
  * Bail out on partial units for now, avoiding segfaults.
- Drop
  dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
  dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
  (merged)
- Add forced ELF symvers because of ABI breaks</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1603800000">- update to 1.18_15g040fd7f (bsc#1177921):
  * btf_encoder: Support cross-compiled ELF binaries with different endianness
  * strings: use BTF's string APIs for strings management
  * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
  * dwarf_loader: increase the size of lookup hash map
  * btf_encoder: revamp how per-CPU variables are encoded
  * btf_encoder: Discard CUs after BTF encoding
  * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
  * btf_encoder: Use libbpf APIs to encode BTF type info
  * btf_loader: Use libbpf to load BTF
  * dwarves: Expose and maintain active debug info loader operations
  * btf_encoder: detect BTF encoding errors and exit
  * libbpf: Update to latest libbpf version
  * dwarf_loader: Conditionally define DW_AT_alignment
  * pahole: Implement --packed
  * man-pages: Fix 'coimbine' typo
- remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1603800001">- Add _service file / move to 1.18.g19 (863e6f0f)
  * btf_encoder: Ignore zero-sized ELF symbols</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1606219200">- Update to release 1.19
  * Support for split BTF.
  * Support cross-compiled ELF binaries with different endianness.
  * Support for showing typedefs for anonymous types, like structs,
    unions and enums.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1609934400">- Drop the version requirement of libdw-devel
  + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
    with older libdw.</changelog>
</package>
<package pkgid="0613c42217c7687b65aff25dd1c09568e7f1e1b44e9843ee2c330c63dccf8541" name="e2fsprogs-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="b51e4ed56b00b17adcd92eb8cfe540e65f81397de5d4e682266a6866314ecf3d" name="e2fsprogs-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="7fb48a06b9aa321782f00f7e93b7fd75f9c11874adaef7ea17c1fbdfe6691e3f" name="e2fsprogs-debuginfo" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="7374fc7417259e8a37b542418111ef8455878b45d285c6474887663a1ca5fc60" name="e2fsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="0c432b1ca74ed3559133bd1db631799c432d14eb6bcebf69deb8037cfaaf3ba8" name="e2fsprogs-debuginfo" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="efc944fc9f65e58ab72ab4721832b08451f28e280c4b34dbf13d474ad6a80509" name="e2fsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="f47e63c7723b79539e70d2d647eaa09537d097a4a3eb0174f57638c43ed34197" name="e2fsprogs-debugsource" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="fe01a3d57dbf9f3045b3d503a2901504346c75b2b50b8593679e17ecb96a7f98" name="e2fsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.3.1"/>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
</package>
<package pkgid="97e30641ffef4ffba8943953ea3d15333cb15bcd6d22da24b77a9bf0ffa48b54" name="e2fsprogs-debugsource" arch="i586">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="88123ff09327cc04f623b588d8773775d4d97d49bf17903aced9909d8fcd136c" name="e2fsprogs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp152.11.6.1"/>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1558008000">- e2fsck-check-and-fix-tails-of-all-bitmaps.patch: e2fsck: check and fix tails
  of all bitmap blocks (bsc#1128383)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1566993600">- libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch: libext2fs: call
  fsync(2) to clear stale errors for a new a unix I/O channel (bsc#1145716)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1569844800">- libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch: add checks to
  prevent buffer overrun bugs in quota code (bsc#1152101, CVE-2019-5094)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1573473600">- resize2fs-Make-minimum-size-estimates-more-reliable.patch: resize2fs: Make
  minimum size estimates more reliable for mounted fs (bsc#1154295)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1578571200">- e2fsck-abort-if-there-is-a-corrupted-directory-block.patch: e2fsck: abort if
  there is a corrupted directory block when rehashing (bsc#1160571
  CVE-2019-5188)
- e2fsck-don-t-try-to-rehash-a-deleted-directory.patch: 2fsck: don't try to
  rehash a deleted directory (bsc#1160571 CVE-2019-5188)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1585310400">- e2fsck-clarify-overflow-link-count-error-message.patch: e2fsck: clarify
  overflow link count error message (bsc#1160979)
- ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch: ext2fs: update
  allocation info earlier in ext2fs_mkdir() (bsc#1160979)
- ext2fs-implement-dir-entry-creation-in-htree-directo.patch: ext2fs: implement
  dir entry creation in htree directories (bsc#1160979)
- tests-add-test-to-excercise-indexed-directories-with.patch: tests: add test
  to excercise indexed directories with metadata_csum (bsc#1160979)
- tune2fs-update-dir-checksums-when-clearing-dir_index.patch: tune2fs: update
  dir checksums when clearing dir_index feature (bsc#1160979)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1592395200">- po-remove-unnecessary-buggy-positional-parameter-spe.patch: po: remove
  unnecessary/buggy positional parameter specifiers (bsc#1170964)</changelog>
  <changelog author="Jan Kara &lt;jack@suse.cz&gt;" date="1617710400">- Remove autoreconf call from e2fsprogs.spec (bsc#1183791)</changelog>
</package>
<package pkgid="ec9b139de4a40725928f297aedbc2f782b28ca17e66b2f1526683c1f969e0982" name="ebtables-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="e9b2bb2b749f2dd2db6f5d8e26505de80f55bdfebc2d59143568c811af646724" name="ebtables-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="e7c73a1b23329d49c21f2de01fb8877b1bb33614e1ef07da67732f30c5089b67" name="ebtables-debugsource" arch="i586">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="0e83f4f2c72e983106aecef6ab4f90e3be988f1c4fcc2298a3db1d19ef276f92" name="ebtables-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.10.4" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1415880000">- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
  longer exists in the mainline kernel.</changelog>
  <changelog author="kstreitova@suse.com" date="1434456000">- add ebtables-v2.0.10-4-audit.patch needed for CC certification
  [bnc#934680]</changelog>
  <changelog author="bwiedemann@suse.com" date="1440849600">- fix compilation
  add include-linux-if.patch 0001-fix-compilation-warning.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1461672000">- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
  problem with missing sed during the installation [bnc#976919]
- remove non-break space from specfile
- use spec-cleaner to clean the specfile</changelog>
  <changelog author="p.drouand@gmail.com" date="1462536000">- Add systemd support for openSUSE &gt; 12.10
- Do not depend on fillup when building with sysvinit support; the
  package doesn't provide any sysconfig file
- Change Requires(post) tag for Requires(pre); sysvinit must be
  available before the package installation, according to the policy</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- get rid of %{name} macros in the patch names
- remove sysvinit support</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300800">- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
  minor version. FATE#320520</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1520856000">- Fix ethertypes ownership, should be %exclude, not %ghost.</changelog>
  <changelog author="kstreitova@suse.com" date="1521115200">- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Move ebtables to ebtables-legacy and use update-alternatives to
  offer a selection mechanism.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1550836800">- Add upstream patches which improve handling stale locks.
  (boo#1126094)
  * 0001-Use-flock-for-concurrent-option.patch
  * 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1562760000">- fix path (/sbin -&gt; /usr/sbin) in ebtables.systemd [bsc#1140898]</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1617710400">- Fix locking when on NFS shares and use of the concurrent flag
  in a non standard order bsc#1182824
  Adds fix-concurrent-and-nfs.patch</changelog>
  <changelog author="Simon Lees &lt;simonf.lees@suse.com&gt;" date="1619784000">- Use the upstream fix rather then our fix for bsc#1182824
  * Remove fix-concurrent-and-nfs.patch
  * Add 0001-fix-concurrent-and-nfs.patch
  * Add 0002-fix-concurrent-and-nfs.patch</changelog>
</package>
<package pkgid="d37c0281160aa4d7648c31022e85431ddb7c4b1f57e04f3dd6bb5beaf136909c" name="eclipse-bootstrap-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="3b5b65b9a4650671838517c493ef3e986e4cfa4e5d177a92b2b5a6a7a7acb612" name="eclipse-bootstrap-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="b766cf45befe69c13c26c15ee5d60f0aa4701e430cce6ca12bc210a1fcdd41d9" name="eclipse-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="18204b92f254ab8dd2cb84ac3f3a4de3bb9f5b036626c9d8cb26d8cf70ca86d2" name="eclipse-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="23425105fc18af1dead3c298a9bc04c690bbeec5b3e4ad0c6054174fd0c08e76" name="eclipse-platform-bootstrap-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="6221fed4ec9aa6061a430a6d8cd7ab41bbb6f559249adb5a95f8ecbee8dc70f8" name="eclipse-platform-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="02bd43534292c8746d3237bac055a2b2c2eb65de4456ecaa1488e8e21e647f1b" name="eclipse-swt-bootstrap-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="61c6f9fb56a086d5a292004523ecb5222df073099e9e555d5b92a748972e595c" name="eclipse-swt-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.0" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573473600">- Initial packaging of eclipse 4.9.0 as a _multibuild package in
  order to allow bootstrapping</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574596800">- Added patch:
  * eclipse-ppc64.patch
    + Fix build of SWT on ppc64 big endian
- Modified patch:
  * eclipse-secondary-arches.patch
    + Fix build on ppc64 big endian</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1574942400">- Added patch:
  * eclipse-asm7.patch
    + Allow building with objectweb-asm &gt;= 7</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1575288000">- Increase memory constraint in order to correspond to reality</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1576497600">- Clean up the spec file a bit of useless bits</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1584360000">- Fix sequence of building against bootstrap/non-bootstrap packages
  in order to have a working eclipse (bsc#1166426)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1616068800">- Security fix: [bsc#1183728, CVE-2020-27225]
  * The Help Subsystem does not authenticate active help requests
    to the local help web server, allowing an unauthenticated local
    attacker to issue active help commands to the associated Eclipse
    Platform process or Eclipse Rich Client Platform process.
- Add eclipse-CVE-2020-27225.patch</changelog>
</package>
<package pkgid="fdf3e11551423b20e121014cda905a85b9a737652b2bb1d66454b3068f5cd020" name="editorconfig-core-c-debugsource" arch="i586">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="058051e9b73c39f5f42fd3571f2ea46f391d08bd171fff942fdfc6b089da4956" name="editorconfig-core-c-debugsource" arch="x86_64">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="a6ee4c4c369f6d156166f38da747a862ca0a678d4dc49c4b88c357b0f59e4a6f" name="editorconfig-debuginfo" arch="i586">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="c7bf9e92a65840f1c5e1412fa3365bc3694e6ddaa53294417dd2c503b6c404dd" name="editorconfig-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.12.3" rel="lp152.2.3.1"/>
  <changelog author="astieger@suse.com" date="1448712000">- initial package
- the editorconfig package is not currently linking dynamically
  against the library</changelog>
  <changelog author="astieger@suse.com" date="1458993600">- update to 0.12.1:
  * Fix an issue that libeditorconfig calls exit()
  * Bump required minimum cmake version to 2.8.7
  * Use GNU installation dirs for OS portability
  * Adjust for upstream changes:
    + editorconfig-core-c-0.12.0-install_paths.patch
    to editorconfig-core-c-0.12.1-install_paths.patch
    + editorconfig-core-c-0.12.0-no_timestamp.patch
    to editorconfig-core-c-0.12.1-no_timestamp.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="christophe@krop.fr" date="1502712000">- add libeditorconfig0 baselibs, needed for ktexteditor.</changelog>
  <changelog author="astieger@suse.com" date="1526644800">- update to 0.12.2:
  * Add support for pkgconfig
  * Memory leaks and crash fixes
  * Improve error messages</changelog>
  <changelog author="Herbert Graeber &lt;herbert@graeber-clan.de&gt;" date="1543924800">- update to 0.12.3:
  * Bump required minimum cmake version to 2.8.12.
  * Support pcre2 and drop support for pcre.
- use pkconfig to find libpcre2</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1598616000">- Add patch to fix crash when parsing certain files (boo#1175824):
  * 0001-fix-prevent-buffer-overflow-74.patch</changelog>
</package>
<package pkgid="778a0b5116af264d189c4c30af47d4262932c4d51c5d7423ffde2fa40f3a369c" name="efivar-debuginfo" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="2d76f0a9076860ba65623a7ec3a18da4f68bdbfc65c731ddf2b72aef06d34f16" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="992d2c1612b578cad6f9e8b9bdd035e38dc582150fb7cf97fda6bd78b449d7e1" name="efivar-debuginfo" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="97a770f480e83ab38271847bd42d27004ebbda5860f58883d0283898d6f90323" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="f63c3f22503eba87a0f4920366d3862d77c5d8921d9307ca76f1181a042375d8" name="efivar-debuginfo" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="f3668aa5700f78cdb3e49d9174d500529309c91ef79fa276a974e42982c5404a" name="efivar-debuginfo" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="a32444fc9bd3f040bd55e1d44a8bb3459073ea352859145b98c8c8f2a456d113" name="efivar-debugsource" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="014cc659943ef01854e28137224736bbfd8bf51baf7b44a643e0c741f95b0173" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.3.1"/>
  <changelog author="glin@suse.com" date="1435147200">- Add efivar-fix-vars_del_variable.patch to fix the deletion of
  the variable with the old efivar kernel modules</changelog>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
</package>
<package pkgid="5cd51283c47076daedf88fddf4ad40fb9083638954f11e60aa2e381a6a22dada" name="efivar-debugsource" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="bf2b8a851987a0d4ae668d90140a7fe0ce2993ea45dfea6de9b9237b1e8d3b2a" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.6.1"/>
  <changelog author="glin@suse.com" date="1448625600">- Update to 0.21
- Add efivar-fix-initializer.patch to initialize ifreq properly
- Drop patches
  + efivar-fix-vars_del_variable.patch: upstreamed
  + efivar-revert-linker-order.patch: not necessary</changelog>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
</package>
<package pkgid="d7a2d15a9a5c64bd2c694c5ffbb37a8536e7ee315344e663af92d5d323677fa0" name="efivar-debugsource" arch="i586">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="627504a21b0ff502d376781086ce6d5bd6f90c11086b12de53fc6ed83596c00b" name="efivar-debugsource" arch="x86_64">
  <version epoch="0" ver="37" rel="lp152.3.9.1"/>
  <changelog author="glin@suse.com" date="1448971200">- Update the source link</changelog>
  <changelog author="rguenther@suse.com" date="1455105600">- Add efivar-0.21-gcc6.diff to fix strict-aliasing issue.
- Build with -Wno-nonnull as efivar tests nonnull args for zero
  and that breaks with its use of -Werror.</changelog>
  <changelog author="glin@suse.com" date="1457524800">- Update to 0.23 for fwupdate (FATE#319345)
- Add efivar-nvme-rename.patch and efivar-nvme-no-kernel-header.patch
  to work around the missing kernel header.
- Add efivar-no-static.patch to remove efivar-static since it
  causes build failure and we don't really need it.
- Remove efivar-fix-initializer.patch since it's already in 0.23.
- Remove _smp_mflags since the Makefile doesn't work well with
  the flag.</changelog>
  <changelog author="glin@suse.com" date="1460462400">- Add the missing COPYING</changelog>
  <changelog author="glin@suse.com" date="1460548800">- Add efivar-relicensing.patch to update the license in some files</changelog>
  <changelog author="glin@suse.com" date="1468238400">- Add efivar-bsc988000-fix-mode-efi_set_variable.patch and
  efivar-bsc988000-remove-versioning-efi_set_variable.patch to set
  the default file mode rather than fetching a value randomly
  (bsc#988000)</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- deprecated-readdir_r.patch: Remove use of deprecated readdir_r</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Update to 0.24
- Drop upstreamed patches
  + efivar-0.21-gcc6.diff
  + efivar-nvme-rename.patch
  + efivar-nvme-no-kernel-header.patch
  + efivar-relicensing.patch
  + efivar-bsc988000-fix-mode-efi_set_variable.patch</changelog>
  <changelog author="rw@suse.com" date="1486382400">- Fix building for SLE11SP4, SLE12SP2, and Tumbleweed
  (fate#322108, bnc#1012765)
- Drop obsolete patch
  efivar-bsc988000-remove-versioning-efi_set_variable.patch</changelog>
  <changelog author="glin@suse.com" date="1486641600">- Add efivar-use-sysmacros.patch to fix the Factory/Tumbleweed
  build correctly.
- Amend the spec file to specify the gcc version for SLE11SP4</changelog>
  <changelog author="rw@suse.com" date="1486728000">- Update to 31  (fate#322108)
- Drop upstreamed patches
  + efivar-no-static.patch
  + deprecated-readdir_r.patch
  + efivar-use-sysmacros.patch</changelog>
  <changelog author="rw@suse.com" date="1488542400">- libefiboot-export-disk_get_partition_info.patch:
  (bsc#870211, bsc#945705)</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- RPM group fix</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 36
- adjust libefiboot-export-disk_get_partition_info.patch to fit
  new version</changelog>
  <changelog author="glin@suse.com" date="1531742400">- Downgrade to 35 (fate#326702)
  + 36 rewrote the linux interface parsers and caused several
    problems in efibootmgr. Downgrade the version before the change
    to avoid the failure of boot variable creation
    (boo#1100077, boo#1101023)
- Refresh libefiboot-export-disk_get_partition_info.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1532433600">- Add reproducible.patch to initialize memory (boo#1061219)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1550836800">- Update to 37
  + Improve ACPI device path formatting
  + Add support for SOC devices that use FDT as their PCI root node
  + Make devices we can't parse the "device" sysfs link for use
    DEV_ABBREV_ONLY
  + Handle SCSI port numbers better
  + Don't require an EUI for NVMe (boo#1100077)
  + Fix the accidental requirement on ACPI UID nodes existing
  + Add support for EMMC devices
  + Add support for PCI root nodes without a device link in sysfs
  + Add support for partitioned MD devices
  + Fix partition number detection when the number isn't provided
  + Add support for ACPI Generic Container and Embedded Controller
    root nodes (boo#1101023)
  + Add limited support for SAS/SATA port expanders
- Add upstream patches to fix boo#1120862
  + efivar-make-format_guid-handle-misaligned-guid-pointer.patch
  + efivar-Fix-all-the-places-Werror-address-of-packed-member-c.patch
- Drop upstreamed reproducible.patch
- Refresh libefiboot-export-disk_get_partition_info.patch
- Use %license for COPYING</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1552046400">- Add efivar-bsc1127544-fix-ucs2len.patch to fix logic that checks
  for UCS-2 string termination (boo#1127544)
- Add efivar-fix-efidp_ipv4_addr-fields-assignment.patch to fix the
  casting of IPv4 address.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1599566400">- Add efivar-bsc1175989-handle-NULL-set-variable.patch to fix
  segfault on non-EFI systems (bsc#1175989)
- Delete unused file: reproducible.patch</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1614686400">- Add efivar-bsc1181967-fix-nvme-parsing.patch to fix the NVME
  path parsing (bsc#1181967)</changelog>
</package>
<package pkgid="2667901e12ddc4c4481223bfe72f2e78218fd25b0d25cf11033027827c4ae240" name="emacs-debuginfo" arch="i586">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="ad3de0d4590a21ed1cfb6cbfafdeab208dd3f0c302846cb45a65f8d57660f5c9" name="emacs-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="c92f627d9674321b357134a5ac5f4a42068bc4bf8e0eade7c08fc0489e61d84f" name="emacs-debugsource" arch="i586">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="c124d78fb3d8a7b64c65dff44957f47a3f6301e39dd121c4853baa65bed43956" name="emacs-debugsource" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="04fff839688ad350f64afff0058a8000ad1ed6fabeb185832560b5461ff352cc" name="emacs-nox-debuginfo" arch="i586">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="acb4246a85441e3948006a49c7c4f2abcafdc2b10125417aebf03beb1b5d7fc6" name="emacs-nox-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="1399614e084a1e1d1e88a83119aad38eb30396d3be45ff78767ff7ed6d12f585" name="emacs-x11-debuginfo" arch="i586">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="3e702463b90bc6321202bc5b8183b202e07d91c2287f958e23190aaf29bac66a" name="emacs-x11-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="62e1e39b9b0c50f4df0abdad77081e7f76f62ebcaccfff8879898d8b867e65db" name="enchant-2-backend-aspell-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="45c48b3b2427f7a28b7e860dc95a700e79ef4cb35f9157d3a62f7d8cc1da1db7" name="enchant-2-backend-aspell-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="0ec6a894140ce2f497b001156ec50f8a91ee598eeb1d042308c225f632e04e0e" name="enchant-2-backend-hunspell-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="9700660773f1797fbc4fa8db50dbeeb25242284e3cdc0f351fdbfc45acbf16a3" name="enchant-2-backend-hunspell-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="bf17a45f7abe70b974fe482d95681cec4423cf3fffef1e0e97f359d382f0036c" name="enchant-2-backend-voikko-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="6464548006bf974466ff7f642d1a43809fe8eef8cda6fa9c66cadb26d938d9f8" name="enchant-2-backend-voikko-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="bb21680d83970d96bd0dc3bbf260050e5cb45c0d89cf55f639eec941f0d91222" name="enchant-2-backend-voikko-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="ee0500811cbf70f626c2d22dfa140fd876139e1bf502637eb3316436979253bf" name="enchant-debugsource" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="78a63d43bfad88c8a355deedfd5b57ba2ea34c118824a43f513cd58746051409" name="enchant-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="08471b3e87048d9b3208c4a09aa3b64ced0d6a5249e4fb0cfb6740ae02656de1" name="enchant-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="031a11529a589108fca92dadbafdaca540e03d7688ff73971a1631edda37c2a5" name="enchant-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1462190400">- Add enchant-hunspell-1.4.0.patch: Fix build against
  hunspell 1.4.0, where MAXWORDLEN is no longer exported.</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- aspell to be removed from factory (bsc#1052949, FATE#323578).</changelog>
  <changelog author="dimstar@opensuse.org" date="1513166400">- Update to version 2.2.0:
  + Improves support for parallel installation with other major
    versions of Enchant (specifically for man pages).
  + Fix relocation support.
  + Minor documentation improvements
  + Fix a potential crash in the hspell back-end.
- Update URL to https://abiword.github.io/enchant/.
- Adjust packaging, following the shared library packaging policy
  and allowing for coexistance of enchant-1 and enchant-2 (as
  foreseen by upstream):
  + Split enchant-1-data package (providing enchant-data, generic
    name) from libenchant1.
  + Split enchant-1-backends from libenchant1: the main backends.
  + Add conflict to libenchant1 &lt; 1.6.1 to the split packages (and
    appropriate split provides).
  + Rename enchant-{voikko,zemberek} to
    enchant-2-backend-{voikko,zemberek}.
- Drop enchant-hunspell-1.4.0.patch: no longer needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Update to version 2.2.3:
  + Brown paper bag: fix 2.2.2 as intended.
- Changes from version 2.2.2:
  + Fix a bug in the build system where the test harness would try
    to delete files under root, typically the system libraries.
- Changes from version 2.2.1:
  + Fix a crash on invalid input with the hspell backend.
  + Remove some bashisms from the build system.
  + updates the Free Software Foundation?s street address.
  + Stop running some tests that fail on recent macOS.</changelog>
  <changelog author="jengelh@inai.de" date="1520683200">- Update descriptions.</changelog>
  <changelog author="badshah400@gmail.com" date="1527595200">- Fix installation of backends (bgo#1089433):
  + Drop Supplements entirely.
  + For the shared lib package, add conditional Requires on
    either/both the hunspell or voikko backends depending on
    whether the system has libhunspell and/or libvoikko installed.
  + Add a Suggests on -backend-hunspell for the case where neither
    libvoikko not libhunspell are installed.</changelog>
  <changelog author="dleuenberger@suse.com" date="1528027200">- Revert parts of last change: Still using supplementes instead of
  boolean rich deps: zypper dup from &lt; CODE15 is impossible
  otherwise.</changelog>
  <changelog author="Micha? Rostecki &lt;mrostecki@opensuse.org&gt;" date="1554292800">- Add enchant-2-backend-aspell package which provides the aspell
  backend for enchant.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1563537600">- Update to version 2.2.5:
  + Fix a memory leak in the hunspell provider.
- Changes from version 2.2.4:
  + Fix a bug in the enchant program, where words ending in non-ASCII
    characters were truncated during tokenization.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571400000">- Redownload the 2.2.5 tarball to reflect the consistent upstream
  release provided in Source.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1571659200">- Disable aspell support on SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586779200">- Enable aspell support on SLE to synchronize with Leap.</changelog>
  <changelog author="Timo Jyrinki &lt;tjyrinki@suse.com&gt;" date="1604664000">- Backport from upstream git a Voikko backend fix (bsc#1178489)
  + Add Fix_back-ends_that_want_a_NUL-terminated_string.patch</changelog>
</package>
<package pkgid="ca89dda5239450d74eb875eb6979bb08fb547a96aa6641864212a1b2f8465b64" name="etags-debuginfo" arch="i586">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="0db0c5e13016c7b1d019b5c9a3db8cb06cfefb6d40a54975c947b4412ee053ca" name="etags-debuginfo" arch="x86_64">
  <version epoch="0" ver="25.3" rel="lp152.5.3.1"/>
  <changelog author="werner@suse.de" date="1474286400">- Update to emacs version 25.1
  * Next major release
  * Xwidgets: a new feature for embedding native widgets inside Emacs buffers.
  * Emacs can now load shared/dynamic libraries (modules).
  * Network security (TLS/SSL certificate validity and the like)
  * 'C-h l' now also lists the commands that were run.
  * New option 'switch-to-buffer-in-dedicated-window'
  * The option 'even-window-heights' has been renamed to 'even-window-sizes'
  * 'terpri' gets an optional arg ENSURE to conditionally output a newline.
  * 'insert-register' now leaves point after the inserted text
  * The new variable 'term-file-aliases' replaces some files from lisp/term.
  * New variable 'system-configuration-features', listing some of the main
    features that Emacs was compiled with.
  * A password is now hidden also when typed in batch mode.
  * The Emacs pseudo-random number generator can be securely seeded.
  * New input methods: 'tamil-dvorak', 'programmer-dvorak' and 'probhat'.
  * 'M-x' suggests shorthands and ignores obsolete commands for completion.
  * Changes in undo
  * New command 'comment-line' bound to 'C-x C-;'.
  * New and improved facilities for inserting Unicode characters
  * New minor mode 'global-eldoc-mode' is enabled by default.
  * Emacs now uses "bracketed paste mode" on text terminals that support it.
  * Emacs now supports the latest version of the UBA.
  * You can access 'mouse-buffer-menu' ('C-down-mouse-1') using 'C-f10'.
  * New buffer-local 'electric-pair-local-mode'.
  * New variable 'fast-but-imprecise-scrolling' inhibits fontification
    during full screen scrolling operations.
  * New documentation command 'describe-symbol'.
  * New function 'custom-prompt-customize-unsaved-options' checks for
    unsaved customizations and prompts user to customize (if found).
  * The old 'C-x w' bindings in 'hi-lock-mode' are officially deprecated
  * New function 'bookmark-set-no-overwrite' bound to 'C-x r M'.
  * Many other details, see /usr/share/emacs/25.1/etc/NEWS
- Patch emacs-24.4.dif renamed to emacs-25.1.dif
- Patches removed as now upstream or fixed otherwise
  debbugs16737.patch
  emacs-24-0010-ELF-unexec-Correct-section-header-index.patch
  emacs-24-0011-ELF-unexec-Tidy-code.patch
  emacs-24-0012-ELF-unexec-Merge-Alpha-and-MIPS-COFF-debug-handling.patch
  emacs-24-0013-ELF-unexec-Symbol-table-patching.patch
  emacs-24-0014-ELF-unexec-_OBJC_-symbols-in-bss-sections.patch
  emacs-24-0015-ELF-unexec-R_-_NONE-relocs.patch
  emacs-24-0016-ELF-unexec-Drive-from-PT_LOAD-header-rather-than-sec.patch
  emacs-24-0017-ELF-unexec-Don-t-insert-a-new-section.patch
  emacs-24-0018-src-unexelf.c-NEW_PROGRAM_H-Remove-unused-macro-Bug-.patch
  emacs-24-0019-ELF-unexec-align-section-header.patch
  emacs-24-fix-missing-gtk-icons.patch
  emacs-24.4-bzr118021.patch
  emacs24-primarysel2.patch
  gmalloc.patch
- Patches forwarded to 25.1
  emacs-24.1-ps-mule.patch
  emacs-24.3-asian-print.patch
  emacs-24.3-iconic.patch
  emacs-24.3-x11r7.patch
  emacs-24.4-flyspell.patch
  emacs-24.4-glibc.patch
  emacs-24.4-nonvoid.patch
  emacs-24.4-ps-bdf.patch
  emacs-24.4-xim.patch</changelog>
  <changelog author="werner@suse.de" date="1474459200">- Diable experimental cairo support as it cause trouble with spacemacs
  as well as with the w3 mode</changelog>
  <changelog author="werner@suse.de" date="1478865600">- Avoid address space randomization during emacs build
- Check for active Execution Shield as this breaks emacs</changelog>
  <changelog author="werner@suse.de" date="1482235200">- Add patch emacs-25.1-custom-fonts.patch as workaround for boo#1016172</changelog>
  <changelog author="werner@suse.de" date="1488283200">- Test out release candidate of emacs bugfix release 25.2
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.
- Patch emacs-25.1.dif renamed to emacs-25.2.dif
- Modified patches emacs-24.4-glibc.patch and emacs-24.4-ps-bdf.patch</changelog>
  <changelog author="kukuk@suse.de" date="1489233600">- Add /var/games to filelist</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- also pass "-no-pie" as linkerflag to disable PIE.</changelog>
  <changelog author="werner@suse.de" date="1491220800">- Check if "-no-pie" is known to the compiler/linker</changelog>
  <changelog author="pgajdos@suse.com" date="1491998400">- build with ImageMagick 7 [bsc#1033077]
  + emacs-25.2-ImageMagick7.patch</changelog>
  <changelog author="werner@suse.de" date="1493121600">- Update to emacs version 25.2 a bugfix release
  * 'find-library', 'help-function-def' and 'help-variable-def' now run
    'find-function-after-hook'.
  * New basic face 'fixed-pitch-serif', for a fixed-width font with serifs.
    The 'Info-quoted' and 'tex-verbatim' faces inherit from it by default.
  * New variable 'use-default-font-for-symbols', for backward compatibility.
    This variable allows you to get back pre-Emacs 25 behavior where the
    font for displaying symbol and punctuation characters was always
    selected according to your fontset setup.  By default, Emacs 25 tries
    to use the default face's font for such characters, if it supports
    them, disregarding the fontsets.  Set this variable to nil to disable
    this and get back the old behavior.
  * 'electric-quote-mode' is no longer suppressed in a buffer whose
    coding system cannot represent curved quote characters.
    Instead, users can deal with the unrepresentable characters in the
    usual way when they save the buffer.
  * New variable 'inhibit-compacting-font-caches'.
    Set this variable to a non-nil value to speed up display of characters
    using large fonts, at the price of a larger memory footprint.
  * The version number of CC Mode has been changed from 5.33 to
    5.32.99, although the software itself hasn't changed.  This aims to
    reduce confusion with the standalone CC Mode 5.33 (available from
    http://cc-mode.sourceforge.net), which is a more mature version than
    the one included in Emacs 25.2.</changelog>
  <changelog author="werner@suse.de" date="1493121601">- Fix emacs.sh wrapper script to check modern dbus session (boo#1032759)</changelog>
  <changelog author="werner@suse.de" date="1493208000">- Use socket activation to get dbus up before starting emacs</changelog>
  <changelog author="werner@suse.de" date="1493726400">- Add patch gnulib.git-94e01571.patch to fix CVE-2017-7476</changelog>
  <changelog author="zaitor@opensuse.org" date="1496404800">- Add conditional emacs-25.2-xwidget.patch, and
  pkgconfig(webkit2gtk-4.0) BuildRequires; depend on latest
  webkitgtk for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- build without libgnutls-openssl-devel</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Add patch emacs-25.2-bsc1058425.patch to fix bsc#1058425
  VUL-0: emacs: GNU Emacs 25.2 enriched text remote code execution</changelog>
  <changelog author="werner@suse.de" date="1506081600">- Update to emacs version 25.3 a security release
  * * Security vulnerability related to Enriched Text mode is removed.
- Modified patches
  * emacs-24.4-ps-bdf.patch
  * emacs-25.2-ImageMagick7.patch
  * emacs-25.2-bsc1058425.patch now partly upstream
- Rename emacs-25.2.dif to emacs-25.3.dif</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch emacs-25.3-xft4x11.patch to allow emacs-x11 to use
  xft even for its menu bar (boo#1096354)</changelog>
  <changelog author="werner@suse.de" date="1529064000">- Simplify patch emacs-25.3-xft4x11.patch (from Henryk Hecht) for
  boo#1096354</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1597060800">- Add patch emacs-libX11-boo1175028.patch to fix SIGSEGV introduced
  by a security fix for libX11 (boo#1175028)</changelog>
</package>
<package pkgid="ebae9b87ee3848737171ad78c364dcb8325abee4f09cbb072588b6892a4d6184" name="evolution-data-server-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551700800">- Update to version 3.31.92:
  + [CalDAV] POST data to scheduling outbox with correct
    Content-Type.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + [OAuth2 Prompter] Show also current URL in the credentials
    prompt dialog.
  + Make the OAuth2 credentials prompt window default size a bit
    larger.
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution-data-server#87,
    glgo#GNOME/evolution-data-server#88.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554811200">- Update to version 3.32.1:
  + [Flatpak] Use a persistent location for an NSS certificate
    database.
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility.
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server!12,
    glgo#GNOME/evolution-ews#91.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Address several issues reported by Coverity Scan.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions.
  + Bugs fixed: glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution-data-server#105.
  + Updated translations.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559649600">- Add eds-issue-108.patch: Folder changes could be claimed in a
  wrong folder after APPEND, fixes glgo#GNOME/evolution#296,
  glgo#GNOME/evolution-data-server#108.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 3.32.3:
  + [IMAPx]
  - Fix a leak of CamelMessageInfo when downloading message from
    a server.
  - Prefer local search in folders fully synchronized for
    offline.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change.
  + Add workaround for D-Bus property change into get-revision
    tests.
  + Expose E-Book/Cal-BackendSExp lock.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Update overdue time immediately after the reminders' window is
    mapped.
  + Correct test for file writable test in On This Computer
    backend.
  + CamelOperation can be used by other thread while in its
    finalize().
  + Change how CamelOfflineStore goes online.
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#123,
    glgo#GNOME/evolution-data-server#190,
    glgo#GNOME/evolution-data-server#479.
- Drop eds-issue-108.patch: Fixed upstream.
- Use modern cmake_build macro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563192000">- Update to version 3.32.4:
  + Miscellaneous changes in ecmb_modify_object_sync().
  + Bugs fixed: glgo#GNOME/evolution-data-server#130,
    glgo#GNOME/evolution-data-server#479.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1567080000">- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#138,
    glgo#GNOME/evolution-data-server#142,
    glgo#GNOME/evolution#559, glgo#GNOME/evolution#568.
  + Include also CFLAGS in gtkdoc-scangobj command line
  + EDataFactory: Free backend when no client connects to it
  + Correct typo in a developer comment
  + GOA module: Run EWS autodiscovery asynchronously
  + Fix two memory leaks
  + Updated translations.
- Changes from version 3.33.90:
  + Bugs fixed: glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#137.
  + EWebDAVDiscover can report failure on success and hide
    collections
  + e_webdav_discover_dialog_new: Set default response button for
    the dialog
  + Let the message-location check also real message location in
    the search folders
  + Updated translations.
- Changes from version 3.33.4
  + Bugs fixed: glgo#GNOME/evolution-data-server#128,
    glgo#GNOME/evolution-data-server#130, glgo#GNOME/evolution#479.
  + [LDAP] Fix several memory leaks
  + Prefer built-in timezone component in
    e_cal_util_copy_timezone()
  + Fix a memory leak in e_cal_recur_generate_instances_sync()
  + Miscellaneous changes in ecmb_modify_object_sync()
  + Updated translations.
- Changes from version 3.33.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#117,
    glgo#GNOME/evolution-data-server#120,
    glgo#GNOME/evolution-data-server#121,
    glgo#GNOME/evolution-data-server#123.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change
  + Add workaround for D-Bus property change into get-revision
    tests
  + Expose E-Book/Cal-BackendSExp lock
  + Update overdue time immediately after the reminders' window is
    mapped
  + Add ESourceLocal::writable extension property
  + CamelOperation can be used by other thread while in its
    finalize()
  + Memos cannot have set reminders according to RFC 5545
  + Change how CamelOfflineStore goes online
  + [IMAPx] Prefer local search in folders fully synchronized for
    offline
  + Correct e_cal_component_get_start_plus_duration()
  + Updated translations.
- Changes from version 3.33.2:
  + The calendar part begun to use libical-glib, instead of
    libical, which includes change from API version 1.2 to 2.0.
  + The addressbook part and the calendar part changed client APIs,
    which modified also D-Bus API, thus D-Bus services' versions
    had been bumped as well.
  + All the C libraries generate GObject introspection and Vala
    bindings.
  + Bugs fixed:
    glgo#GNOME/evolution-data-server#33,
    glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#105,
    glgo#GNOME/evolution-data-server#106,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#190.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions
  + [SMTP] Log also DATA itself when SMTP logging is enabled
  + [IMAPx] Fix a leak of CamelMessageInfo when downloading message
    from a server
  + Change libebook and libedata-book APIs
  + Revert "Rename AddressBookView/CalendarView D-Bus members for
    backward compatibility"
  + Rename ECalBackendClass methods to address some gir warnings
  + Enable vala bindings for libebackend, libedata-book and
    libedata-cal
  + Correct get_/set_property() for EReminderWatcher::default-zone
  + Miscellaneous changes for issues overlooked during port to
    libical-glib
  + Updated translations.
- Changes from version 3.33.1:
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#94,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server#96,
    glgo#GNOME/evolution-data-server#98,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution-data-server#39.
  + Make sure libdb addressbooks are available before
    book-migration test
  + Fix typo: reach-ability ? reachability
  + [Flatpak] Use a persistent location for an NSS certificate
    database
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility
  + Address several issues reported by Coverity Scan
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + Avoid possible use after free caused in
    vee_folder_set_expression()
  + Bug Fixes: glgo#GNOME/evolution-data-server#136,
    glgo#GNOME/evolution-data-server#141,
    glgo#GNOME/evolution-data-server#147
    glgo#GNOME/evolution-data-server#148
    evo-glgo#GNOME/evolution-data-server#551</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568894400">- Disable docs, fails to build with gtk-doc-1.32. Issue to be filed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Add explict pkgconfig(libical) BuildRequires: Needed after the
  multibuild split of libical and libical-glib.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Miscellaneous: Correct a developer comment for
    SECTION:e-cancellable-locks.
  + Bugs fixed: glgo#GNOME/evolution-data-server#145,
    glgo#GNOME/evolution-data-server#151,
    glgo#GNOME/evolution-data-server#156, glgo#GNOME/evolution#635.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + EWeatherSource: Use g_signal_connect_object() in
    e_weather_source_parse().
  + Correct runtime warning from camel_network_service_can_reach().
  + ESoupSession: Do not presend credentials on insecure
    connections.
  + EBackend: Slightly enhance g_warning() messages with an ESource
    identification.
  + ESource: Required signals not connected after EDBusObject is
    replaced.
  + LDAP: Change how LDAP query is constructed.
  + Bugs fixed: glgo#GNOME/evolution-data-server#156,
    glgo#GNOME/evolution-data-server#159,
    glgo#GNOME/evolution-data-server#162,
    glgo#GNOME/evolution-data-server#164,
    glgo#GNOME/evolution-data-server#169,
    glgo#GNOME/evolution-data-server#173.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#177: DAV: Ignore
    404 responses on content refresh.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1579521600">- Drop libidl-devel BuildRequires: Unused since version 2.29.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-data-server-boo1182882.patch: fix buffer overrun
  when parsing base64 data (boo#1182882).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614945600">- Add CVE-2020-16117.patch: Fix crash on malformed server response
  with minimal capabilities (boo#1174712 CVE-2020-16117).
- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
  and POP3 (boo#1173910 CVE-2020-14928).</changelog>
</package>
<package pkgid="91633256b99ae3b4bf9b62be7ef6de763993150f1722e4d8d4c620f9c71301e5" name="evolution-data-server-debuginfo" arch="i586">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551700800">- Update to version 3.31.92:
  + [CalDAV] POST data to scheduling outbox with correct
    Content-Type.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + [OAuth2 Prompter] Show also current URL in the credentials
    prompt dialog.
  + Make the OAuth2 credentials prompt window default size a bit
    larger.
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution-data-server#87,
    glgo#GNOME/evolution-data-server#88.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554811200">- Update to version 3.32.1:
  + [Flatpak] Use a persistent location for an NSS certificate
    database.
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility.
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server!12,
    glgo#GNOME/evolution-ews#91.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Address several issues reported by Coverity Scan.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions.
  + Bugs fixed: glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution-data-server#105.
  + Updated translations.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559649600">- Add eds-issue-108.patch: Folder changes could be claimed in a
  wrong folder after APPEND, fixes glgo#GNOME/evolution#296,
  glgo#GNOME/evolution-data-server#108.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 3.32.3:
  + [IMAPx]
  - Fix a leak of CamelMessageInfo when downloading message from
    a server.
  - Prefer local search in folders fully synchronized for
    offline.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change.
  + Add workaround for D-Bus property change into get-revision
    tests.
  + Expose E-Book/Cal-BackendSExp lock.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Update overdue time immediately after the reminders' window is
    mapped.
  + Correct test for file writable test in On This Computer
    backend.
  + CamelOperation can be used by other thread while in its
    finalize().
  + Change how CamelOfflineStore goes online.
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#123,
    glgo#GNOME/evolution-data-server#190,
    glgo#GNOME/evolution-data-server#479.
- Drop eds-issue-108.patch: Fixed upstream.
- Use modern cmake_build macro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563192000">- Update to version 3.32.4:
  + Miscellaneous changes in ecmb_modify_object_sync().
  + Bugs fixed: glgo#GNOME/evolution-data-server#130,
    glgo#GNOME/evolution-data-server#479.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1567080000">- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#138,
    glgo#GNOME/evolution-data-server#142,
    glgo#GNOME/evolution#559, glgo#GNOME/evolution#568.
  + Include also CFLAGS in gtkdoc-scangobj command line
  + EDataFactory: Free backend when no client connects to it
  + Correct typo in a developer comment
  + GOA module: Run EWS autodiscovery asynchronously
  + Fix two memory leaks
  + Updated translations.
- Changes from version 3.33.90:
  + Bugs fixed: glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#137.
  + EWebDAVDiscover can report failure on success and hide
    collections
  + e_webdav_discover_dialog_new: Set default response button for
    the dialog
  + Let the message-location check also real message location in
    the search folders
  + Updated translations.
- Changes from version 3.33.4
  + Bugs fixed: glgo#GNOME/evolution-data-server#128,
    glgo#GNOME/evolution-data-server#130, glgo#GNOME/evolution#479.
  + [LDAP] Fix several memory leaks
  + Prefer built-in timezone component in
    e_cal_util_copy_timezone()
  + Fix a memory leak in e_cal_recur_generate_instances_sync()
  + Miscellaneous changes in ecmb_modify_object_sync()
  + Updated translations.
- Changes from version 3.33.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#117,
    glgo#GNOME/evolution-data-server#120,
    glgo#GNOME/evolution-data-server#121,
    glgo#GNOME/evolution-data-server#123.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change
  + Add workaround for D-Bus property change into get-revision
    tests
  + Expose E-Book/Cal-BackendSExp lock
  + Update overdue time immediately after the reminders' window is
    mapped
  + Add ESourceLocal::writable extension property
  + CamelOperation can be used by other thread while in its
    finalize()
  + Memos cannot have set reminders according to RFC 5545
  + Change how CamelOfflineStore goes online
  + [IMAPx] Prefer local search in folders fully synchronized for
    offline
  + Correct e_cal_component_get_start_plus_duration()
  + Updated translations.
- Changes from version 3.33.2:
  + The calendar part begun to use libical-glib, instead of
    libical, which includes change from API version 1.2 to 2.0.
  + The addressbook part and the calendar part changed client APIs,
    which modified also D-Bus API, thus D-Bus services' versions
    had been bumped as well.
  + All the C libraries generate GObject introspection and Vala
    bindings.
  + Bugs fixed:
    glgo#GNOME/evolution-data-server#33,
    glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#105,
    glgo#GNOME/evolution-data-server#106,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#190.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions
  + [SMTP] Log also DATA itself when SMTP logging is enabled
  + [IMAPx] Fix a leak of CamelMessageInfo when downloading message
    from a server
  + Change libebook and libedata-book APIs
  + Revert "Rename AddressBookView/CalendarView D-Bus members for
    backward compatibility"
  + Rename ECalBackendClass methods to address some gir warnings
  + Enable vala bindings for libebackend, libedata-book and
    libedata-cal
  + Correct get_/set_property() for EReminderWatcher::default-zone
  + Miscellaneous changes for issues overlooked during port to
    libical-glib
  + Updated translations.
- Changes from version 3.33.1:
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#94,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server#96,
    glgo#GNOME/evolution-data-server#98,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution-data-server#39.
  + Make sure libdb addressbooks are available before
    book-migration test
  + Fix typo: reach-ability ? reachability
  + [Flatpak] Use a persistent location for an NSS certificate
    database
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility
  + Address several issues reported by Coverity Scan
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + Avoid possible use after free caused in
    vee_folder_set_expression()
  + Bug Fixes: glgo#GNOME/evolution-data-server#136,
    glgo#GNOME/evolution-data-server#141,
    glgo#GNOME/evolution-data-server#147
    glgo#GNOME/evolution-data-server#148
    evo-glgo#GNOME/evolution-data-server#551</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568894400">- Disable docs, fails to build with gtk-doc-1.32. Issue to be filed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Add explict pkgconfig(libical) BuildRequires: Needed after the
  multibuild split of libical and libical-glib.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Miscellaneous: Correct a developer comment for
    SECTION:e-cancellable-locks.
  + Bugs fixed: glgo#GNOME/evolution-data-server#145,
    glgo#GNOME/evolution-data-server#151,
    glgo#GNOME/evolution-data-server#156, glgo#GNOME/evolution#635.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + EWeatherSource: Use g_signal_connect_object() in
    e_weather_source_parse().
  + Correct runtime warning from camel_network_service_can_reach().
  + ESoupSession: Do not presend credentials on insecure
    connections.
  + EBackend: Slightly enhance g_warning() messages with an ESource
    identification.
  + ESource: Required signals not connected after EDBusObject is
    replaced.
  + LDAP: Change how LDAP query is constructed.
  + Bugs fixed: glgo#GNOME/evolution-data-server#156,
    glgo#GNOME/evolution-data-server#159,
    glgo#GNOME/evolution-data-server#162,
    glgo#GNOME/evolution-data-server#164,
    glgo#GNOME/evolution-data-server#169,
    glgo#GNOME/evolution-data-server#173.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#177: DAV: Ignore
    404 responses on content refresh.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1579521600">- Drop libidl-devel BuildRequires: Unused since version 2.29.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-data-server-boo1182882.patch: fix buffer overrun
  when parsing base64 data (boo#1182882).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614945600">- Add CVE-2020-16117.patch: Fix crash on malformed server response
  with minimal capabilities (boo#1174712 CVE-2020-16117).
- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
  and POP3 (boo#1173910 CVE-2020-14928).</changelog>
</package>
<package pkgid="02b2ecf7c45ea9af8824bcf8cb11f462f1018e42ec58b886aaeb8400398e2c8a" name="evolution-data-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551700800">- Update to version 3.31.92:
  + [CalDAV] POST data to scheduling outbox with correct
    Content-Type.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + [OAuth2 Prompter] Show also current URL in the credentials
    prompt dialog.
  + Make the OAuth2 credentials prompt window default size a bit
    larger.
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution-data-server#87,
    glgo#GNOME/evolution-data-server#88.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554811200">- Update to version 3.32.1:
  + [Flatpak] Use a persistent location for an NSS certificate
    database.
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility.
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server!12,
    glgo#GNOME/evolution-ews#91.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Address several issues reported by Coverity Scan.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions.
  + Bugs fixed: glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution-data-server#105.
  + Updated translations.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559649600">- Add eds-issue-108.patch: Folder changes could be claimed in a
  wrong folder after APPEND, fixes glgo#GNOME/evolution#296,
  glgo#GNOME/evolution-data-server#108.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 3.32.3:
  + [IMAPx]
  - Fix a leak of CamelMessageInfo when downloading message from
    a server.
  - Prefer local search in folders fully synchronized for
    offline.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change.
  + Add workaround for D-Bus property change into get-revision
    tests.
  + Expose E-Book/Cal-BackendSExp lock.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Update overdue time immediately after the reminders' window is
    mapped.
  + Correct test for file writable test in On This Computer
    backend.
  + CamelOperation can be used by other thread while in its
    finalize().
  + Change how CamelOfflineStore goes online.
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#123,
    glgo#GNOME/evolution-data-server#190,
    glgo#GNOME/evolution-data-server#479.
- Drop eds-issue-108.patch: Fixed upstream.
- Use modern cmake_build macro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563192000">- Update to version 3.32.4:
  + Miscellaneous changes in ecmb_modify_object_sync().
  + Bugs fixed: glgo#GNOME/evolution-data-server#130,
    glgo#GNOME/evolution-data-server#479.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1567080000">- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#138,
    glgo#GNOME/evolution-data-server#142,
    glgo#GNOME/evolution#559, glgo#GNOME/evolution#568.
  + Include also CFLAGS in gtkdoc-scangobj command line
  + EDataFactory: Free backend when no client connects to it
  + Correct typo in a developer comment
  + GOA module: Run EWS autodiscovery asynchronously
  + Fix two memory leaks
  + Updated translations.
- Changes from version 3.33.90:
  + Bugs fixed: glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#137.
  + EWebDAVDiscover can report failure on success and hide
    collections
  + e_webdav_discover_dialog_new: Set default response button for
    the dialog
  + Let the message-location check also real message location in
    the search folders
  + Updated translations.
- Changes from version 3.33.4
  + Bugs fixed: glgo#GNOME/evolution-data-server#128,
    glgo#GNOME/evolution-data-server#130, glgo#GNOME/evolution#479.
  + [LDAP] Fix several memory leaks
  + Prefer built-in timezone component in
    e_cal_util_copy_timezone()
  + Fix a memory leak in e_cal_recur_generate_instances_sync()
  + Miscellaneous changes in ecmb_modify_object_sync()
  + Updated translations.
- Changes from version 3.33.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#117,
    glgo#GNOME/evolution-data-server#120,
    glgo#GNOME/evolution-data-server#121,
    glgo#GNOME/evolution-data-server#123.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change
  + Add workaround for D-Bus property change into get-revision
    tests
  + Expose E-Book/Cal-BackendSExp lock
  + Update overdue time immediately after the reminders' window is
    mapped
  + Add ESourceLocal::writable extension property
  + CamelOperation can be used by other thread while in its
    finalize()
  + Memos cannot have set reminders according to RFC 5545
  + Change how CamelOfflineStore goes online
  + [IMAPx] Prefer local search in folders fully synchronized for
    offline
  + Correct e_cal_component_get_start_plus_duration()
  + Updated translations.
- Changes from version 3.33.2:
  + The calendar part begun to use libical-glib, instead of
    libical, which includes change from API version 1.2 to 2.0.
  + The addressbook part and the calendar part changed client APIs,
    which modified also D-Bus API, thus D-Bus services' versions
    had been bumped as well.
  + All the C libraries generate GObject introspection and Vala
    bindings.
  + Bugs fixed:
    glgo#GNOME/evolution-data-server#33,
    glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#105,
    glgo#GNOME/evolution-data-server#106,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#190.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions
  + [SMTP] Log also DATA itself when SMTP logging is enabled
  + [IMAPx] Fix a leak of CamelMessageInfo when downloading message
    from a server
  + Change libebook and libedata-book APIs
  + Revert "Rename AddressBookView/CalendarView D-Bus members for
    backward compatibility"
  + Rename ECalBackendClass methods to address some gir warnings
  + Enable vala bindings for libebackend, libedata-book and
    libedata-cal
  + Correct get_/set_property() for EReminderWatcher::default-zone
  + Miscellaneous changes for issues overlooked during port to
    libical-glib
  + Updated translations.
- Changes from version 3.33.1:
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#94,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server#96,
    glgo#GNOME/evolution-data-server#98,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution-data-server#39.
  + Make sure libdb addressbooks are available before
    book-migration test
  + Fix typo: reach-ability ? reachability
  + [Flatpak] Use a persistent location for an NSS certificate
    database
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility
  + Address several issues reported by Coverity Scan
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + Avoid possible use after free caused in
    vee_folder_set_expression()
  + Bug Fixes: glgo#GNOME/evolution-data-server#136,
    glgo#GNOME/evolution-data-server#141,
    glgo#GNOME/evolution-data-server#147
    glgo#GNOME/evolution-data-server#148
    evo-glgo#GNOME/evolution-data-server#551</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568894400">- Disable docs, fails to build with gtk-doc-1.32. Issue to be filed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Add explict pkgconfig(libical) BuildRequires: Needed after the
  multibuild split of libical and libical-glib.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Miscellaneous: Correct a developer comment for
    SECTION:e-cancellable-locks.
  + Bugs fixed: glgo#GNOME/evolution-data-server#145,
    glgo#GNOME/evolution-data-server#151,
    glgo#GNOME/evolution-data-server#156, glgo#GNOME/evolution#635.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + EWeatherSource: Use g_signal_connect_object() in
    e_weather_source_parse().
  + Correct runtime warning from camel_network_service_can_reach().
  + ESoupSession: Do not presend credentials on insecure
    connections.
  + EBackend: Slightly enhance g_warning() messages with an ESource
    identification.
  + ESource: Required signals not connected after EDBusObject is
    replaced.
  + LDAP: Change how LDAP query is constructed.
  + Bugs fixed: glgo#GNOME/evolution-data-server#156,
    glgo#GNOME/evolution-data-server#159,
    glgo#GNOME/evolution-data-server#162,
    glgo#GNOME/evolution-data-server#164,
    glgo#GNOME/evolution-data-server#169,
    glgo#GNOME/evolution-data-server#173.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#177: DAV: Ignore
    404 responses on content refresh.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1579521600">- Drop libidl-devel BuildRequires: Unused since version 2.29.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-data-server-boo1182882.patch: fix buffer overrun
  when parsing base64 data (boo#1182882).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614945600">- Add CVE-2020-16117.patch: Fix crash on malformed server response
  with minimal capabilities (boo#1174712 CVE-2020-16117).
- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
  and POP3 (boo#1173910 CVE-2020-14928).</changelog>
</package>
<package pkgid="fec6efaf5408c89697e52b5fc1a673fcfe395cbcf720451147d1e6658d89f3c6" name="evolution-data-server-debugsource" arch="i586">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551700800">- Update to version 3.31.92:
  + [CalDAV] POST data to scheduling outbox with correct
    Content-Type.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + [OAuth2 Prompter] Show also current URL in the credentials
    prompt dialog.
  + Make the OAuth2 credentials prompt window default size a bit
    larger.
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution-data-server#87,
    glgo#GNOME/evolution-data-server#88.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554811200">- Update to version 3.32.1:
  + [Flatpak] Use a persistent location for an NSS certificate
    database.
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility.
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server!12,
    glgo#GNOME/evolution-ews#91.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Address several issues reported by Coverity Scan.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions.
  + Bugs fixed: glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution-data-server#105.
  + Updated translations.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559649600">- Add eds-issue-108.patch: Folder changes could be claimed in a
  wrong folder after APPEND, fixes glgo#GNOME/evolution#296,
  glgo#GNOME/evolution-data-server#108.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 3.32.3:
  + [IMAPx]
  - Fix a leak of CamelMessageInfo when downloading message from
    a server.
  - Prefer local search in folders fully synchronized for
    offline.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change.
  + Add workaround for D-Bus property change into get-revision
    tests.
  + Expose E-Book/Cal-BackendSExp lock.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Update overdue time immediately after the reminders' window is
    mapped.
  + Correct test for file writable test in On This Computer
    backend.
  + CamelOperation can be used by other thread while in its
    finalize().
  + Change how CamelOfflineStore goes online.
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#123,
    glgo#GNOME/evolution-data-server#190,
    glgo#GNOME/evolution-data-server#479.
- Drop eds-issue-108.patch: Fixed upstream.
- Use modern cmake_build macro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563192000">- Update to version 3.32.4:
  + Miscellaneous changes in ecmb_modify_object_sync().
  + Bugs fixed: glgo#GNOME/evolution-data-server#130,
    glgo#GNOME/evolution-data-server#479.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1567080000">- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#138,
    glgo#GNOME/evolution-data-server#142,
    glgo#GNOME/evolution#559, glgo#GNOME/evolution#568.
  + Include also CFLAGS in gtkdoc-scangobj command line
  + EDataFactory: Free backend when no client connects to it
  + Correct typo in a developer comment
  + GOA module: Run EWS autodiscovery asynchronously
  + Fix two memory leaks
  + Updated translations.
- Changes from version 3.33.90:
  + Bugs fixed: glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#137.
  + EWebDAVDiscover can report failure on success and hide
    collections
  + e_webdav_discover_dialog_new: Set default response button for
    the dialog
  + Let the message-location check also real message location in
    the search folders
  + Updated translations.
- Changes from version 3.33.4
  + Bugs fixed: glgo#GNOME/evolution-data-server#128,
    glgo#GNOME/evolution-data-server#130, glgo#GNOME/evolution#479.
  + [LDAP] Fix several memory leaks
  + Prefer built-in timezone component in
    e_cal_util_copy_timezone()
  + Fix a memory leak in e_cal_recur_generate_instances_sync()
  + Miscellaneous changes in ecmb_modify_object_sync()
  + Updated translations.
- Changes from version 3.33.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#117,
    glgo#GNOME/evolution-data-server#120,
    glgo#GNOME/evolution-data-server#121,
    glgo#GNOME/evolution-data-server#123.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change
  + Add workaround for D-Bus property change into get-revision
    tests
  + Expose E-Book/Cal-BackendSExp lock
  + Update overdue time immediately after the reminders' window is
    mapped
  + Add ESourceLocal::writable extension property
  + CamelOperation can be used by other thread while in its
    finalize()
  + Memos cannot have set reminders according to RFC 5545
  + Change how CamelOfflineStore goes online
  + [IMAPx] Prefer local search in folders fully synchronized for
    offline
  + Correct e_cal_component_get_start_plus_duration()
  + Updated translations.
- Changes from version 3.33.2:
  + The calendar part begun to use libical-glib, instead of
    libical, which includes change from API version 1.2 to 2.0.
  + The addressbook part and the calendar part changed client APIs,
    which modified also D-Bus API, thus D-Bus services' versions
    had been bumped as well.
  + All the C libraries generate GObject introspection and Vala
    bindings.
  + Bugs fixed:
    glgo#GNOME/evolution-data-server#33,
    glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#105,
    glgo#GNOME/evolution-data-server#106,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#190.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions
  + [SMTP] Log also DATA itself when SMTP logging is enabled
  + [IMAPx] Fix a leak of CamelMessageInfo when downloading message
    from a server
  + Change libebook and libedata-book APIs
  + Revert "Rename AddressBookView/CalendarView D-Bus members for
    backward compatibility"
  + Rename ECalBackendClass methods to address some gir warnings
  + Enable vala bindings for libebackend, libedata-book and
    libedata-cal
  + Correct get_/set_property() for EReminderWatcher::default-zone
  + Miscellaneous changes for issues overlooked during port to
    libical-glib
  + Updated translations.
- Changes from version 3.33.1:
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#94,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server#96,
    glgo#GNOME/evolution-data-server#98,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution-data-server#39.
  + Make sure libdb addressbooks are available before
    book-migration test
  + Fix typo: reach-ability ? reachability
  + [Flatpak] Use a persistent location for an NSS certificate
    database
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility
  + Address several issues reported by Coverity Scan
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + Avoid possible use after free caused in
    vee_folder_set_expression()
  + Bug Fixes: glgo#GNOME/evolution-data-server#136,
    glgo#GNOME/evolution-data-server#141,
    glgo#GNOME/evolution-data-server#147
    glgo#GNOME/evolution-data-server#148
    evo-glgo#GNOME/evolution-data-server#551</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568894400">- Disable docs, fails to build with gtk-doc-1.32. Issue to be filed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Add explict pkgconfig(libical) BuildRequires: Needed after the
  multibuild split of libical and libical-glib.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Miscellaneous: Correct a developer comment for
    SECTION:e-cancellable-locks.
  + Bugs fixed: glgo#GNOME/evolution-data-server#145,
    glgo#GNOME/evolution-data-server#151,
    glgo#GNOME/evolution-data-server#156, glgo#GNOME/evolution#635.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + EWeatherSource: Use g_signal_connect_object() in
    e_weather_source_parse().
  + Correct runtime warning from camel_network_service_can_reach().
  + ESoupSession: Do not presend credentials on insecure
    connections.
  + EBackend: Slightly enhance g_warning() messages with an ESource
    identification.
  + ESource: Required signals not connected after EDBusObject is
    replaced.
  + LDAP: Change how LDAP query is constructed.
  + Bugs fixed: glgo#GNOME/evolution-data-server#156,
    glgo#GNOME/evolution-data-server#159,
    glgo#GNOME/evolution-data-server#162,
    glgo#GNOME/evolution-data-server#164,
    glgo#GNOME/evolution-data-server#169,
    glgo#GNOME/evolution-data-server#173.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#177: DAV: Ignore
    404 responses on content refresh.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1579521600">- Drop libidl-devel BuildRequires: Unused since version 2.29.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-data-server-boo1182882.patch: fix buffer overrun
  when parsing base64 data (boo#1182882).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614945600">- Add CVE-2020-16117.patch: Fix crash on malformed server response
  with minimal capabilities (boo#1174712 CVE-2020-16117).
- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
  and POP3 (boo#1173910 CVE-2020-14928).</changelog>
</package>
<package pkgid="1657451413cbccebaeeff38d48f68b5b60aad926e63c2d5a2059638207bf8c22" name="evolution-data-server-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551700800">- Update to version 3.31.92:
  + [CalDAV] POST data to scheduling outbox with correct
    Content-Type.
  + Change order of CFLAGS/LDFLAGS passed to gtk-doc.
  + [OAuth2 Prompter] Show also current URL in the credentials
    prompt dialog.
  + Make the OAuth2 credentials prompt window default size a bit
    larger.
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#86,
    glgo#GNOME/evolution-data-server#87,
    glgo#GNOME/evolution-data-server#88.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554811200">- Update to version 3.32.1:
  + [Flatpak] Use a persistent location for an NSS certificate
    database.
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility.
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server!12,
    glgo#GNOME/evolution-ews#91.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Address several issues reported by Coverity Scan.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions.
  + Bugs fixed: glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution-data-server#105.
  + Updated translations.</changelog>
  <changelog author="Matej Cepl &lt;mcepl@suse.com&gt;" date="1559649600">- Add eds-issue-108.patch: Folder changes could be claimed in a
  wrong folder after APPEND, fixes glgo#GNOME/evolution#296,
  glgo#GNOME/evolution-data-server#108.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560772800">- Update to version 3.32.3:
  + [IMAPx]
  - Fix a leak of CamelMessageInfo when downloading message from
    a server.
  - Prefer local search in folders fully synchronized for
    offline.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change.
  + Add workaround for D-Bus property change into get-revision
    tests.
  + Expose E-Book/Cal-BackendSExp lock.
  + Change buffer size argument value in call of
    icalvalue_decode_ical_string().
  + Update overdue time immediately after the reminders' window is
    mapped.
  + Correct test for file writable test in On This Computer
    backend.
  + CamelOperation can be used by other thread while in its
    finalize().
  + Change how CamelOfflineStore goes online.
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#123,
    glgo#GNOME/evolution-data-server#190,
    glgo#GNOME/evolution-data-server#479.
- Drop eds-issue-108.patch: Fixed upstream.
- Use modern cmake_build macro.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563192000">- Update to version 3.32.4:
  + Miscellaneous changes in ecmb_modify_object_sync().
  + Bugs fixed: glgo#GNOME/evolution-data-server#130,
    glgo#GNOME/evolution-data-server#479.</changelog>
  <changelog author="Luke Jones &lt;luke@ljones.dev&gt;" date="1567080000">- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-data-server#68,
    glgo#GNOME/evolution-data-server#138,
    glgo#GNOME/evolution-data-server#142,
    glgo#GNOME/evolution#559, glgo#GNOME/evolution#568.
  + Include also CFLAGS in gtkdoc-scangobj command line
  + EDataFactory: Free backend when no client connects to it
  + Correct typo in a developer comment
  + GOA module: Run EWS autodiscovery asynchronously
  + Fix two memory leaks
  + Updated translations.
- Changes from version 3.33.90:
  + Bugs fixed: glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#137.
  + EWebDAVDiscover can report failure on success and hide
    collections
  + e_webdav_discover_dialog_new: Set default response button for
    the dialog
  + Let the message-location check also real message location in
    the search folders
  + Updated translations.
- Changes from version 3.33.4
  + Bugs fixed: glgo#GNOME/evolution-data-server#128,
    glgo#GNOME/evolution-data-server#130, glgo#GNOME/evolution#479.
  + [LDAP] Fix several memory leaks
  + Prefer built-in timezone component in
    e_cal_util_copy_timezone()
  + Fix a memory leak in e_cal_recur_generate_instances_sync()
  + Miscellaneous changes in ecmb_modify_object_sync()
  + Updated translations.
- Changes from version 3.33.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#108,
    glgo#GNOME/evolution-data-server#117,
    glgo#GNOME/evolution-data-server#120,
    glgo#GNOME/evolution-data-server#121,
    glgo#GNOME/evolution-data-server#123.
  + EDataBook/EDataCal: Flush GDBus connection on backend property
    change
  + Add workaround for D-Bus property change into get-revision
    tests
  + Expose E-Book/Cal-BackendSExp lock
  + Update overdue time immediately after the reminders' window is
    mapped
  + Add ESourceLocal::writable extension property
  + CamelOperation can be used by other thread while in its
    finalize()
  + Memos cannot have set reminders according to RFC 5545
  + Change how CamelOfflineStore goes online
  + [IMAPx] Prefer local search in folders fully synchronized for
    offline
  + Correct e_cal_component_get_start_plus_duration()
  + Updated translations.
- Changes from version 3.33.2:
  + The calendar part begun to use libical-glib, instead of
    libical, which includes change from API version 1.2 to 2.0.
  + The addressbook part and the calendar part changed client APIs,
    which modified also D-Bus API, thus D-Bus services' versions
    had been bumped as well.
  + All the C libraries generate GObject introspection and Vala
    bindings.
  + Bugs fixed:
    glgo#GNOME/evolution-data-server#33,
    glgo#GNOME/evolution-data-server#89,
    glgo#GNOME/evolution-data-server#105,
    glgo#GNOME/evolution-data-server#106,
    glgo#GNOME/evolution-data-server#112,
    glgo#GNOME/evolution-data-server#114,
    glgo#GNOME/evolution-data-server#116,
    glgo#GNOME/evolution-data-server#190.
  + [EWebDAVDiscover] Prevent crash on GError use in gio functions
  + [SMTP] Log also DATA itself when SMTP logging is enabled
  + [IMAPx] Fix a leak of CamelMessageInfo when downloading message
    from a server
  + Change libebook and libedata-book APIs
  + Revert "Rename AddressBookView/CalendarView D-Bus members for
    backward compatibility"
  + Rename ECalBackendClass methods to address some gir warnings
  + Enable vala bindings for libebackend, libedata-book and
    libedata-cal
  + Correct get_/set_property() for EReminderWatcher::default-zone
  + Miscellaneous changes for issues overlooked during port to
    libical-glib
  + Updated translations.
- Changes from version 3.33.1:
  + Bugs fixed: glgo#GNOME/evolution-data-server#91,
    glgo#GNOME/evolution-data-server#92,
    glgo#GNOME/evolution-data-server#94,
    glgo#GNOME/evolution-data-server#95,
    glgo#GNOME/evolution-data-server#96,
    glgo#GNOME/evolution-data-server#98,
    glgo#GNOME/evolution-data-server#99,
    glgo#GNOME/evolution-data-server#102,
    glgo#GNOME/evolution#326, glgo#GNOME/evolution-data-server#39.
  + Make sure libdb addressbooks are available before
    book-migration test
  + Fix typo: reach-ability ? reachability
  + [Flatpak] Use a persistent location for an NSS certificate
    database
  + Rename AddressBookView/CalendarView D-Bus members for backward
    compatibility
  + Address several issues reported by Coverity Scan
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + Avoid possible use after free caused in
    vee_folder_set_expression()
  + Bug Fixes: glgo#GNOME/evolution-data-server#136,
    glgo#GNOME/evolution-data-server#141,
    glgo#GNOME/evolution-data-server#147
    glgo#GNOME/evolution-data-server#148
    evo-glgo#GNOME/evolution-data-server#551</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568894400">- Disable docs, fails to build with gtk-doc-1.32. Issue to be filed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570104000">- Add explict pkgconfig(libical) BuildRequires: Needed after the
  multibuild split of libical and libical-glib.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Miscellaneous: Correct a developer comment for
    SECTION:e-cancellable-locks.
  + Bugs fixed: glgo#GNOME/evolution-data-server#145,
    glgo#GNOME/evolution-data-server#151,
    glgo#GNOME/evolution-data-server#156, glgo#GNOME/evolution#635.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + EWeatherSource: Use g_signal_connect_object() in
    e_weather_source_parse().
  + Correct runtime warning from camel_network_service_can_reach().
  + ESoupSession: Do not presend credentials on insecure
    connections.
  + EBackend: Slightly enhance g_warning() messages with an ESource
    identification.
  + ESource: Required signals not connected after EDBusObject is
    replaced.
  + LDAP: Change how LDAP query is constructed.
  + Bugs fixed: glgo#GNOME/evolution-data-server#156,
    glgo#GNOME/evolution-data-server#159,
    glgo#GNOME/evolution-data-server#162,
    glgo#GNOME/evolution-data-server#164,
    glgo#GNOME/evolution-data-server#169,
    glgo#GNOME/evolution-data-server#173.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578052800">- Update to version 3.34.3:
  + Bugs fixed: glgo#GNOME/evolution-data-server#177: DAV: Ignore
    404 responses on content refresh.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1579521600">- Drop libidl-devel BuildRequires: Unused since version 2.29.2.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + EDBusServer: Delay new module load.
  + alarm-notify: Double-free with certain types of the reminder.
  + Bugs fixed:
  - Calendar: Handle errors in file backend's refresh thread
    gracefully.
  - WebDAV: Privilege with multiple child elements not handled
    properly.
  - Broken search folder that includes all mails from other
    search folders.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-data-server-boo1182882.patch: fix buffer overrun
  when parsing base64 data (boo#1182882).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614945600">- Add CVE-2020-16117.patch: Fix crash on malformed server response
  with minimal capabilities (boo#1174712 CVE-2020-16117).
- Add CVE-2020-14928.patch: Response injection via STARTTLS in SMTP
  and POP3 (boo#1173910 CVE-2020-14928).</changelog>
</package>
<package pkgid="eab5693d856335c67d4efbb96be696accf1b83743f99c58d009a18aacf4a936a" name="evolution-ews-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Calendar invites added with the wrong time zone.
  + Fix an invalid unref call and a memory leak of an
    EEwsConnection object.
  + Bugs fixed: glgo#GNOME/evolution-ews!8,
    glgo#GNOME/evolution-ews!14.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 3.30.2:
  + Enable only Notification reminders in the calendar.
  + Treat 'Unknown' ResponseType as Needs-Action.
  + Collection backend schedules two 'populate' requests after
    going online.
  + Bugs fixed: glgo#GNOME/evolution-ews#18,
    glgo#GNOME/evolution-ews#19, glgo#GNOME/evolution-ews#21,
    glgo#GNOME/evolution-ews#23.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542456000">- Drop pkgconfig(enchant) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1544443200">- Update to version 3.30.3:
  + Make sure intltool-merge cache is created only once.
  + Calendar: Retry item download on ErrorBatchProcessingStopped
    error.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Bugs fixed: glgo#GNOME/evolution-ews#25,
    glgo#GNOME/evolution-ews#30, glgo#GNOME/evolution-ews#31,
    glgo#GNOME/evolution-ews#32.
- Changes from version 3.30.4:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + Fix a build break with glib pre-2.54 and bump libsoup version
    to 2.58.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + Bugs fixed: glgo#GNOME/evolution-ews#27,
    glgo#GNOME/evolution-ews#54.
  + Updated translations.
- Changes from version 3.31.2:
  + Make sure intltool-merge cache is created only once.
  + Bugs fixed: glgo#GNOME/evolution-ews#17,
    glgo#GNOME/evolution-ews#18, glgo#GNOME/evolution-ews#23,
    glgo#GNOME/evolution-ews#24.
  + Updated translations.
- Changes from version 3.31.2:
  + Calendar invites added with the wrong time zone.
  + Fix an invalid unref call and a memory leak of an
    EEwsConnection object.
  + Enable only Notification reminders in the calendar.
  + Treat 'Unknown' ResponseType as Needs-Action.
  + Collection backend schedules two 'populate' requests after
    going online.
  + Bugs fixed: glgo#GNOME/evolution-ews#8,
    glgo#GNOME/evolution-ews#14, glgo#GNOME/evolution-ews#19,
    glgo#GNOME/evolution-ews#21.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Implement 'exists' ESExp function in the book backend.
- Changes from version 3.31.90:
  + Use also -DCAMEL_DISABLE_DEPRECATED=1 in the maintainer mode.
  + Bugs fixed: glgo#GNOME/evolution-ews#25,
    glgo#GNOME/evolution-ews#30, glgo#GNOME/evolution-ews#31,
    glgo#GNOME/evolution-ews#32.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 3.32.1:
  + Let handle recurring task completion by the server.
  + Unreachable EWS service causes Calendar(s) to disappear.
  + Do not pass 'scope' parameter in OAuth2 requests on
    outlook.office365.com server.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix a memory leak in camel_ews_store_ensure_virtual_folders().
  + Bugs fixed: glgo#GNOME/evolution-ews#60.
- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-ews#55,
    glgo#GNOME/evolution-ews#56, glgo#GNOME/evolution-ews#57.
- Update to version 3.33.4:
  + Fix few memory leaks in e_cal_backend_ews_rid_to_index()
  + Count with an ICalTimezone without internal component in
    ewscal_set_availability_timezone().
  + Categories property cannot be deleted.
  + Bugs fixed: glgo#GNOME/evolution-ews#53.
- Update to version 3.33.3:
  + Fix issues found during 'make check'.
  + Fix some compiler warnings reported by Clang in the test code.
  + Bugs fixed: glgo#GNOME/evolution-ews#42,
    glgo#GNOME/evolution-ews#49.
- Update to version 3.33.2:
  + Add refresh interval options to non-mail sources.
  + Port to libecal-2.0 and adapt to address book API changes.
- Update to version 3.33.1:
  + Use lower-case "mailto:" consistently in the code.
  + Bugs fixed: glgo#GNOME/evolution-ews#41,
    glgo#GNOME/evolution-ews#39.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567857600">- Replace pkgconfig(libedata-cal-1.2) with
  pkgconfig(libedata-cal-2.0) BuildRequires following upstreams
  changes.
- Use autosetup and cmake_build macros.
- Stop passing -DCMAKE_SKIP_RPATH=OFF and
  - DCMAKE_BUILD_WITH_INSTALL_RPATH=ON to cmake, no longer needed.
- Replace gcc-c++ with the genric c++_compiler BuildRequires.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No code/translation changes.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568635200">- Pass --DCMAKE_SKIP_RPATH=OFF and
  - DCMAKE_BUILD_WITH_INSTALL_RPATH=ON to cmake again. Otherwise,
  the EDS backends don't have the library directory in their rpath.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Prefill email address as user name when creating new account.
  + Autodiscover: Do not change user name with RedirectAddr.
  + Bugs fixed: glgo#GNOME/evolution-ews#65,
    glgo#GNOME/evolution-ews#66, glgo#GNOME/evolution-ews#69,
    glgo#GNOME/evolution-ews#71.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + Some meetings shown as plain events.
  + Disconnect signal handlers on connection object in dispose of
    book/calendar backend.
  + Bugs fixed: glgo#GNOME/evolution-ews#64,
    glgo#GNOME/evolution-ews#70.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578225600">- Update to version 3.34.3:
  + Bug Fixes: glgo#GNOME-evolution-ews#81: Attachment flag not
    shown on messages with attachment.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + Bugs fixed:
  - Fails to create event with no duration.
  - Map 'tzone://Microsoft/Utc' to libical's 'UTC'.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-ews-boo1182882.patch: fix buffer overrun when
  parsing base64 data (boo#1182882).</changelog>
</package>
<package pkgid="34e7307036dab8bc97fdd3ac951d28b592b69030c790bdf3c3964348fb7d8bfc" name="evolution-ews-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.4" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Calendar invites added with the wrong time zone.
  + Fix an invalid unref call and a memory leak of an
    EEwsConnection object.
  + Bugs fixed: glgo#GNOME/evolution-ews!8,
    glgo#GNOME/evolution-ews!14.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 3.30.2:
  + Enable only Notification reminders in the calendar.
  + Treat 'Unknown' ResponseType as Needs-Action.
  + Collection backend schedules two 'populate' requests after
    going online.
  + Bugs fixed: glgo#GNOME/evolution-ews#18,
    glgo#GNOME/evolution-ews#19, glgo#GNOME/evolution-ews#21,
    glgo#GNOME/evolution-ews#23.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1542456000">- Drop pkgconfig(enchant) BuildRequires: No longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1544443200">- Update to version 3.30.3:
  + Make sure intltool-merge cache is created only once.
  + Calendar: Retry item download on ErrorBatchProcessingStopped
    error.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549627200">- Update to version 3.30.5:
  + Bugs fixed: glgo#GNOME/evolution-ews#25,
    glgo#GNOME/evolution-ews#30, glgo#GNOME/evolution-ews#31,
    glgo#GNOME/evolution-ews#32.
- Changes from version 3.30.4:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713600">- Update to version 3.31.3:
  + Fix a build break with glib pre-2.54 and bump libsoup version
    to 2.58.
  + Correct how extra compiler warnings are used in the maintainer
    mode.
  + Bugs fixed: glgo#GNOME/evolution-ews#27,
    glgo#GNOME/evolution-ews#54.
  + Updated translations.
- Changes from version 3.31.2:
  + Make sure intltool-merge cache is created only once.
  + Bugs fixed: glgo#GNOME/evolution-ews#17,
    glgo#GNOME/evolution-ews#18, glgo#GNOME/evolution-ews#23,
    glgo#GNOME/evolution-ews#24.
  + Updated translations.
- Changes from version 3.31.2:
  + Calendar invites added with the wrong time zone.
  + Fix an invalid unref call and a memory leak of an
    EEwsConnection object.
  + Enable only Notification reminders in the calendar.
  + Treat 'Unknown' ResponseType as Needs-Action.
  + Collection backend schedules two 'populate' requests after
    going online.
  + Bugs fixed: glgo#GNOME/evolution-ews#8,
    glgo#GNOME/evolution-ews#14, glgo#GNOME/evolution-ews#19,
    glgo#GNOME/evolution-ews#21.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549713601">- Update to version 3.31.4:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550577600">- Update to version 3.31.91:
  + Implement 'exists' ESExp function in the book backend.
- Changes from version 3.31.90:
  + Use also -DCAMEL_DISABLE_DEPRECATED=1 in the maintainer mode.
  + Bugs fixed: glgo#GNOME/evolution-ews#25,
    glgo#GNOME/evolution-ews#30, glgo#GNOME/evolution-ews#31,
    glgo#GNOME/evolution-ews#32.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 3.32.1:
  + Let handle recurring task completion by the server.
  + Unreachable EWS service causes Calendar(s) to disappear.
  + Do not pass 'scope' parameter in OAuth2 requests on
    outlook.office365.com server.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557144000">- Update to version 3.32.2:
  + Use lower-case "mailto:" consistently in the code.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix a memory leak in camel_ews_store_ensure_virtual_folders().
  + Bugs fixed: glgo#GNOME/evolution-ews#60.
- Update to version 3.33.91:
  + Bugs fixed: glgo#GNOME/evolution-ews#55,
    glgo#GNOME/evolution-ews#56, glgo#GNOME/evolution-ews#57.
- Update to version 3.33.4:
  + Fix few memory leaks in e_cal_backend_ews_rid_to_index()
  + Count with an ICalTimezone without internal component in
    ewscal_set_availability_timezone().
  + Categories property cannot be deleted.
  + Bugs fixed: glgo#GNOME/evolution-ews#53.
- Update to version 3.33.3:
  + Fix issues found during 'make check'.
  + Fix some compiler warnings reported by Clang in the test code.
  + Bugs fixed: glgo#GNOME/evolution-ews#42,
    glgo#GNOME/evolution-ews#49.
- Update to version 3.33.2:
  + Add refresh interval options to non-mail sources.
  + Port to libecal-2.0 and adapt to address book API changes.
- Update to version 3.33.1:
  + Use lower-case "mailto:" consistently in the code.
  + Bugs fixed: glgo#GNOME/evolution-ews#41,
    glgo#GNOME/evolution-ews#39.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567857600">- Replace pkgconfig(libedata-cal-1.2) with
  pkgconfig(libedata-cal-2.0) BuildRequires following upstreams
  changes.
- Use autosetup and cmake_build macros.
- Stop passing -DCMAKE_SKIP_RPATH=OFF and
  - DCMAKE_BUILD_WITH_INSTALL_RPATH=ON to cmake, no longer needed.
- Replace gcc-c++ with the genric c++_compiler BuildRequires.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No code/translation changes.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568635200">- Pass --DCMAKE_SKIP_RPATH=OFF and
  - DCMAKE_BUILD_WITH_INSTALL_RPATH=ON to cmake again. Otherwise,
  the EDS backends don't have the library directory in their rpath.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Prefill email address as user name when creating new account.
  + Autodiscover: Do not change user name with RedirectAddr.
  + Bugs fixed: glgo#GNOME/evolution-ews#65,
    glgo#GNOME/evolution-ews#66, glgo#GNOME/evolution-ews#69,
    glgo#GNOME/evolution-ews#71.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574424000">- Update to version 3.34.2:
  + Some meetings shown as plain events.
  + Disconnect signal handlers on connection object in dispose of
    book/calendar backend.
  + Bugs fixed: glgo#GNOME/evolution-ews#64,
    glgo#GNOME/evolution-ews#70.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578225600">- Update to version 3.34.3:
  + Bug Fixes: glgo#GNOME-evolution-ews#81: Attachment flag not
    shown on messages with attachment.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581681600">- Update to version 3.34.4:
  + Bugs fixed:
  - Fails to create event with no duration.
  - Map 'tzone://Microsoft/Utc' to libical's 'UTC'.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1614772800">- Add evolution-ews-boo1182882.patch: fix buffer overrun when
  parsing base64 data (boo#1182882).</changelog>
</package>
<package pkgid="d5c4b07445be835aea5c060b092fba96ea297772b2804c348a2ad4223b11f8ab" name="exim-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="lp152.8.3.1"/>
  <changelog author="kbabioch@suse.com" date="1518523200">- update to 4.90.1
  * Allow PKG_CONFIG_PATH to be set in Local/Makefile and use it correctly
    during configuration.  Wildcards are allowed and expanded.
  * Shorten the log line for daemon startup by collapsing adjacent sets of
    identical IP addresses on different listening ports.  Will also affect
    "exiwhat" output.
  * Tighten up the checking in isip4 (et al): dotted-quad components larger
    than 255 are no longer allowed.
  * Default openssl_options to include +no_ticket, to reduce load on peers.
    Disable the session-cache too, which might reduce our load.  Since we
    currrectly use a new context for every connection, both as server and
    client, there is no benefit for these.
  * Add $SOURCE_DATE_EPOCH support for reproducible builds, per spec at
    &lt;https://reproducible-builds.org/specs/source-date-epoch/&gt;.
  * Fix smtp transport use of limited max_rcpt under mua_wrapper. Previously
    the check for any unsuccessful recipients did not notice the limit, and
    erroneously found still-pending ones.
  * Pipeline CHUNKING command and data together, on kernels that support
    MSG_MORE.  Only in-clear (not on TLS connections).
  * Avoid using a temporary file during transport using dkim.  Unless a
    transport-filter is involved we can buffer the headers in memory for
    creating the signature, and read the spool data file once for the
    signature and again for transmission.
  * Enable use of sendfile in Linux builds as default.  It was disabled in
    4.77 as the kernel support then wasn't solid, having issues in 64bit
    mode.  Now, it's been long enough.  Add support for FreeBSD also.
  * Add commandline_checks_require_admin option.
  * Do pipelining under TLS.
  * For the "sock" variant of the malware scanner interface, accept an empty
    cmdline element to get the documented default one.  Previously it was
    inaccessible.
  * Prevent repeated use of -p/-oMr
  * DKIM: enforce the DNS pubkey record "h" permitted-hashes optional field,
    if present.
  * DKIM: when a message has multiple signatures matching an identity given
    in dkim_verify_signers, run the dkim acl once for each.
  * Support IDNA2008.
  * The path option on a pipe transport is now expanded before use
  * Have the EHLO response advertise VRFY, if there is a vrfy ACL defined.
- Several bug fixes
- Fix for buffer overflow in base64decode() (bsc#1079832 CVE-2018-6789)
- removed patches (included upstream now):
  * exim-CVE-2017-1000369.patch
  * exim-CVE-2017-16943.patch
  * exim-CVE-2017-16944.patch
  * exim-4.86.2-mariadb_102_compile_fix.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
</package>
<package pkgid="f748b5f8fece452177e114de4ace5ab4bbd32fb3bf18963b597fbdc0f52d295e" name="exim-debugsource" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="lp152.8.3.1"/>
  <changelog author="kbabioch@suse.com" date="1518523200">- update to 4.90.1
  * Allow PKG_CONFIG_PATH to be set in Local/Makefile and use it correctly
    during configuration.  Wildcards are allowed and expanded.
  * Shorten the log line for daemon startup by collapsing adjacent sets of
    identical IP addresses on different listening ports.  Will also affect
    "exiwhat" output.
  * Tighten up the checking in isip4 (et al): dotted-quad components larger
    than 255 are no longer allowed.
  * Default openssl_options to include +no_ticket, to reduce load on peers.
    Disable the session-cache too, which might reduce our load.  Since we
    currrectly use a new context for every connection, both as server and
    client, there is no benefit for these.
  * Add $SOURCE_DATE_EPOCH support for reproducible builds, per spec at
    &lt;https://reproducible-builds.org/specs/source-date-epoch/&gt;.
  * Fix smtp transport use of limited max_rcpt under mua_wrapper. Previously
    the check for any unsuccessful recipients did not notice the limit, and
    erroneously found still-pending ones.
  * Pipeline CHUNKING command and data together, on kernels that support
    MSG_MORE.  Only in-clear (not on TLS connections).
  * Avoid using a temporary file during transport using dkim.  Unless a
    transport-filter is involved we can buffer the headers in memory for
    creating the signature, and read the spool data file once for the
    signature and again for transmission.
  * Enable use of sendfile in Linux builds as default.  It was disabled in
    4.77 as the kernel support then wasn't solid, having issues in 64bit
    mode.  Now, it's been long enough.  Add support for FreeBSD also.
  * Add commandline_checks_require_admin option.
  * Do pipelining under TLS.
  * For the "sock" variant of the malware scanner interface, accept an empty
    cmdline element to get the documented default one.  Previously it was
    inaccessible.
  * Prevent repeated use of -p/-oMr
  * DKIM: enforce the DNS pubkey record "h" permitted-hashes optional field,
    if present.
  * DKIM: when a message has multiple signatures matching an identity given
    in dkim_verify_signers, run the dkim acl once for each.
  * Support IDNA2008.
  * The path option on a pipe transport is now expanded before use
  * Have the EHLO response advertise VRFY, if there is a vrfy ACL defined.
- Several bug fixes
- Fix for buffer overflow in base64decode() (bsc#1079832 CVE-2018-6789)
- removed patches (included upstream now):
  * exim-CVE-2017-1000369.patch
  * exim-CVE-2017-16943.patch
  * exim-CVE-2017-16944.patch
  * exim-4.86.2-mariadb_102_compile_fix.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
</package>
<package pkgid="6789bb3e45d2a92e83aba5dd0919c9c1589a25633383e5bf6792ea6e9aa82193" name="eximon-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.94.2" rel="lp152.8.3.1"/>
  <changelog author="kbabioch@suse.com" date="1518523200">- update to 4.90.1
  * Allow PKG_CONFIG_PATH to be set in Local/Makefile and use it correctly
    during configuration.  Wildcards are allowed and expanded.
  * Shorten the log line for daemon startup by collapsing adjacent sets of
    identical IP addresses on different listening ports.  Will also affect
    "exiwhat" output.
  * Tighten up the checking in isip4 (et al): dotted-quad components larger
    than 255 are no longer allowed.
  * Default openssl_options to include +no_ticket, to reduce load on peers.
    Disable the session-cache too, which might reduce our load.  Since we
    currrectly use a new context for every connection, both as server and
    client, there is no benefit for these.
  * Add $SOURCE_DATE_EPOCH support for reproducible builds, per spec at
    &lt;https://reproducible-builds.org/specs/source-date-epoch/&gt;.
  * Fix smtp transport use of limited max_rcpt under mua_wrapper. Previously
    the check for any unsuccessful recipients did not notice the limit, and
    erroneously found still-pending ones.
  * Pipeline CHUNKING command and data together, on kernels that support
    MSG_MORE.  Only in-clear (not on TLS connections).
  * Avoid using a temporary file during transport using dkim.  Unless a
    transport-filter is involved we can buffer the headers in memory for
    creating the signature, and read the spool data file once for the
    signature and again for transmission.
  * Enable use of sendfile in Linux builds as default.  It was disabled in
    4.77 as the kernel support then wasn't solid, having issues in 64bit
    mode.  Now, it's been long enough.  Add support for FreeBSD also.
  * Add commandline_checks_require_admin option.
  * Do pipelining under TLS.
  * For the "sock" variant of the malware scanner interface, accept an empty
    cmdline element to get the documented default one.  Previously it was
    inaccessible.
  * Prevent repeated use of -p/-oMr
  * DKIM: enforce the DNS pubkey record "h" permitted-hashes optional field,
    if present.
  * DKIM: when a message has multiple signatures matching an identity given
    in dkim_verify_signers, run the dkim acl once for each.
  * Support IDNA2008.
  * The path option on a pipe transport is now expanded before use
  * Have the EHLO response advertise VRFY, if there is a vrfy ACL defined.
- Several bug fixes
- Fix for buffer overflow in base64decode() (bsc#1079832 CVE-2018-6789)
- removed patches (included upstream now):
  * exim-CVE-2017-1000369.patch
  * exim-CVE-2017-16943.patch
  * exim-CVE-2017-16944.patch
  * exim-4.86.2-mariadb_102_compile_fix.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521115200">- Replace xorg-x11-devel by individual pkgconfig() buildrequires.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1523880000">- update to 4.91
  * DEFER rather than ERROR on redis cluster MOVED response.
  * Catch and remove uninitialized value warning in exiqsumm
  * Disallow '/' characters in queue names specified for the "queue=" ACL
    modifier.  This matches the restriction on the commandline.
  * Fix pgsql lookup for multiple result-tuples with a single column.
    Previously only the last row was returned.
  * Bug 2217: Tighten up the parsing of DKIM signature headers.
  * Bug 2215: Fix crash associated with dnsdb lookup done from DKIM ACL.
  * Fix issue with continued-connections when the DNS shifts unreliably.
  * Bug 2214: Fix SMTP responses resulting from non-accept result of MIME ACL.
  * The "support for" informational output now, which built with Content
  Scanning support, has a line for the malware scanner interfaces compiled
  in.  Interface can be individually included or not at build time.
  * The "aveserver", "kavdaemon" and "mksd" interfaces are now not included
  by the template makefile "src/EDITME".  The "STREAM" support for an older
  ClamAV interface method is removed.
  * Bug 2223: Fix mysql lookup returns for the no-data case (when the number of
  rows affected is given instead).
  * The runtime Berkeley DB library version is now additionally output by
  "exim -d -bV".  Previously only the compile-time version was shown.
  * Bug 2230: Fix cutthrough routing for nonfirst messages in an initiating
  SMTP connection.
  * Bug 2229: Fix cutthrough routing for nonstandard port numbers defined by
  routers.
  * Bug 2174: A timeout on connect for a callout was also erroneously seen as
  a timeout on read on a GnuTLS initiating connection, resulting in the
  initiating connection being dropped.
  * Relax results from ACL control request to enable cutthrough, in
  unsupported situations, from error to silently (except under debug)
  ignoring.
  * Fix Buffer overflow in base64d() (CVE-2018-6789)
  * Fix bug in DKIM verify: a buffer overflow could corrupt the malloc
  metadata, resulting in a crash in free().
  * Fix broken Heimdal GSSAPI authenticator integration.
  * Bug 2113: Fix conversation closedown with the Avast malware scanner.
  * Bug 2239: Enforce non-usability of control=utf8_downconvert in the mail ACL.
  * Speed up macro lookups during configuration file read, by skipping non-
  macro text after a replacement (previously it was only once per line) and
  by skipping builtin macros when searching for an uppercase lead character.
  * DANE support moved from Experimental to mainline.  The Makefile control
  for the build is renamed.
  * Fix memory leak during multi-message connections using STARTTLS.
  * Bug 2236: When a DKIM verification result is overridden by ACL, DMARC
  reported the original.  Fix to report (as far as possible) the ACL
  result replacing the original.
  * Fix memory leak during multi-message connections using STARTTLS under
  OpenSSL
  * Bug 2242: Fix exim_dbmbuild to permit directoryless filenames.
  * Fix utf8_downconvert propagation through a redirect router.
  * Bug 2253: For logging delivery lines under PRDR, append the overall
  DATA response info to the (existing) per-recipient response info for
  the "C=" log element.
  * Bug 2251: Fix ldap lookups that return a single attribute having zero-
  length value.
  * Support Avast multiline protocol, this allows passing flags to
  newer versions of the scanner.
  * Ensure that variables possibly set during message acceptance are marked
    dead before release of memory in the daemon loop.
  * Bug 2250: Fix a longstanding bug in heavily-pipelined SMTP input (such
  as a multi-recipient message from a mailinglist manager).
  * The (EXPERIMENTAL_DMARC) variable $dmarc_ar_header is withdrawn, being
  replaced by the ${authresults } expansion.
  * Bug 2257: Fix pipe transport to not use a socket-only syscall.
  * Set a handler for SIGTERM and call exit(3) if running as PID 1. This
  allows proper process termination in container environments.
  * Bug 2258: Fix spool_wireformat in combination with LMTP transport.
  Previously the "final dot" had a newline after it; ensure it is CR,LF.
  * SPF: remove support for the "spf" ACL condition outcome values "err_temp"
  and "err_perm", deprecated since 4.83 when the RFC-defined words
  " temperror" and "permerror" were introduced.
  * Re-introduce enforcement of no cutthrough delivery on transports having
  transport-filters or DKIM-signing.
  * Cutthrough: for a final-dot response timeout (and nonunderstood responses)
  in defer=pass mode supply a 450 to the initiator.  Previously the message
    would be spooled.
  * DANE: add dane_require_tls_ciphers SMTP Transport option; if unset,
    tls_require_ciphers is used as before.
  * Malware Avast: Better match the Avast multiline protocol.
  * Fix reinitialisation of DKIM logging variable between messages.
  * Bug 2255: Revert the disable of the OpenSSL session caching.
  * Add util/renew-opendmarc-tlds.sh script for safe renewal of public
  suffix list.
  * DKIM: accept Ed25519 pubkeys in SubjectPublicKeyInfo-wrapped form,
  since the IETF WG has not yet settled on that versus the original
  "bare" representation.
  * Fix syslog logging for syslog_timestamp=no and log_selector +millisec.
  Previously the millisecond value corrupted the output.
  Fix also for syslog_pid=no and log_selector +pid, for which the pid
  corrupted the output.</changelog>
  <changelog author="seanlew@opensuse.org" date="1553342400">- update to exim 4.92
  * ${l_header:&lt;name&gt;} expansion
  * ${readsocket} now supports TLS
  * "utf8_downconvert" option (if built with SUPPORT_I18N)
  * "pipelining" log_selector
  * JSON variants for ${extract } expansion
  * "noutf8" debug option
  * TCP Fast Open support on MacOS
  * CVE-2019-10149: Fixed a Remote Command Execution (bsc#1136587)
- add workaround patch for compile time error on missing printf
  format annotation (gnu_printf.patch)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1559736000">- spec file cleanup
  * fix DANE inclusion guard condition
  * re-enable i18n and remove misleading comment
  * EXPERIMENTAL_SPF is now SUPPORT_SPF
  * DANE is now SUPPORT_DANE</changelog>
  <changelog author="alex &lt;atoptsoglou@suse.com&gt;" date="1564056000">- update to exim 4.92.1
  * CVE-2019-13917: Fixed an issue with ${sort} expansion which could
  allow remote attackers to execute other programs with root privileges
  (boo#1142207)</changelog>
  <changelog author="poeml@cmdline.net" date="1567857600">- update to exim 4.92.2
  * CVE-2019-15846: fix against remote attackers executing arbitrary code as
    root via a trailing backslash</changelog>
  <changelog author="poeml@cmdline.net" date="1569844800">- update to exim 4.92.3
  * CVE-2019-16928: fix against Heap-based buffer overflow in string_vformat,
    remote code execution seems to be possible</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1575892800">- update to exim 4.93
  * SUPPORT_DMARC replaces EXPERIMENTAL_DMARC
  * DISABLE_TLS replaces SUPPORT_TLS
  * Bump the version for the local_scan API.
  * smtp transport option hosts_try_fastopen defaults to "*".
  * DNSSec is requested (not required) for all queries. (This seemes to
    ask for trouble if your resolver is a systemd-resolved.)
  * Generic router option retry_use_local_part defaults to "true" under specific
    pre-conditions.
  * Introduce a tainting mechanism for values read from untrusted sources.
  * Use longer file names for temporary spool files (this avoids
    name conflicts with spool on a shared file system).
  * Use dsn_from main config option (was ignored previously).</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1577966400">spec file cleanup to make update work
- add docdir to spec</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578398400">- update to exim 4.93.0.4 (+fixes release)
  * Avoid costly startup code when not strictly needed.  This reduces time
    for some exim process initialisations.  It does mean that the logging
    of TLS configuration problems is only done for the daemon startup.
  * Early-pipelining support code is now included unless disabled in Makefile.
  * DKIM verification defaults no long accept sha1 hashes, to conform to
    RFC 8301.  They can still be enabled, using the dkim_verify_hashes main
    option.
  * Support CHUNKING from an smtp transport using a transport_filter, when
    DKIM signing is being done.  Previously a transport_filter would always
    disable CHUNKING, falling back to traditional DATA.
  * Regard command-line receipients as tainted.
  * Bug 340: Remove the daemon pid file on exit, whe due to SIGTERM.
  * Bug 2489: Fix crash in the "pam" expansion condition.  It seems that the
    PAM library frees one of the arguments given to it, despite the
    documentation.  Therefore a plain malloc must be used.
  * Bug 2491: Use tainted buffers for the transport smtp context.  Previously
    on-stack buffers were used, resulting in a taint trap when DSN information
    copied from a received message was written into the buffer.
  * Bug 2493: Harden ARC verify against Outlook, whick has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.  Previously a naiive
    installation would get error messages from DMARC verify, when it hit the
    nonexistent file indicated by the default.  Distros wanting DMARC enabled
    should both provide the file and set the option.
    Also enforce no DMARC verification for command-line sourced messages.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.  The introduction of taint
    tracking also did many adjustments to string handling.  Since then, eximon
    frequently terminated with an assert failure.
  * When PIPELINING, synch after every hundred or so RCPT commands sent and
    check for 452 responses.  This slightly helps the inefficieny of doing
    a large alias-expansion into a recipient-limited target.  The max_rcpt
    transport option still applies (and at the current default, will override
    the new feature).  The check is done for either cause of synch, and forces
    a fast-retry of all 452'd recipients using a new MAIL FROM on the same
    connection.  The new facility is not tunable at this time.
  * Fix the variables set by the gsasl authenticator.  Previously a pointer to
    library live data was being used, so the results became garbage.  Make
    copies while it is still usable.
  * Logging: when the deliver_time selector ise set, include the DT= field
    on delivery deferred (==) and failed (**) lines (if a delivery was
    attemtped).  Previously it was only on completion (=&gt;) lines.
  * Authentication: the gsasl driver not provides the $authN variables in time
    for the expansion of the server_scram_iter and server_scram_salt options.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1578916800">- add a spec-file workaround for bsc#1160726</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1585742400">- don't create logfiles during install
  * fixes CVE-2020-8015 (bsc#1154183)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589284800">- bring changes from current in +fixes branch
  (patch-exim-fixes-ee83de04d3087efaf808d1f2235a988275c2ee94)
  * fixes CVE-2020-12783 (bsc#1171490)
  * Regard command-line recipients as tainted.
  * Bug 2489: Fix crash in the "pam" expansion condition.
  * Use tainted buffers for the transport smtp context.
  * Bug 2493: Harden ARC verify against Outlook, which has been seen to mix
    the ordering of its ARC headers.  This caused a crash.
  * Bug 2492: Use tainted memory for retry record when needed.  Previously when
    a new record was being constructed with information from the peer, a trap
    was taken.
  * Bug 2494: Unset the default for dmarc_tld_file.
  * Fix an uninitialised flag in early-pipelining.  Previously connections
    could, depending on the platform, hang at the STARTTLS response.
  * Bug 2498: Reset a counter used for ARC verify before handling another
    message on a connection.  Previously if one message had ARC headers and
    the following one did not, a crash could result when adding an
    Authentication-Results: header.
  * Bug 2500: Rewind some of the common-coding in string handling between the
    Exim main code and Exim-related utities.
  * Fix the variables set by the gsasl authenticator.
  * Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
    only retrieve the errormessage once.
  * Bug 2501: Fix init call in the heimdal authenticator.  Previously it
    adjusted the size of a major service buffer; this failed because the
    buffer was in use at the time.  Change to a compile-time increase in the
    buffer size, when this authenticator is compiled into exim.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1589889600">- switch pretrans to use lua
  (fixes bsc#1171877)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591099200">- update to exim 4.94
  * some transports now refuse to use tainted data in constructing their delivery
    location
    this WILL BREAK configurations which are not updated accordingly.
    In particular: any Transport use of $local_user which has been relying upon
    check_local_user far away in the Router to make it safe, should be updated to
    replace $local_user with $local_part_data.
  * Attempting to remove, in router or transport, a header name that ends with
    an asterisk (which is a standards-legal name) will now result in all headers
    named starting with the string before the asterisk being removed.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1591617600">- bring in changes from current +fixes (lots of taint check fixes)
  * Bug 1329: Fix format of Maildir-format filenames to match other mail-
    related applications.  Previously an "H" was used where available info
    says that "M" should be, so change to match.
  * Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
    as arguments, so an implementation trying to copy these into a local
    buffer was taking a taint-enforcement trap.  Fix by using dynamically
    created buffers.
  * Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
    reasonable, eg. to count headers.  Fix by using dynamically created
    buffers rather than a local.  Do similar fixes for ACL actions "dcc",
    "log_reject_target", "malware" and "spam"; the arguments are expanded
    so could be handling tainted values.
  * Bug 2590: Fix -bi (newaliases).  A previous code rearrangement had
    broken the (no-op) support for this sendmail command.  Restore it
    to doing nothing, silently, and returning good status.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1598270400">- bring back missing exim_db.8 manual page
  (fixes bsc#1173693)</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1619611200">- update to exim-4.94.1
  * Fix security issue in BDAT state confusion.
    Ensure we reset known-good where we know we need to not be reading BDAT
    data, as a general case fix, and move the places where we switch to BDAT
    mode until after various protocol state checks.
    Fixes CVE-2020-BDATA reported by Qualys.
  * Fix security issue in SMTP verb option parsing (CVE-2020-EXOPT)
  * Fix security issue with too many recipients on a message (to remove a
    known security problem if someone does set recipients_max to unlimited,
    or if local additions add to the recipient list).
    Fixes CVE-2020-RCPTL reported by Qualys.
  * Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase()
  * Fix security issue CVE-2020-PFPSN and guard against cmdline invoker
    providing a particularly obnoxious sender full name.
  * Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX
    better.</changelog>
  <changelog author="wullinger@rz.uni-kiel.de" date="1620129600">- update to exim-4.94.2
  security update (bsc#1185631)
  * CVE-2020-28007: Link attack in Exim's log directory
  * CVE-2020-28008: Assorted attacks in Exim's spool directory
  * CVE-2020-28014: Arbitrary PID file creation
  * CVE-2020-28011: Heap buffer overflow in queue_run()
  * CVE-2020-28010: Heap out-of-bounds write in main()
  * CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
  * CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
  * CVE-2020-28015: New-line injection into spool header file (local)
  * CVE-2020-28012: Missing close-on-exec flag for privileged pipe
  * CVE-2020-28009: Integer overflow in get_stdinput()
  * CVE-2020-28017: Integer overflow in receive_add_recipient()
  * CVE-2020-28020: Integer overflow in receive_msg()
  * CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
  * CVE-2020-28021: New-line injection into spool header file (remote)
  * CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
  * CVE-2020-28026: Line truncation and injection in spool_read_header()
  * CVE-2020-28019: Failure to reset function pointer after BDAT error
  * CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
  * CVE-2020-28018: Use-after-free in tls-openssl.c
  * CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()</changelog>
</package>
<package pkgid="717800b5f96919afc4afee682fdf12a430fa37db51a696a4f2bae2420e23cabb" name="f2fs-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Replace 0001-build-provide-definitions-for-byteswapping-on-big-en.patch
  with official upstream version.</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 1.4.1
  * fsck: remove corrupted data indices in direct node blocks
  * fsck/mkfs: support large sector size
  * parse.f2fs: add a tool to parse IO traces made by runtime f2fs
  * fsck: show orphan inodes when fixing partition
- Drop 0001-build-provide-definitions-for-byteswapping-on-big-en.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1453464000">- Update to new upstream release 1.6.0
  * Add a defrag utility</changelog>
  <changelog author="mpluskal@suse.com" date="1472385600">- Update to version 1.7:
  * mkfs: define DISCARD/SECDISCARD macro
  * dump.f2fs: show inode-&gt;i_dir_level
  * f2fs.fsck: fix endianess
  * fsck.f2fs: correct variable type and name
  * fsck.f2fs: fix typo
  * fsck.f2fs: free nat entry cache
  * f2fs-tools: update the format of output message
  * fsck.f2fs: clean up duplicated code
  * fsck: recover symlink with zero i_size
  * f2fs-tools: release 1.7.0
- Add f2fs-tools-1.4.0-bigendian.patch (from Fedora)
- Use _service to fetch release from upstream git
- Split lib packages and create devel package (as andoid tools
  need it)
- Link binaries from /usr/sbin to /sbin, many tools expect fsck
  and friends to be in /sbin
- Supplement f2fs filesystem</changelog>
  <changelog author="jengelh@inai.de" date="1472385601">- Trim filelists, update descriptions, move symlink collection into
  their own subpackage.</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to version 1.10.0
  * f2fs-tools: support inode creation time
  * fsck.f2fs: add -y for generic fsck
  * fsck.f2fs: support quota
  * mkfs.f2fs: support quota option in mkfs
  * f2fs-tools: support flexible inline xattr size
  * add sparse support for f2fs
  * f2fscrypt: add a tool for encryption management in f2fs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542628800">- Update to new upstream release 1.12
  * resize.f2fs: fix access out-of memory boundary
  * mkfs.f2fs: support fsverity feature
  * fsck.f2fs: fix stack overflow when reading out nat block
  * mkfs.f2fs: avoid selinux denial for unnecessary sysfs node
  * fsck.f2fs: allow -p without value
  * mkfs.f2fs: support multiple features with one "-O"
  * f2fs-tools: add -g to give default options</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.13
  * introduce some preen mode in fsck.f2fs
  * add f2fs_io tool
  * add casefolding support</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598443200">- Update to release 1.14
  * f2fs_io: add copy command
  * fsck: Check fsync data always for zoned block devices
  * fsck: Check write pointer consistency of open zones
  * fsck: Check write pointer consistency of non-open zones
  * fsck.f2fs: Enable user-space cache
  * f2fs-tools: support data compression
  * dump.f2fs: print more info of inode layout
  * resize.f2fs: add option for large_nat_bitmap feature
  * f2fs-tools: Casefolded Encryption support
  * mkfs.f2fs: allow setting volume UUID manually
  * f2fs-tools: zns zone-capacity support
  * mkfs.f2fs: add -T flag
  * mkfs.f2fs: add -r (fake_seed) flag</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606219200">- prepare usrmerge (boo#1029961)</changelog>
</package>
<package pkgid="673a49e73237ea167e910b08580f38604a9ddefbcc67135df827b6c4ddb5db01" name="f2fs-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="1.14.0" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1411473600">- Replace 0001-build-provide-definitions-for-byteswapping-on-big-en.patch
  with official upstream version.</changelog>
  <changelog author="jengelh@inai.de" date="1427544000">- Update to new upstream release 1.4.1
  * fsck: remove corrupted data indices in direct node blocks
  * fsck/mkfs: support large sector size
  * parse.f2fs: add a tool to parse IO traces made by runtime f2fs
  * fsck: show orphan inodes when fixing partition
- Drop 0001-build-provide-definitions-for-byteswapping-on-big-en.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1453464000">- Update to new upstream release 1.6.0
  * Add a defrag utility</changelog>
  <changelog author="mpluskal@suse.com" date="1472385600">- Update to version 1.7:
  * mkfs: define DISCARD/SECDISCARD macro
  * dump.f2fs: show inode-&gt;i_dir_level
  * f2fs.fsck: fix endianess
  * fsck.f2fs: correct variable type and name
  * fsck.f2fs: fix typo
  * fsck.f2fs: free nat entry cache
  * f2fs-tools: update the format of output message
  * fsck.f2fs: clean up duplicated code
  * fsck: recover symlink with zero i_size
  * f2fs-tools: release 1.7.0
- Add f2fs-tools-1.4.0-bigendian.patch (from Fedora)
- Use _service to fetch release from upstream git
- Split lib packages and create devel package (as andoid tools
  need it)
- Link binaries from /usr/sbin to /sbin, many tools expect fsck
  and friends to be in /sbin
- Supplement f2fs filesystem</changelog>
  <changelog author="jengelh@inai.de" date="1472385601">- Trim filelists, update descriptions, move symlink collection into
  their own subpackage.</changelog>
  <changelog author="jengelh@inai.de" date="1521460800">- Update to version 1.10.0
  * f2fs-tools: support inode creation time
  * fsck.f2fs: add -y for generic fsck
  * fsck.f2fs: support quota
  * mkfs.f2fs: support quota option in mkfs
  * f2fs-tools: support flexible inline xattr size
  * add sparse support for f2fs
  * f2fscrypt: add a tool for encryption management in f2fs</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542628800">- Update to new upstream release 1.12
  * resize.f2fs: fix access out-of memory boundary
  * mkfs.f2fs: support fsverity feature
  * fsck.f2fs: fix stack overflow when reading out nat block
  * mkfs.f2fs: avoid selinux denial for unnecessary sysfs node
  * fsck.f2fs: allow -p without value
  * mkfs.f2fs: support multiple features with one "-O"
  * f2fs-tools: add -g to give default options</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576497600">- Update to release 1.13
  * introduce some preen mode in fsck.f2fs
  * add f2fs_io tool
  * add casefolding support</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598443200">- Update to release 1.14
  * f2fs_io: add copy command
  * fsck: Check fsync data always for zoned block devices
  * fsck: Check write pointer consistency of open zones
  * fsck: Check write pointer consistency of non-open zones
  * fsck.f2fs: Enable user-space cache
  * f2fs-tools: support data compression
  * dump.f2fs: print more info of inode layout
  * resize.f2fs: add option for large_nat_bitmap feature
  * f2fs-tools: Casefolded Encryption support
  * mkfs.f2fs: allow setting volume UUID manually
  * f2fs-tools: zns zone-capacity support
  * mkfs.f2fs: add -T flag
  * mkfs.f2fs: add -r (fake_seed) flag</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1606219200">- prepare usrmerge (boo#1029961)</changelog>
</package>
<package pkgid="d9e50d8069ebb121686fea03598d7e09d2fe92daf7607bd61e5bb8e9ea1e5c2f" name="fbiterm-debuginfo" arch="i586">
  <version epoch="0" ver="0.5.20040304" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="740cb502563d637e4bddb50cbd2c187722949c85794f46dbd09c1a223f5055ee" name="fbiterm-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="d80f2d10d1cdbcec033a382e0116b7b1a83e2727c7ec68950ff6447a4c828971" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp152.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="8de6fe7832cd0fbe0aa1d0923285532c6b63fc29d687cc304762dfdb5f3cef5f" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp152.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="78978eff00f139f7bdf6dfec5e73f43fc9640de7306698a6c4eade29f149dad7" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.7.0+git.1607346448.17bd8552" rel="lp152.3.12.1"/>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611316800">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
  The last update broke fencing in GCE
  * add-upstream patch
    0001-Adds-service-account-authentication-to-GCE-fence-age.patch
- Update to version 4.7.0+git.1607346448.17bd8552:
  * fence_mpath, fence_scsi: Improve logging for failed res/key get
  * fence_mpath, fence_scsi: Capture stderr in run_cmd()
  * build: depend on config changes to rebuild when running make after running ./configure
  * fence_redfish: Fix typo in help.
  * fence_aws: add support for IMDSv2</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611662400">- bsc#1180518 [15sp3 FEAT] Product-HA / High Availability Extension:
  Add IBM Z LPAR fence agent fence_ibmz to Pacemaker (kvm) (fence-agents)</changelog>
</package>
<package pkgid="94e6ab33241047df92eeb25887f88718bb7755536acafcf0cec1e6ff4b7da6cd" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.7.0+git.1607346448.17bd8552" rel="lp152.3.9.1"/>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611316800">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
  The last update broke fencing in GCE
  * add-upstream patch
    0001-Adds-service-account-authentication-to-GCE-fence-age.patch
- Update to version 4.7.0+git.1607346448.17bd8552:
  * fence_mpath, fence_scsi: Improve logging for failed res/key get
  * fence_mpath, fence_scsi: Capture stderr in run_cmd()
  * build: depend on config changes to rebuild when running make after running ./configure
  * fence_redfish: Fix typo in help.
  * fence_aws: add support for IMDSv2</changelog>
</package>
<package pkgid="d8e047010c04d44bc6162654cd5bf5d83393ef3f24d63ca3b68daaa437f8109e" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.4.0+git.1558595666.5f79f9e9" rel="lp152.3.3.1"/>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="d6ba1fa9d1cae5bca15aa1e7f003c30d6a8f4c333cdc7eded2906dd7bf4ca101" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.6.0+git.1605185986.7b0f11c1" rel="lp152.3.6.1"/>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
</package>
<package pkgid="8aa76be3c216675279c1e9ce57d050efcebde22b3be3dcf6b4c2bcfdb934677b" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.7.0+git.1607346448.17bd8552" rel="lp152.3.12.1"/>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611316800">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
  The last update broke fencing in GCE
  * add-upstream patch
    0001-Adds-service-account-authentication-to-GCE-fence-age.patch
- Update to version 4.7.0+git.1607346448.17bd8552:
  * fence_mpath, fence_scsi: Improve logging for failed res/key get
  * fence_mpath, fence_scsi: Capture stderr in run_cmd()
  * build: depend on config changes to rebuild when running make after running ./configure
  * fence_redfish: Fix typo in help.
  * fence_aws: add support for IMDSv2</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611662400">- bsc#1180518 [15sp3 FEAT] Product-HA / High Availability Extension:
  Add IBM Z LPAR fence agent fence_ibmz to Pacemaker (kvm) (fence-agents)</changelog>
</package>
<package pkgid="564ba4384aef8e25959340dd3fc1f5cb30f5dc65f4ea72f0b13e2ffb3a7890d6" name="fence-agents-debugsource" arch="x86_64">
  <version epoch="0" ver="4.7.0+git.1607346448.17bd8552" rel="lp152.3.9.1"/>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1529496000">- Update to version 4.2.1+git.1529316875.1a39345b:
  * fence_vmware_soap: fix Python 3 suds issue
  * Added python-novaclient and python-keystoneclient in configure.ac
  * novaclient 1.1 depcrecated, so making changes for novaclient
  * Python keystoneclient also included to pacify CI
  * Changed travis to include pythomn-novaclient
  * Fencing Agent for Openstack
  * fence_scsi: fix python3 encoding error #206
  * fence_ipmilan: add missing fence_ilo3 and fence_ilo4 metadata
  * fence_scsi: match device names using re.MULTILINE to avoid duplicating names in /var/run/cluster/fence_scsi.dev
  * fence_gce: use default credentials from googleapiclient
  * run_command: fix Python 3 encoding issue
- Drop merged patches:
  * Remove 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
  * Remove 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
  * Remove 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
  * Remove 0005-run_command-fix-Python-3-encoding-issue.patch
- Enable GCE fence agent for all targets (fate#325539) (bsc#1088358)
- Enable fence_openstack agent (bsc#1097803)</changelog>
  <changelog author="kgronlund@suse.com" date="1529928000">- Unify spec file for python 2 and 3
- Enable build for python 2
  * Add 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1530100800">- Unify source package with SLE 12 and Leap 42:
  * fencing: include timestamps when logging to STDERR and debug file (bsc#1049852)
- Obsoletes the following patches (SLE 12 and Leap 42):
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  * 0010-Make-pywsman-dependency-optional.patch
  * 0011-fencing-include-timestamps-when-logging-to-STDERR-an.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1533816000">- Update to version 4.2.1+git.1532964592.3ae5b58e:
  * fence_aliyun: Add Aliyun fence agent. (fate#326557)
  * fence_gce: add power cycle as default method
  * fence_gce: set project and zone as not required
  * fence_gce: add support for stackdriver logging
  * fence_ilo3/fence_ipmilan: show correct default method (onoff) in help
  * fence_mpath: add watchdog support
  * fence_amt_ws: create metadata without agent specific libs
- Drop obsolete patch:
  * Remove 0002-Build-without-openwsman-installed.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1537963200">- Update to version 4.2.1+git.1537269352.7b1fd536:
  * fence_vmware_soap: cleanup when receiving SIGTERM
  * fence_cisco_ucs: encode POSTFIELDS
  * Update fence_rcd_serial to correct vendor URL
  * fence_aliyun: correct indentation for *key in help
  * fence_aliyun: list instance names and show up to 100 instances (fate#326557)
  * fence-rhevm: improve error reporting.
  * fence_impilan/fence_ilo_ssh: iLO5-support
  * fence_rhevm: improve indentation and metadata
  * fence_compute/fence_evacuate/fence_rhevm: dont use has_key (not supported in Python 3)
  * fence_rhevm fixing help for plug param
  * fence_kdump: fix strncpy issue
  * fence_evacuate: fix evacuable tag mix issue</changelog>
  <changelog author="dakechi@suse.com" date="1550491200">- Update to version 4.2.1+git.1550476590.98767d24:
  * fence_redfish: use "ipport" parameter and improve logging (fate#320898)
  * Changed Encoding to UTF-8 (bsc#1137314) (CVE-2019-10153)
  * fence_redfish: fail when using invalid cert without --ssl-insecure (fate#320898)
  * Removed unnecessary variable assignments to simplify code
  * fence_scsi: watchdog retries support
  * Renamed variable to avoid reusing variable name
  * Replaced default port 443 with default ssl enabled option
  * Changed reboot type to ForceRestart
  * Modify power status check
  * Added run_delay()
  * Updated fence_redfish.xml with make xml-upload (fate#320898)
  * Add new fence agent for Redfish (fate#320898)
  * build: fix issues with newer autoconf versions
  * build: fix if-redirection to make check_used_options run for the agents as intended
  * Fix 'log_expect' in fence_hpblade.py
  * fence_scsi: fix incorrect SCSI key when node ID is 10 or higher
  * fence_openstack: add detection of keystoneauth1 library
  * check_used_options: add Python 3 support, and detect unsupported has_key()-calls
  * fence_openstack: Migrate from keystoneclient to keystoneauth1
  * fence_openstack: fix missing version parameter in novaclient.Client() call
  * fence_openstack: fix configure library detection and add try/except for imports
  * fence_kdump: add validate-all action
  * fence_compute/fence_evacuate: domain parameter fixes to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Split fence_amt_ws into separate package due to licence incompatibility:
  * Apache-2.0 is not compatible with GPL-2.0
- Update to version 4.4.0+git.1558595666.5f79f9e9:
  * fence_scsi: detect node ID using new format, and fallback to old format before failing
  * fence_rhevm: fix debug encoding issues (bsc#1137314) (CVE-2019-10153)
  * fence_mpath: import ctypes to fix watchdog hardreboot
  * fence_rhevm: add RHEV v4 API support and auto-detection
  * fence_azure_arm: use skip_shutdown feature when available
  * fence_ipmilan: Add ipmitool timeout option
  * fence_redfish: add headers to HTTP methods
  * fence_gce: fix Python 3 encoding issue
  * fence_pve: add support for sending reset command to qemu machines (#261)
  * fencing: improve stdin parse function
  * fence_redfish: backwards compatibility for &lt;ip&gt;:&lt;port&gt;</changelog>
  <changelog author="Diego Vinicius Akechi &lt;dakechi@suse.com&gt;" date="1561982400">- White list the aliyun fence agent to get it included and provided
  by the fence-agent package (bsc#1139913)</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1568289600">- bsc#1150504 - aliyun: Include the latest fixes upstream on the
  Alibaba Cloud fence-agent.
  add patches 0001-Update-fence_aliyun.py-279.patch
    0001-Update-fence_aliyun.xml.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1588248000">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- fence_vmware_rest Failed: 'error' object does not support indexing
  (bsc#1169485)
- Included following upstream patch:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="varkoly@suse.com" date="1605873600">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
- Update to version 4.6.0+git.1605185986.7b0f11c1:
  * spec: add pkg-config file, and set version for obsoletes to avoid failing to build on Fedora 33
  * Add pkg-config file
  * fence_scsi: dont write key to device if it's already registered, and open file correctly to avoid using regex against end-of-file
  * fencing: fix run_command() to allow timeout=0 to mean forever
  * fencing: fix to make timeout(s)=0 be treated as forever for agents using pexpect
  * Add a fence_crosslink agent
  * fencing: fix power-timeout when using new disable-timeout parameter
  * spec: make telnet a weak dependency
- remove patch contained by the update:
  - 0001-Update-fence_aliyun.py-279.patch
  - 0001-Update-fence_aliyun.xml.patch
  - gcp-vpc-move-disable-google-api-cache-discovery.patch
  - fence_vmware_rest-improve-exception-handling-in-send_command.patch</changelog>
  <changelog author="Peter Varkoly &lt;varkoly@suse.com&gt;" date="1611316800">- (bsc#1178343) `fence_gce` updates to be pulled to the SLE versions
  The last update broke fencing in GCE
  * add-upstream patch
    0001-Adds-service-account-authentication-to-GCE-fence-age.patch
- Update to version 4.7.0+git.1607346448.17bd8552:
  * fence_mpath, fence_scsi: Improve logging for failed res/key get
  * fence_mpath, fence_scsi: Capture stderr in run_cmd()
  * build: depend on config changes to rebuild when running make after running ./configure
  * fence_redfish: Fix typo in help.
  * fence_aws: add support for IMDSv2</changelog>
</package>
<package pkgid="325579847177a0cba2cc74e627d825f59f890c328c7bb9490d2a9aef85db40bd" name="festival-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp152.3.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="dbda1b12a4a67babca251fc4df835854b2424cdd564b4822ea35d1751c327535" name="festival-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="lp152.3.3.1"/>
  <changelog author="devel.openSUSE.org@gmail.com" date="1405252800">- Spec-file cleanup</changelog>
  <changelog author="p.drouand@gmail.com" date="1423742400">- Update to version 2.4
  * Updated HTS and CG engines
  * Support for newer compilers
  * Bug fixes galore.
  * Backwards compatibility with Festival 1.4.3
  * English (British and American), Spanish and Welsh text to speech
  * Externally configurable language independent modules:
  - phonesets
  - lexicons
  - letter-to-sound rules
  - tokenizing
  - part of speech tagging
  - intonation and duration
  * Waveform synthesizers:
  - Multisyn unit selection engine
  - HTS parametric synthesis engine
  - Clustergen parametric synthesis engine
  - Clunits unit selection engine
  - diphone based: residual excited LPC (and PSOLA not for distribution)
  - MBROLA database support.
  - distributed under a free X11-type licence
  * Portable (Unix) distribution
  * On-line documentation
  * SABLE markup, Emacs, client/server, scripting interfaces.
- Update speech_tools-undefined-operation.patch
- Remove speech_tools-gcc47.patch; merged on upstream release
- Add festvox_rablpc16k.tar.gz; new upstream english festvox</changelog>
  <changelog author="dimstar@opensuse.org" date="1489492800">- Add PreReq: insserv-compat. insserv is no longer part of a
  standard SUSE setup, since we have long switched to systemd.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1542283200">- Removed sysvinit support according to the boo#1116010.
  * Added systemd unit file
  * Moved rcfestival to /usr/lib/festival/server</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1543060800">- Update to version 2.5.0
  * This update includes a solution for boo#1116808.
  * But upstream seems not to provide a detailed changelog..
- Changed upstream URL to http://festvox.org/festival/,
  original URL http://www.cstr.ed.ac.uk/projects/festival/ seemed
  not to be maintained anymore.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545048000">- Do not ignore errors from useradd/groupadd.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.
- Run spec-cleaner</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1591444800">- Added speech_tools-remove-errneous-decl.patch to fix build error
  at Tumbleweed (Thanks to github's commit:
  https://github.com/festvox/speech_tools/pull/21).</changelog>
  <changelog author="Yasuhiko Kamata &lt;belphegor@belbel.or.jp&gt;" date="1592568000">- Added speech_tools-null-fragile.patch and
  festival-null-fragile.patch to fix NULL dereference problem
  (EST_Item's method may be called even though "this" is NULL);
  it causes SIGSEGV in text2wave (boo#1173193).</changelog>
</package>
<package pkgid="676072f982e8b5e418745624f504c3aeda3aee001a54344db8e5fc1698c2bc58" name="fetchmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
  <changelog author="meissner@suse.com" date="1490961600">- prerequire group(daemon) to meet new tumbleweed user handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493380800">- Allow --syslog option in daemon mode (bsc#1033081).
  * By default, the status messages are redirected to the syslog.</changelog>
  <changelog author="vcizek@suse.com" date="1510574400">- drop SSLv3 support to build with openssl 1.1 (bsc#1066940)
  * add fetchmail-openssl11.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1519992000">- By default, the status messages are redirected to
  /var/log/fetchmail. The syslog option or no-logging are also
  available. (bsc#1033081)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Fix fetchmailconf to compile with python{2,3} [bsc#1082694]
  * fetchmail-fetchmailconf-python3-1of3.patch
  * fetchmail-fetchmailconf-python3-2of3.patch
  * fetchmail-fetchmailconf-python3-3of3.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559304000">- Remove comment about not available FETCHMAIL_USER configuration
  variable in sysconfig.fetchmail (bsc#1136538)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1614600000">- Set the hostname for SNI when using TLS [bsc#1182807]
- Add fetchmail-SNI-hostname-support.patch</changelog>
</package>
<package pkgid="3200345abd5aab621d53d37bfd7a679a2b9e3137d3830bfbb904099c4cc995ea" name="fetchmail-debugsource" arch="x86_64">
  <version epoch="0" ver="6.3.26" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashism in postun script</changelog>
  <changelog author="lmuelle@suse.com" date="1417780800">- Removed executable permission bits from fetchmail.service file.
- Update the project url in the spec file after Berlios shutdown.
- Remove dependency on gpg-offline as signature checking is implemented in the
  source validator.</changelog>
  <changelog author="meissner@suse.com" date="1419854400">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Cleanup with spec-cleaner
- Remove support for &lt;12.3 as it does not build anyway.
- Fix krb5 switches
- Provide proper rcbla controler for the service</changelog>
  <changelog author="pjanouch@suse.de" date="1460116800">- Made /etc/sysconfig/fetchmail work again after a botched systemd
  conversion that ignored the file altogether (bsc#905673)
- Removed the FETCHMAIL_USER setting in favor of editing the
  systemd service file (which should be copied to the respective
  location in /etc, and not edited in-place)</changelog>
  <changelog author="pjanouch@suse.de" date="1463140800">- Made the helper script introduced in last change return exit status
  5 on configuration errors instead of 1, which should make it a bit
  less confusing (bsc#979534)</changelog>
  <changelog author="jengelh@inai.de" date="1463140801">- Check for user/group existence before attempting to add them,
  and remove error suppression from these calls.
- Ensure tmpfile creation is run</changelog>
  <changelog author="meissner@suse.com" date="1490961600">- prerequire group(daemon) to meet new tumbleweed user handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1493380800">- Allow --syslog option in daemon mode (bsc#1033081).
  * By default, the status messages are redirected to the syslog.</changelog>
  <changelog author="vcizek@suse.com" date="1510574400">- drop SSLv3 support to build with openssl 1.1 (bsc#1066940)
  * add fetchmail-openssl11.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1519992000">- By default, the status messages are redirected to
  /var/log/fetchmail. The syslog option or no-logging are also
  available. (bsc#1033081)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521115200">- Fix fetchmailconf to compile with python{2,3} [bsc#1082694]
  * fetchmail-fetchmailconf-python3-1of3.patch
  * fetchmail-fetchmailconf-python3-2of3.patch
  * fetchmail-fetchmailconf-python3-3of3.patch</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1559304000">- Remove comment about not available FETCHMAIL_USER configuration
  variable in sysconfig.fetchmail (bsc#1136538)</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1614600000">- Set the hostname for SNI when using TLS [bsc#1182807]
- Add fetchmail-SNI-hostname-support.patch</changelog>
</package>
<package pkgid="b855584338f112088e5b22d7e617244ac6e7be64fa09c40451cd34d7cab87f9c" name="ffmpeg-4-debugsource" arch="i586">
  <version epoch="0" ver="4.2.1" rel="lp152.2.3.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1611489600">- fix ffmpeg-4.2-dlopen-fdk_aac.patch, there is no libfdk-aac.so.1</changelog>
</package>
<package pkgid="e1e5a9bd59c9db17ebdaaa402e73ea4270bbcaf143257282ed00faf0c6e69416" name="ffmpeg-4-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp152.2.3.1"/>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1556625600">- Update patch 0001-Add-ability-for-ffmpeg-to-run-svt-av1.patch
  from upstream</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1611489600">- fix ffmpeg-4.2-dlopen-fdk_aac.patch, there is no libfdk-aac.so.1</changelog>
</package>
<package pkgid="ca8526384395bef25f1bfb08688b1736ad09a93fe16d1063e0b029c43a232897" name="ffmpeg-4-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="lp152.2.6.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798400">- Enable LTO for new SUSE versions (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556798401">- Use %make_build in order to provide parallel build for tools/*.
  And make output verbose.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556884800">- Throw out svt-av1. The build is unable to complete
  in openSUSE:Factory.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557057600">- Disable LTO again, as it breaks build for i586 (boo#1133123).</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1557835200">- Enable LTO for all except i586 (boo#1133123).</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1560254400">- Add ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from OpenMandriva to optionally enable runtime enabling of
  fdkaac/lame/x264/x265
- Enable runtime enabling for fdkaac via --enable-libfdk-aac-dlopen
- Rename bcond fdk_aac to fdk_aac_dlopen
- Remove fdk-aac BuildRequires now it's only dlopen'd</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Add back pkgconfig(fdk-aac) BuildRequires since we still need
  the headers at compile time.
- Fix include paths in
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562414400">- Add pkgconfig(libva-drm), pkgconfig(libva-x11) BuildRequires: and
  conditional pkgconfig(libmfx) BuildRequires: Build intel-mediasdk
  support when possible.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1564574400">- Update to version 4.1.4
  * See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
    changelog.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1565092800">- Update to FFmpeg 4.2 "Ada"
  * tpad filter
  * AV1 decoding support through libdav1d
  * dedot filter
  * chromashift and rgbashift filters
  * freezedetect filter
  * truehd_core bitstream filter
  * dhav demuxer
  * PCM-DVD encoder
  * GIF parser
  * vividas demuxer
  * hymt decoder
  * anlmdn filter
  * maskfun filter
  * hcom demuxer and decoder
  * ARBC decoder
  * libaribb24 based ARIB STD-B24 caption support (profiles A and C)
  * Support decoding of HEVC 4:4:4 content in nvdec and cuviddec
  * removed libndi-newtek
  * agm decoder
  * KUX demuxer
  * AV1 frame split bitstream filter
  * lscr decoder
  * lagfun filter
  * asoftclip filter
  * Support decoding of HEVC 4:4:4 content in vdpau
  * colorhold filter
  * xmedian filter
  * asr filter
  * showspatial multimedia filter
  * VP4 video decoder
  * IFV demuxer
  * derain filter
  * deesser filter
  * mov muxer writes tracks with unspecified language instead
    of English by default
  * added support for using clang to compile CUDA kernels
- Drop ffmpeg-avcodec-libdav1d-AV1-decoder-wrapper.patch, merged
  upstream.
- Rebase and rename
  ffmpeg-4.1-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to
  ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
- See /usr/share/doc/packages/ffmpeg-4/Changelog for the complete
  changelog.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1565611200">- Add ffmpeg-prefer-dav1d-for-playback.patch: Prefer using dav1d
  for av1 playback over libaom.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1565784000">- avoid ppc64le build error upstream issue
  https://trac.ffmpeg.org/ticket/7861
  Add ffmpeg4_swscale_replace_illegal_vector_keyword.patch
  Add ffmpeg4_swscale_fix_altivec_vsx_recent_gcc.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1566129600">- Disable LTO for arm, fixes build.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475200">- Sync ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  from upstream.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1566475201">- Rename ffmpeg-4.2-dlopen-faac-mp3lame-opencore-x264-x265-xvid.patch
  to ffmpeg-4.2-dlopen-fdk_aac.patch since we need dlopen only
  for fdk_aac and looks like some other parts of the patch is
  buggy.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1567598400">- Make ffmpeg-4.2-dlopen-fdk_aac.patch less verbose</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568116800">- Add 0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch
  [boo#1149839, CVE-2019-15942]</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 4.2.1:
  * Stable bug fix release, mainly codecs and format fixes.
- Drop upstream fixed patch:
  0001-avcodec-h2645_parse-zero-initialize-the-rbsp-buffer.patch</changelog>
  <changelog author="Stefan Seyfried &lt;seife+obs@b1-systems.com&gt;" date="1611489600">- fix ffmpeg-4.2-dlopen-fdk_aac.patch, there is no libfdk-aac.so.1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1618660800">- Enable dav1d decoder to support av1 (fixes boo#1184830)</changelog>
</package>
<package pkgid="bc8969d154fb56df49a6379e13e365f287b5b757172d356fceca37ed825162a0" name="fftw3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="3992bd1958f61fd88de81e32bf79c4d63474874521f4b4fe5dde06d519865c95" name="fftw3-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="e31f3b983d051a7236f80e3fe227a8446e66b7b8b80a3ce5ae9c5781840a7546" name="fftw3_3_3_8-gnu-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="b6cfa315875989b4c036f965388e91ab2bba34770fcd4f97661df97678b984e8" name="fftw3_3_3_8-gnu-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="3ab0410f97450145e5de84985395a6bb835c9dce8c7c47496c306df736f43d92" name="fftw3_3_3_8-gnu-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="4a490aabcb726462ac0a771a675ae43ae3557111b34e19e3e10aa85c714ebdec" name="fftw3_3_3_8-gnu-mpich-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="e015e7bcd91dc754907fb86343df3aa9a44529b979509ce1529fda8eb29b5858" name="fftw3_3_3_8-gnu-mpich-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="b386612480e7e473e869c6d5102f39574be5cdcd67434376816e5014f12f514c" name="fftw3_3_3_8-gnu-mpich-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="903cc0b7866c2b0a10f6b98599b8aa1a194d1dd771aee533e80415bc77b4097c" name="fftw3_3_3_8-gnu-mvapich2-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="6fa05f9b6a1ba28b7b0f9bd9d9f05109f0dd2084460e9c7a93b1f05556423d6f" name="fftw3_3_3_8-gnu-mvapich2-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="9be8bd35a97a2a720770dd62ea2dd74c4382c1734fcca7deb702f3fb2a7db02d" name="fftw3_3_3_8-gnu-mvapich2-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="8fc8e41f079203c089af2a4045d4dfdaa43eddf236aff795b846f8057be7f49a" name="fftw3_3_3_8-gnu-openmpi2-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="be9ad79fd9ec4cf3cf05341c1c0d08c15a023a061c955b4eba91603b8376db08" name="fftw3_3_3_8-gnu-openmpi2-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="138a2d430c0283029dfffc1b6b83ca2c4aaf9b26edc045d5467b29669ca209ac" name="fftw3_3_3_8-gnu-openmpi2-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="5cc34a5fafac4f049bb061344787c6e88d847f9616140337141826fa7ce3fa6d" name="fftw3_3_3_8-gnu-openmpi3-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="6cc43ab04e8f1961b6a6b2fa6e8bc237d97c39453f9a8da7b7871eb169779bee" name="fftw3_3_3_8-gnu-openmpi3-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="b190853f9c16ee2b636f01ec4ec9f4e1bc80caba0ec5ce3424d36e87f59eec8d" name="fftw3_3_3_8-gnu-openmpi3-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.2"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="b9fed97f8519b76cd884343ea71f00c9b68c12f792603b3ce8b5a3ac6cddcfcb" name="fftw3_3_3_8-gnu-openmpi4-hpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.1"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="ea706284cf9950397a56885f2baab27df7a77c5fbcbff26f3566432d71ae7412" name="fftw3_3_3_8-gnu-openmpi4-hpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.1"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="0341c7671d33fd0f067304eeda44a5e247d6ff5bd018b54458b1032c8262de4a" name="fftw3_3_3_8-gnu-openmpi4-hpc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.8" rel="lp152.3.3.1"/>
  <changelog author="eich@suse.com" date="1508241600">- Add magic to limit the number of flavors built in the
  in the OBS ring.</changelog>
  <changelog author="eich@suse.com" date="1508414400">- Fix dependencies for the HPC devel package.</changelog>
  <changelog author="eich@suse.com" date="1508760000">- Don't use openmpi-devel for HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1510056000">- update to 3.3.6-pl2
  * Bugfix: MPI Fortran-03 headers were missing in FFTW 3.3.6-pl1.
  * Bugfix: FFTW 3.3.6 had the wrong libtool version number, and generated
    shared libraries of the form libfftw3.so.2.6.6 instead of
    libfftw3.so.3.*.
  * The fftw_make_planner_thread_safe() API introduced in 3.3.5 didn't
    work, and this 3.3.6 fixes it.  Sorry about that.
  * compilation fixes for IBM XLC
  * compilation fixes for threads on Windows
  * fix SIMD autodetection on amd64 when (_MSC_VER &gt; 1500)</changelog>
  <changelog author="eich@suse.com" date="1510488000">- Fix HPC library requires package and modules file.</changelog>
  <changelog author="eich@suse.com" date="1510660800">- Fix library package dependencies - limit certain
  dependencies to HPC packages.</changelog>
  <changelog author="eich@suse.com" date="1515153600">- Add gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890).
- Add support for mpich and openmpi3 for HPC.</changelog>
  <changelog author="eich@suse.com" date="1515758400">- Disable the openmpi3 flavor in some products.</changelog>
  <changelog author="eich@suse.com" date="1516363200">- Change the name of the MPI version of the module file directory
  to pfftw3 to distinguish it from the 'serial' one (boo#1075933).</changelog>
  <changelog author="eich@suse.com" date="1516622400">- Fix typo in flavor gnu7-hpc settings.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1519300800">- Switch to openmpi2 instead of openmpi (bsc#1082302),
  apart from ppc64 as openmpi2 does not support it.</changelog>
  <changelog author="eich@suse.com" date="1519646400">- Add support for openmpi2 for the HPC build (FATE#325089).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1527768000">- Fix %install_info_delete usage.</changelog>
  <changelog author="schwab@suse.de" date="1537272000">- Stay with openmpi also on ppc</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1550491200">- Add FFTW_BIN to environment variable with module file (bsc#1125824).</changelog>
  <changelog author="Rodrigo Louren&#xE7;o &lt;guigo.lourenco@gmail.com&gt;" date="1552910400">- Update to 3.3.8:
  * Fixed AVX, AVX2 for gcc-8.
- Release notes for 3.3.7:
  * Experimental support for CMake.
  * Fixes for armv7a cycle counter.
  * Official support for aarch64, now that we have hardware to test it.
  * Tweak usage of FMA instructions in a way that favors newer processors
    (Skylake and Ryzen) over older processors (Haswell).
  * tests/bench: use 64-bit precision to compute mflops.</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1568376000">- Add -ffat-lto-objects to avoid build failure</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1575028800">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591444800">- Fix BuildFailures for openSUSE &gt;= 1550:
  * Correct info dir.
  * Fix ill-formatted comments.</changelog>
  <changelog author="Egbert Eich &lt;eich@suse.com&gt;" date="1595246400">- Add gnu compiler support up to gcc9.
- Fix typo which caused issus building openmpi HPC flavors
  (bsc#1174329).
- Add support for openmpi4 (provided by Alin Marin Elena).</changelog>
</package>
<package pkgid="7c8a5100312ad452b128414975f37a5f7895c7c5dbed05d4e2bf39af04204996" name="file-debuginfo" arch="i586">
  <version epoch="0" ver="5.32" rel="lp152.10.3.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="a0012a0a07fa05b9b7ee85b64bb5de59a7dd4c69a6091ba63aeeccf9edb9655d" name="file-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp152.10.3.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="8aca215cf2b73ad562e17e3f6cd5d0c3b15fd24af9b771df2d233ad1435f4955" name="file-debugsource" arch="i586">
  <version epoch="0" ver="5.32" rel="lp152.10.3.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="a5eb76f103aaee0e1a40b2519991d7c0ff68907def647dcbc5e206fe4f83e2ad" name="file-debugsource" arch="x86_64">
  <version epoch="0" ver="5.32" rel="lp152.10.3.1"/>
  <changelog author="werner@suse.de" date="1471348800">- Update to file version 5.28
  * fix leak on allocation failure
  * PR/555: Avoid overflow for offset &gt; nbytes
  * PR/550: Segv on DER parsing:
  - use the correct variable for length
  - set offset to 0 on failure.
- Port patches to 5.28
  file-4.24-autoconf.dif
  file-5.15-clear-invalid.patch
  file-5.16-ocloexec.patch
  file-5.19-biorad.dif
  file-5.23-endian.patch
  file-5.24-nitpick.dif
  file-secure_getenv.patch
- Remove patches now upstream
  file-5.26-revert-close.patch
- Rename patches
  file-5.26.dif becomes file-5.28.dif</changelog>
  <changelog author="werner@suse.de" date="1471521600">- Add patch file-5.28-compress.patch
  to fix crash as found in build system</changelog>
  <changelog author="meissner@suse.com" date="1472040000">- file-magic is architecture independend, no need for a baselibs
  package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472040001">- Fix boo#995089:
  * Do not attempt to produce a file-magic-32bit package: there is
    nothing arch-dependant in this package (for completeness, this
    was already fixed just before by Marcus)
  * Fix baselibs.conf for libmagic1-32bit to require file-magic
    instead of file-magic-32bit.
  * Build file-magic as noarch on openSUSE &gt;= 1200 (where rpm is
    new enough to support this).</changelog>
  <changelog author="jeffm@suse.com" date="1476964800">- Add patch file-5.28-btrfs-image.dif
  to add support for files output by btrfs-image.</changelog>
  <changelog author="werner@suse.de" date="1479988800">- Update to file version 5.29
  * der getlength overflow (Jonas Wagner)
  * multiple magic file load failure (Christoph Biedl)
  * CDF parsing improvements (Guy Helmer)
  * Add support for signed indirect offsets
  * cat /dev/null | file - should print empty (Christoph Biedl)
  * Bump string size from 64 to 96.
  * PR/556: Fix separators on annotations.
- Remove patch file-5.28-compress.patch now upstream
- Rename patch file-5.28.dif which becomes now file-5.29.dif</changelog>
  <changelog author="werner@suse.de" date="1480507200">- Modify patch file-5.29.dif that is
  replace colon with dot in offset (boo#1012779)</changelog>
  <changelog author="werner@suse.de" date="1488456000">- Update to file version 5.30
  * If we exceeded the offset in a search return no match
    (Christoph Biedl)
  * Be more lenient on corrupt CDF files (Christoph Biedl)
  * pacify ubsan sign extension (oss-fuzz/524)
  * off by one in cdf parsing (PR/593)
  * report debugging sections in elf (PR/591)
  * Allow @@@ in extensions
  * Add missing overflow check in der magic (Jonas Wagner)
- Mofify the patches
    file-5.16-ocloexec.patch
    file-5.19-biorad.dif
    file-5.28-btrfs-image.dif
- Rename patch file-5.29.dif to file-5.30.dif
- Add upstream patches
    file-5.30-150735.patch
    file-5.30-3c60e5.patch</changelog>
  <changelog author="werner@suse.de" date="1495627200">- Update to file version 5.31
  * remove trailing spaces from magic files
  * refactor is_tar
  * better bounds checks for cdf
- Remove patches now upstream
  * file-5.30-150735.patch
  * file-5.30-3c60e5.patch
- Rename patch file-5.30.dif which becomes file-5.31.dif
- Modify the patches
  * file-4.24-autoconf.dif
  * file-5.14-tex.dif
  * file-5.16-ocloexec.patch
  * file-5.19-printf.dif
  * file-5.23-endian.patch</changelog>
  <changelog author="coolo@suse.com" date="1496664000">- add file-5.31-fix-tga.dif upstream commited after I reported
  a failure in File::Unpack's test suite</changelog>
  <changelog author="werner@suse.de" date="1505304000">- Update to file version 5.32
  * Always reset state in {file,buffer}_apprentice (Krzysztof Wilczynski)
  * Fix always true condition (Thomas Jarosch)
  * pickier parsing of numeric values in magic files.
  * PR/615 add magic_getflags()
- This release fix the bug bsc#1056838 for CVE-2017-1000249
- Remove patch file-5.31-fix-tga.dif as now upstream
- Rename patch file-5.31.dif which now becomes file-5.32.dif
- Modify the patches
  * file-5.16-ocloexec.patch
  * file-5.19-biorad.dif
  * file-5.19-printf.dif
  * file-5.23-endian.patch
  * file-5.28-btrfs-image.dif</changelog>
  <changelog author="jmatejek@suse.com" date="1506427200">- remove python build instructions from master spec file, move completely
  into python-magic.spec</changelog>
  <changelog author="jengelh@inai.de" date="1507464000">- Update package summaries. Replace old RPM constructs.
- Remove --with-pic which is useless with --disable-static.
- Edit pre_checkin.sh to remove dead python3 file.</changelog>
  <changelog author="werner@suse.de" date="1516622400">- Add patch file-5.32-ncurses-6.1.patch to support extend magic
  format for new ncurses 6.1</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1528804800">- Add patch file-a642587a9c.patch for bsc#1096974, bsc#1096984, and
  CVE-2018-10360 -- Avoid reading past the end of buffer</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1550750400">- Add patch 0002-PR-62-spinpx-limit-size-of-file_printable.patch to
  fix bsc#1126117, bsc#1126118, and bsc#1126119 for CVE-2019-8905,
  CVE-2019-8906, and CVE-2019-8907</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1571745600">- Add temporary patch CVE-2019-18218-46a8443f.patch from upstream
  to fix bsc#1154661 -- heap-based buffer overflow in cdf_read_property_info in cdf.c</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1586865600">- file-5.24-nitpick.dif: remove obsolete patch (bsc#1169512)
- file-secure_getenv.patch: refresh</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1600430400">- Add patchfix_of_backport_PR-62.patch as previous backport caused
  a shorten output of the elf interprter (bsc#1176123)</changelog>
</package>
<package pkgid="d78aa5562cbf2f5b75d5c5a1fc18b44302492e3c84707afc126fc4d1780bcc66" name="findutils-debuginfo" arch="i586">
  <version epoch="0" ver="4.6.0" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="f9d40252f5a5222768ceb1d2dc58680277fef6e2ea9c2b54686c4363ee66a6cb" name="findutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="5687eb3b4b0fbdd46843f05b7266b770c9556220879b89cd7e78c3a426a5ad04" name="findutils-debugsource" arch="i586">
  <version epoch="0" ver="4.6.0" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="8c3758ee3c3061e4a54e58e5cd0ef3d3c6db7d24a8d2c2057da773f66d12a770" name="findutils-debugsource" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="lp152.5.3.1"/>
  <changelog author="pth@suse.de" date="1386244800">- Do not build findutils-locate anymore as mlocate obsoletes it
  since openSUSE 13.1.
- Remove findutils-4.4.2-updatedb.patch as it's not needed anymore.
- Remove cron.daily.updatedb and sysconfig.locate as they aren't
  needed anymore.</changelog>
  <changelog author="uweigand@de.ibm.com" date="1387368000">- findutils-gnulib-ppc64le.patch: Fix imported gnulib long double
  math tests for little-endian PowerPC.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1407067200">- Upgrade to 4.5.14
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    findutils-gnulib-ppc64le.patch (using -p0 for consistency)
- findutils.spec (Version): s/4.5.12/4.5/14
  (%patch1): Remove -p1.
  (%configure): Remove --without-included-regex option,
    as it is the default anyway.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1420545600">- findutils-oldfind-fix-dotdot-skipping.patch: Add upstream patch
    to fix 'oldfind' which skipped all files starting with ".."
    (e.g. "..file").
- findutils.spec: Add BuildRequires:dejagnu - otherwise only a
    very limited set of the tests was run by 'make check'.</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib upstream</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1450612800">- Upgrade to 4.5.15
- Delete now-upstream patch:
    findutils-oldfind-fix-dotdot-skipping.patch
- Refresh patches:
    findutils-4.4.2-xautofs.patch
    gnulib-perl522.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1452513600">- Upgrade to 4.6.0
    stable release, removing 'oldfind'.
- Delete now-upstream patches: findutils-gnulib-ppc64le.patch,
    gnulib-perl522.patch
- Refresh patch: findutils-4.4.2-xautofs.patch</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1464696000">- sv-bug-48030-find-exec-plus-does-not-pass-all-arguments.patch:
  Add upstream patch to fix https://savannah.gnu.org/bugs/?48030</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1603195200">- The following is patch was provided by Jie GONG &lt;jie.gong@suse.com&gt;
- fts-dont-unconditionally-use-leaf-optimization-for-nfs.patch
  (bsc#1174232)
    fts: don't unconditionally use leaf optimization for NFS
    NFS st_nlink are not accurate on all implementations,
    leading to aborts() if that assumption is made.
    See &lt;https://bugzilla.redhat.com/1299169&gt;
  * lib/fts.c (leaf_optimization_applies): Remove NFS from
    the white list, and document the issue.</changelog>
</package>
<package pkgid="4b9fb0439f7dae4c3e904c2e97c96ec69a979e51a625d20b2b06743724408df8" name="fio-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.23" rel="lp152.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Correct bash location in genfio</changelog>
  <changelog author="mpluskal@suse.com" date="1515412800">- Update to version 3.3:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.3.shortlog.txt</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 3.4:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.4.shortlog.txt
- simplify build and install</changelog>
  <changelog author="lmb@suse.com" date="1520424000">- Enable building of the rbd support on aarch64 for SLE (bsc#1083445)</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Rework conditionals
- Update spec file with spec-clener</changelog>
  <changelog author="jeffm@suse.com" date="1522324800">- Allow to build on SLE11 again:
  - %licence -&gt; %doc on old rpm
  - No dependencies on libnuma (i386), librbd, and libpmem.</changelog>
  <changelog author="jeffm@suse.com" date="1522324801">- Update license tag to read "GPL-2.0"</changelog>
  <changelog author="olaf@aepfle.de" date="1524657600">- Replace hardcoded dependency to python2.7, which does not exist
  in SLE_11, with python2 via fio.python2.patch</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536321600">- Update to version 3.9
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.9.shortlog.txt</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536926400">- Update to version 3.10
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.10.shortlog.txt
- Switch to building with openssl</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1537358400">- Remove duplication from build macros
- Disable building for native host to avoid illegal instruction crashes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537531200">- Do not use libressl</changelog>
  <changelog author="jkohoutek@suse.com" date="1542196800">- Update to version 3.12:
  * no upstream changelog available</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1550836800">- Update to version 3.13:
  * Shortlog: http://brick.kernel.dk/snaps/fio-3.13.shortlog.txt</changelog>
  <changelog author="terekhov &lt;termim@gmail.com&gt;" date="1562155200">- Update to version 3.14:
  * no upstream changelog available</changelog>
  <changelog author="dsterba@suse.cz" date="1570536000">- Update to version 3.16:
  * new: NBD support
  * new: ZBD support
  * for the rest see http://brick.kernel.dk/snaps/fio-3.16.shortlog.txt
- Added patches:
  * 0001-Fix-compilation-error-with-gfio.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1590062400">- Update to 3.19 (no changelog)
- Remove 0001-Fix-compilation-error-with-gfio.patch
- Remove fio.python2.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Update to version 3.20:
  * No changelog available
- Add fio-gfio_main_ui.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1595592000">- Update to 3.21 (no changelog)
- Remove fio-gfio_main_ui.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1600084800">- Update to 3.23 (no changelog)</changelog>
</package>
<package pkgid="1c09c4e6c0d23f62ffb514101642115e0d3a069665621339800b2e1a1898eb7b" name="fio-debugsource" arch="x86_64">
  <version epoch="0" ver="3.23" rel="lp152.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Correct bash location in genfio</changelog>
  <changelog author="mpluskal@suse.com" date="1515412800">- Update to version 3.3:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.3.shortlog.txt</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 3.4:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.4.shortlog.txt
- simplify build and install</changelog>
  <changelog author="lmb@suse.com" date="1520424000">- Enable building of the rbd support on aarch64 for SLE (bsc#1083445)</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Rework conditionals
- Update spec file with spec-clener</changelog>
  <changelog author="jeffm@suse.com" date="1522324800">- Allow to build on SLE11 again:
  - %licence -&gt; %doc on old rpm
  - No dependencies on libnuma (i386), librbd, and libpmem.</changelog>
  <changelog author="jeffm@suse.com" date="1522324801">- Update license tag to read "GPL-2.0"</changelog>
  <changelog author="olaf@aepfle.de" date="1524657600">- Replace hardcoded dependency to python2.7, which does not exist
  in SLE_11, with python2 via fio.python2.patch</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536321600">- Update to version 3.9
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.9.shortlog.txt</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536926400">- Update to version 3.10
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.10.shortlog.txt
- Switch to building with openssl</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1537358400">- Remove duplication from build macros
- Disable building for native host to avoid illegal instruction crashes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537531200">- Do not use libressl</changelog>
  <changelog author="jkohoutek@suse.com" date="1542196800">- Update to version 3.12:
  * no upstream changelog available</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1550836800">- Update to version 3.13:
  * Shortlog: http://brick.kernel.dk/snaps/fio-3.13.shortlog.txt</changelog>
  <changelog author="terekhov &lt;termim@gmail.com&gt;" date="1562155200">- Update to version 3.14:
  * no upstream changelog available</changelog>
  <changelog author="dsterba@suse.cz" date="1570536000">- Update to version 3.16:
  * new: NBD support
  * new: ZBD support
  * for the rest see http://brick.kernel.dk/snaps/fio-3.16.shortlog.txt
- Added patches:
  * 0001-Fix-compilation-error-with-gfio.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1590062400">- Update to 3.19 (no changelog)
- Remove 0001-Fix-compilation-error-with-gfio.patch
- Remove fio.python2.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Update to version 3.20:
  * No changelog available
- Add fio-gfio_main_ui.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1595592000">- Update to 3.21 (no changelog)
- Remove fio-gfio_main_ui.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1600084800">- Update to 3.23 (no changelog)</changelog>
</package>
<package pkgid="d6323fd36c9a6b67d1212ae051cb103c5fd1d6563a695384a5882693385f635a" name="firebird-debuginfo" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="ce2bfb3cc5fad6ac0e2b2f8c8ec6c8dcf517f923fcc5b6ce8d9e876b90b95c4c" name="firebird-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="6a6cab71fc3af9893702fca77418d9b331c42d1fba0fab815f8a3f6cfcfee262" name="firebird-debugsource" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="439b622d5111ede4871e80ff1b681a890aae4cccda17160450aa6054ef9aeccb" name="firebird-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="8b0d09cd8bd85a59af2cec8b14737a97e884fad922ec67136af91affbe153d74" name="firebird-server-debuginfo" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="50d7fe76823c5288a0ab237c53ce45551e5834f82ed0bcf830ba7a0c91742aba" name="firebird-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="abc8b21f9e61932a51856db5dd3f3514dbf396c16beb137f259df34c95b52427" name="firebird-utils-debuginfo" arch="i586">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="f0d438385071d473246bfb960e37f203af40a932bd4458f5c13a347d4eebc26e" name="firebird-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.7.33374" rel="lp152.2.3.1"/>
  <changelog author="mkubecek@suse.cz" date="1462968000">- upgrade to upstream version 3.0.0 (final)
  * one executable for all modes =&gt; drop firebird-classic package
  * true SMP support in SuperServer
  * new object oriented C++ API
  * per-database config files
  * increased limits
  * support multiple security databases
  * boolean type
  * SQL packages
  * DDL triggers
  * window functions
  * statistical functions
  * scrollable cursors
  * IPv6 support
- reorganize subpackages:
  * firebird: only common files needed for both client and server
  * firebird-server: server installation
  * libfbclient2: client library
  * firebird-utils: management utilities
  * libib_util: libib_util library (utility functions for UDF)
  * firebird-doc: documentation
  * firebird-examples: API examples
  * libfbclient-devel: devel files for libfbclient2
  * libib_util-devel: devel files for libib_util
- delete patches obsoleted by version upgrade:
  * Added-check-for-failed-fork-system-call.patch
  * Apply-Partial-patch-for-C-11-compilation-of-the-Fire.patch
  * Backported-fix-for-CORE-4785-Bad-packet-of-op_execut.patch
  * Backported-fix-for-CORE-4788-Superclassic-server-han.patch
  * Fixed-CORE-3431-ISQL-pads-UTF-8-data-incorrectly.patch
  * Fixed-s-tandalone-switch-in-posix-server.patch
  * isql-fix-buffer-overflow-when-set-width-sets-bigger-.patch
  * isql-fix-output-if-charset-is-different-from-locale.patch
  * Libreoffice-patch-C-11-new-delete-replacement-functi.patch
- delete add-experimental-support-for-m68k-architecture.patch
  architecture specific settings are managed in a different way
  in 3.0 so that this would need a complete rewrite; as this
  has little chance to get upstreamed and I doubt anyone plans
  to actually run Firebird 3.0 on openSUSE on m68k, let's just
  drop it
- update remaining patches:
  * add-pkgconfig-files.patch
  * allow-creating-buildRoot-as-non-root-user.patch
  * disable-xinetd-service-by-default.patch
  * do-not-use-DatabaseAccess-Full-in-default-config.patch
  * fbguard-allow-creating-a-guard-pidfile.patch
  * use-killproc-in-stop-branch-of-SuSE-init-script.patch
- new patches (from post-3.0 development):
  * unicode-handle-the-ICU-version-hack-from-SuSE.patch
    compatibility with SUSE ICU versioning hack
  * Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch:
    gcc6 compatibility
  * Provide-sized-global-delete-operators-when-compiled-.patch:
    gcc6 compatibility
  * Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch:
    implement "inet4" and "inet6" protocols for URL-like connection
    strings to enforce IPv4 or IPv6
  * work-around-g-problem-in-SLE11.patch:
    work around a bug in old g++ (needed for SLE11 build)
- build with -fno-delete-null-pointer-checks
- specfile cleanup</changelog>
  <changelog author="mkubecek@suse.cz" date="1462968001">- Fix-locking-on-big-endian-architectures.patch:
  fix broken code (and failed build) on big endian architectures
  (CORE-5232)
- explicitely require autoconf 2.67 or newer for build</changelog>
  <changelog author="mkubecek@suse.cz" date="1463572800">- libfbclient-devel cannot be used as a direct replacement for
  libfbembed-devel so it's better to stop pretending so
- some packages have (unnecessary) explicit build requirement for
  firebird-devel whose contents was merged into libfbclient-devel;
  add corresponding Provides and Obsoletes</changelog>
  <changelog author="mkubecek@suse.cz" date="1464696000">- move libEnginge12.so and intl/ into firebird package as these
  are also needed by embedded connections
- include /etc/firebird/firebird.conf.d/*.conf into configuration
- move the directive restricting DatabaseAccess to /srv/firebird
  into a separate config file in firebird-server subpackage so
  that it doesn't affect embedded-only installs
- do-not-use-DatabaseAccess-Full-in-default-config.patch:
  replaced by 50-server.conf
- fix Group tag for libfbclient2 and libib_util subpackages
- improve libib_util subpackage description</changelog>
  <changelog author="mkubecek@suse.cz" date="1467201600">- add fake "Provides: libfbembed-devel" to libfbclient-devel
  subpackage; this is a temporary workaround to allow LibreOffice
  build both before and after firebird is upgraded to verison 3.0
  in Factory; once FB3 is in Factory, LibreOffice BuildRequires
  can be updated to libfbclient-devel (based on %suse_version) and
  this hack can be dropped</changelog>
  <changelog author="mkubecek@suse.cz" date="1475150400">- update to upstream version 3.0.1
  * an assertion could occur in createDatabase() when doing the
    overwrite check (CORE-5339)
  * a database could suffer partial corruption in the "use all
    space" (no-reserve) mode (CORE-5329)
  * trying to encrypt a database in the absence of the the
    appropriate key could corrupt it (CORE-5292)
  * a database could get decrypted after changing a couple of bytes
    in the database header without 'agreement' from the crypt
    plug-in (CORE-5213)
  * access violation from certain UDFs would cause the server to
    crash (CORE-5234)
  * a segfault could occur when op_que_events was used on a port
    that was not prepared for events processing (CORE-5335)
  * a segfault could occur if an attachment was closed while
    requests were still open
  * for the full list of bugs fixed, se the release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-301
  * the statement CREATE OR ALTER USER SYSDBA PASSWORD &lt;password&gt;
    can now be used to initialize an empty securityN.fdb security
    database (improvement CORE-5266)
  * nesting of keys in a plug-in configuration was enabled
    (improvement CORE-5257)
  * line and column numbers (location context) are now provided for
    runtime errors raised inside EXECUTE BLOCK (improvement
    CORE-5216)
  * gbak now returns a non-zero result code when restore fails on
    creating and activating a deferred user index (CORE-5201)
  * implicit conversion between Boolean and string is now done
    automatically when a string for 'true' or 'false' is used as a
    value in an expression (CORE-5167)
- drop patches merged present in new upstream release:
  allow-creating-buildRoot-as-non-root-user.patch
  Allow-to-enforce-IPv4-or-IPv6-in-URL-like-connection.patch
  Fix-locking-on-big-endian-architectures.patch
- update to current code:
  work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1486468800">- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch
  security vulnerability fix for bypassing 'Restrict UDF' value of
  UdfAccess config directive (bsc#1023990)</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Add missing insserv PreReq</changelog>
  <changelog author="mkubecek@suse.cz" date="1498824000">- update to upstream version 3.0.2
  * allow to to filter out info and warnings from the trace log
  * enhance control capability when sharing the database crypt key
    between Superserver attachments
  * the physical numbers of frequently used data pages are now
    cached to reduce the number of fetches of pointer pages
  * in SuperServer mode, read-only transaction will no longer force
    write the Header\TIP page content to disk immediately after
    a change
  * make the database name available to an encryption plug-in
  * enable nesting of keys in a plug-in configuration
  * build linux code with --enable-binreloc
  * trace: provide a filter to INCLUDE / EXCLUDE errors by their
    mnemonical names
  * port for ancient Motorola 68000 CPU platform
  * allow SELECT expressions as valid operands for the BETWEEN
    predicate
  * many bug fixes; for a list, see
    https://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html#bug-302
- Backported-fix-for-CORE-5474-Restrict-UDF-is-not-eff.patch:
  drop (included in 3.0.2)
- Backported-fix-for-CORE-5549-Errors-building-running.patch:
  fix errors when building/running on non-SSE CPU (CORE-5549)
- Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch:
  fix crash on frequent load/unload of UDF (CORE-5562)
- Workaround-for-CORE-5566-Server-crashes-while-restor.patch:
  workaround for server crash when restoring a backup while shadow
  file already exists (CORE-5566)
- Fixed-CORE-5567-Direct-system-table-modifications-ar.patch:
  fix the possibility to directly modivy system tables (CORE-5567)
- drop "--disable-binreloc", no longer needed
- add a check to fail in prep phase if extern/SfIO wasn't removed
  (bsc#763446)</changelog>
  <changelog author="dimstar@opensuse.org" date="1515067200">- Add firebird-icu60.patch: Fix build with icu 60.x.</changelog>
  <changelog author="mkubecek@suse.cz" date="1520078400">- update to upstream version 3.0.3
  * fix conflicting constants; programs using * fb_info_crypt_state
    constant must be recompiled
  * provide crypto key name via fb_info_crypt_key item in
    Attachment::getInfo()
  * improve handling of concurrent ALTER DATABASE statements
  * make sure ORDER BY with equivalent expressions are equivalent
    and use the same plan
  * avoid serialization of isc_attach_database calls issued by
    EXECUTE STATEMENT
  * show date and time of analysis in gstat output
  * show database info in sweep error message
  * provide compression details and encryption status of the
    connection in Attachment::getInfo() API call
  * fix RDB$RELATION_TYPE when restoring ODS &lt; 11.1 database
  * the optimizer can now estimate the actual record compression
    ratio
  * various performance improvements
  * various bug fixes, for a list, see release notes at
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-bug.html
- drop patches included in new upstream version:
  Backported-fix-for-CORE-5549-Errors-building-running.patch
  Backported-fix-for-CORE-5562-Firebird-crashes-when-U.patch
  Fixed-CORE-5567-Direct-system-table-modifications-ar.patch
  Make-the-generated-code-compatible-with-gcc-6-in-C-1.patch
  Workaround-for-CORE-5566-Server-crashes-while-restor.patch
- unicode-handle-the-ICU-version-hack-from-SuSE.patch:
  rework to handle ICU &gt;= 60 (as many versions as upstream)
- drop firebird-icu60.patch
  obsoleted by update of the unicode patch
- Make-it-build-with-icu60.patch
  upstream post-3.0.3 commit for ICU &gt;= 59 compatibility
- use-C-98-on-SLE11.patch
  compatibility patch for SLE11 where gcc 4.3 does not support
  - stc=gnu++03 (applied only on SLE11)</changelog>
  <changelog author="fcrozat@suse.com" date="1521720000">- Do no ship xinetd file on SLE15 (bsc#1084459).</changelog>
  <changelog author="mkubecek@suse.cz" date="1521806400">- patch xinetd config file unconditionally; previous change would
  result in unpatched xinetd config file installed on Tumbleweed
  so that the service would be enabled by default and firebird
  binary run as root</changelog>
  <changelog author="mkubecek@suse.cz" date="1522238400">- move firebitd.xinetd back to firebird-server subpackage on SLE15
- provide /etc/xinetd.d directory on Tumbleweed and Leap 15.0 as
  xinetd is no longer guaranteed to be present there; this solution
  (suggested by Dimstar) is less painful than either having
  firebird-server depend on xinetd or splitting a new subpackage
  firebird-server-classic.</changelog>
  <changelog author="mkubecek@suse.cz" date="1530705600">- replace unicode-handle-the-ICU-version-hack-from-SuSE.patch
  with more general upstream solution:
  * An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  * Fixed-a-code-somewhy-accepted-by-gcc6.patch
- unicode-handle-new-SUSE-ICU-version-hack.patch:
  search also for "suse%d.%d" soname pattern to fix build after
  upcoming ICU update (bsc#1095425)</changelog>
  <changelog author="mkubecek@suse.cz" date="1542801600">- update to upstream version 3.0.4
  * add support for SRP authentication using SHA-256
  * ODS (database file format) version raised to 12.2 on some
    architectures (including i586, not x86_64); new version will be
    able to open existing ODS 12.0 created on the same architecture
    but for database transfer between architectures, backup/restore
    is always recommended
  * context variables WIRE_COMPRESSED and WIRE_ENCRYPTED were added
    to the SYSTEM namespace to report compression and encryption
    status, respectively, of the current connection (CORE-5913)
  * enhanced reporting of errors when dynamic library fails to load
    (CORE-5908)
  * include funciton name when UDF causes "Arithmetic exception,
    numeric overflow, or string truncation" error (CORE-5876)
  * context variables LOCALTIME and LOCALTIMESTAMP (synonyms for
    CURRENT_TIME and CURRENT_TIMESTAMP) for compatibility with 4.0
    (CORE-5853)
  * read-only restriction for system tables was relaxed to permit
    CREATE, ALTER and DROP operations on their indexes (CORE-5746)
  * fix unauthorized BLOB access vulnerability (CORE-5801)
  * for a full list of bugfixes and improvements see
    http://www.firebirdsql.org/file/documentation/release_notes/html/en/3_0/rnfb30-general.html#rnfb30-general-v304
- drop patches included in new upstream release:
  Make-it-build-with-icu60.patch
  An-attempt-to-fix-CORE-5764-need-feedback-on-snapsho.patch
  Fixed-a-code-somewhy-accepted-by-gcc6.patch
- refresh patches:
  work-around-g-problem-in-SLE11.patch
  use-C-98-on-SLE11.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1592740800">- update to 3.0.5:
  * Improve the engine providers compatibility across Firebird
    versions
  * Make it possible for the AuthClient plugin to access the
    authentication block from DPB
  * Implement option to restore compressed .nbk files without
    explicitly decompressing them</changelog>
  <changelog author="Michal Kubecek &lt;mkubecek@suse.cz&gt;" date="1592913600">- minor specfile cleanup</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1602936000">- update to upstream version 3.0.6
  * add better transaction control in isql (CORE-4933)
  * increase parse speed of long queries (CORE-6274)
  * improve performance when using SRP plugin (CORE-6237)
- refresh
  * work-around-g-problem-in-SLE11.patch</changelog>
  <changelog author="Michal Kube?ek &lt;mkubecek@suse.cz&gt;" date="1604145600">- update to upstream version 3.0.7
  * better diagnostic for the 'Missing security context' error
    (CORE-6362)
  * disconnect from the security database when missing plugin data
    structures cause an error (CORE-6339)
  * multiple important bug fixes</changelog>
</package>
<package pkgid="19acfee9707e323afb2878f6c102e7eb8cb15cd0a0dc05375249b44fff637792" name="firejail-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.62" rel="lp152.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1463486400">- initial package: 0.9.38</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Update to version 0.9.40:
  * Added firecfg utility
  * New options: -nice, -cpu.print, -writable-etc, -writable-var,
  - read-only
  * X11 support: -x11 option (-x11=xpra, -x11=xephr)
  * Filetransfer options: ?ls and ?get
  * Added mkdir, ipc-namespace, and nosound profile commands
  * added net, ip, defaultgw, ip6, mac, mtu and iprange profile
    commands
  * Run time config support, man firejail-config
  * AppArmor fixes
  * Default seccomp filter update
  * Disable STUN/WebRTC in default netfilter configuration
  * Lots of new profiles</changelog>
  <changelog author="tiwai@suse.de" date="1475236800">- Update to version 0.9.42:
  Security fixes:
  * ?whitelist deleted files
  * disable x32 ABI in seccomp
  * tighten ?chroot
  * terminal sandbox escape
  * several TOCTOU fixes
  Behavior changes:
  * bringing back ?private-home option
  * deprecated ?user option, please use ?sudo -u username firejail?
  * allow symlinks in home directory for ?whitelist option
  * Firejail prompt is enabled by env variable FIREJAIL_PROMPT=?yes?
  * recursive mkdir
  * include /dev/snd in ?private-dev
  * seccomp filter update
  * release archives moved to .xz format
  New features:
  * AppImage support (?appimage)
  * AppArmor support (?apparmor)
  * Ubuntu snap support (/etc/firejail/snap.profile)
  * Sandbox auditing support (?audit)
  * remove environment variable (?rmenv)
  * noexec support (?noexec)
  * clean local overlay storage directory (?overlay-clean)
  * store and reuse overlay (?overlay-named)
  * allow debugging inside the sandbox with gdb and strace (?allow-debuggers)
  * mkfile profile command
  * quiet profile command
  * x11 profile command
  * option to fix desktop files (firecfg ?fix)
  Build options:
  * Busybox support (?enable-busybox-workaround)
  * disable overlayfs (?disable-overlayfs)
  * disable whitlisting (?disable-whitelist)
  * disable global config (?disable-globalcfg)
  Runtime options:
  * enable/disable overlayfs (overlayfs yes/no)
  * enable/disable quiet as default (quiet-by-default yes/no)
  * user-defined network filter (netfilter-default)
  * enable/disable whitelisting (whitelist yes/no)
  * enable/disable remounting of /proc and /sys (remount-proc-sys yes/no)
  * enable/disable chroot desktop features (chroot-desktop yes/no)
  New/updated profiels:
  * Gitter, gThumb, mpv, Franz messenger, LibreOffice
  * pix, audacity, xz, xzdec, gzip, cpio, less
  * Atom Beta, Atom, jitsi, eom, uudeview
  * tar (gtar), unzip, unrar, file, skypeforlinux,
  * inox, Slack, gnome-chess. Gajim IM client, DOSBox
- Enable apparmor support</changelog>
  <changelog author="tiwai@suse.de" date="1477569600">- Update to version 0.9.44:
  * CVE-2016-7545 submitted by Aleksey Manevich
  Modifications:
  * removed man firejail-config
  * ?private-tmp whitelists /tmp/.X11-unix directory
  * Nvidia drivers added to ?private-dev
  * /srv supported by ?whitelist
  New features:
  * allow user access to /sys/fs (?noblacklist=/sys/fs)
  * support starting/joining sandbox is a single command (?join-or-start)
  * X11 detection support for ?audit
  * assign a name to the interface connected to the bridge (?veth-name)
  * all user home directories are visible (?allusers)
  * add files to sandbox container (?put)
  * blocking x11 (?x11=block)
  * X11 security extension (?x11=xorg)
  * disable 3D hardware acceleration (?no3d)
  * x11 xpra, x11 xephyr, x11 block, allusers, no3d profile commands
  * move files in sandbox (?put)
  * accept wildcard patterns in user name field of restricted shell login feature
  New profiles:
  * qpdfview, mupdf, Luminance HDR, Synfig Studio, Gimp, Inkscape
  * feh, ranger, zathura, 7z, keepass, keepassx,
  * claws-mail, mutt, git, emacs, vim, xpdf, VirtualBox, OpenShot
  * Flowblade, Eye of GNOME (eog), Evolution</changelog>
  <changelog author="tiwai@suse.de" date="1483617600">- Update to version 0.9.44.2:
  Security fixes:
  * overwrite /etc/resolv.conf found by Martin Carpenter
  * TOCTOU exploit for ?get and ?put found by Daniel Hodson
  * invalid environment exploit found by Martin Carpenter
  * several security enhancements
  Bugfixes:
  * crashing VLC by pressing Ctrl-O
  * use user configured icons in KDE
  * mkdir and mkfile are not applied to private directories
  * cannot open files on Deluge running under KDE
  * ?private=dir where dir is the user home directory
  * cannot start Vivaldi browser
  * cannot start mupdf
  * ssh profile problems
  * ?quiet
  * quiet in git profile
  * memory corruption
- Fix VUL-0: local root exploit (CVE-2017-5180,bsc#1018259):
  firejail-CVE-2017-5180-fix1.patch
  firejail-CVE-2017-5180-fix2.patch</changelog>
  <changelog author="tiwai@suse.de" date="1484568000">- Update to version 0.9.44.4:
  * --bandwidth root shell found by Martin Carpenter (CVE-2017-5207)
  * disabled --allow-debuggers when running on kernel versions prior
    to 4.8; a kernel bug in ptrace system call allows a full bypass
    of seccomp filter; problem reported by Lizzie Dixon (CVE-2017-5206)
  * root exploit found by Sebastian Krahmer (CVE-2017-5180)
- Update to version 0.9.44.6:
  * new fix for CVE-2017-5180 reported by Sebastian Krahmer last week
  * major cleanup of file copying code
  * tightening the rules for --chroot and --overlay features
  * ported Gentoo compile patch
  * Nvidia drivers bug in --private-dev
  * fix ASSERT_PERMS_FD macro
  * allow local customization using .local files under /etc/firejail
    backported from our development branch
  * spoof machine-id backported from our development branch
- Remove obsoleted patches:
  firejail-CVE-2017-5180-fix1.patch
  firejail-CVE-2017-5180-fix2.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Update to version 0.9.48:
  * modifs: whitelisted Transmission, Deluge, qBitTorrent,
    KTorrent;
    please use ~/Downloads directory for saving files
  * modifs: AppArmor made optional; a warning is printed on the
    screen if the sandbox fails to load the AppArmor profile
  * feature: --novideo
  * feature: drop discretionary access control capabilities for
    root sandboxes
  * feature: added /etc/firejail/globals.local for global
    customizations
  * feature: profile support in overlayfs mode
  * new profiles: vym, darktable, Waterfox, digiKam, Catfish,
    HandBrake
  * bugfixes</changelog>
  <changelog author="aavindraa@gmail.com" date="1504958400">- Update to version 0.9.50:
  * New features:
  - per-profile disable-mnt (--disable-mnt)
  - per-profile support to set X11 Xephyr screen size (--xephyr-screen)
  - private /lib directory (--private-lib)
  - disable CDROM/DVD drive (--nodvd)
  - disable DVB devices (--notv)
  - --profile.print
  * modif: --output split in two commands, --output and --output-stderr
  * set xpra-attach yes in /etc/firejail/firejail.config
  * Enhancements:
  - print all seccomp filters under --debug
  - /proc/sys mounting
  - rework IP address assingment for --net options
  - support for newer Xpra versions (2.1+) -
  - all profiles use a standard layout style
  - create /usr/local for firecfg if the directory doesn't exist
  - allow full paths in --private-bin
  * New seccomp features:
  - --memory-deny-write-execute
  - seccomp post-exec
  - block secondary architecture (--seccomp.block_secondary)
  - seccomp syscall groups
  - print all seccomp filters under --debug
  - default seccomp list update
  * new profiles:
    curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
    Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
    Android Studio, electron, riot-web, Extreme Tux Racer,
    Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
    telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg,
    hashcat, obs, picard, remmina, sdat2img, soundconverter
    truecraft, gnome-twitch, tuxguitar, musescore, neverball
    sqlitebrowse, Yandex Browser, minetest</changelog>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
</package>
<package pkgid="775292f2fd049a338467b678bb038442d78071cd2f06235182d6568a703200c1" name="firejail-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.64.4" rel="lp152.3.6.1"/>
  <changelog author="tiwai@suse.de" date="1502798400">- Update to version 0.9.48:
  * modifs: whitelisted Transmission, Deluge, qBitTorrent,
    KTorrent;
    please use ~/Downloads directory for saving files
  * modifs: AppArmor made optional; a warning is printed on the
    screen if the sandbox fails to load the AppArmor profile
  * feature: --novideo
  * feature: drop discretionary access control capabilities for
    root sandboxes
  * feature: added /etc/firejail/globals.local for global
    customizations
  * feature: profile support in overlayfs mode
  * new profiles: vym, darktable, Waterfox, digiKam, Catfish,
    HandBrake
  * bugfixes</changelog>
  <changelog author="aavindraa@gmail.com" date="1504958400">- Update to version 0.9.50:
  * New features:
  - per-profile disable-mnt (--disable-mnt)
  - per-profile support to set X11 Xephyr screen size (--xephyr-screen)
  - private /lib directory (--private-lib)
  - disable CDROM/DVD drive (--nodvd)
  - disable DVB devices (--notv)
  - --profile.print
  * modif: --output split in two commands, --output and --output-stderr
  * set xpra-attach yes in /etc/firejail/firejail.config
  * Enhancements:
  - print all seccomp filters under --debug
  - /proc/sys mounting
  - rework IP address assingment for --net options
  - support for newer Xpra versions (2.1+) -
  - all profiles use a standard layout style
  - create /usr/local for firecfg if the directory doesn't exist
  - allow full paths in --private-bin
  * New seccomp features:
  - --memory-deny-write-execute
  - seccomp post-exec
  - block secondary architecture (--seccomp.block_secondary)
  - seccomp syscall groups
  - print all seccomp filters under --debug
  - default seccomp list update
  * new profiles:
    curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
    Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
    Android Studio, electron, riot-web, Extreme Tux Racer,
    Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
    telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg,
    hashcat, obs, picard, remmina, sdat2img, soundconverter
    truecraft, gnome-twitch, tuxguitar, musescore, neverball
    sqlitebrowse, Yandex Browser, minetest</changelog>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1612872000">- Bring firejail 0.9.64.4 to Leap 15.2
  - fixes boo#1181990
  - fixes CVE-2021-26910</changelog>
</package>
<package pkgid="277d86b047f355510b3833160b791b7f92d8fc58da1e8d58a7bbcdb41859d330" name="firejail-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.62" rel="lp152.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1463486400">- initial package: 0.9.38</changelog>
  <changelog author="tiwai@suse.de" date="1465387200">- Update to version 0.9.40:
  * Added firecfg utility
  * New options: -nice, -cpu.print, -writable-etc, -writable-var,
  - read-only
  * X11 support: -x11 option (-x11=xpra, -x11=xephr)
  * Filetransfer options: ?ls and ?get
  * Added mkdir, ipc-namespace, and nosound profile commands
  * added net, ip, defaultgw, ip6, mac, mtu and iprange profile
    commands
  * Run time config support, man firejail-config
  * AppArmor fixes
  * Default seccomp filter update
  * Disable STUN/WebRTC in default netfilter configuration
  * Lots of new profiles</changelog>
  <changelog author="tiwai@suse.de" date="1475236800">- Update to version 0.9.42:
  Security fixes:
  * ?whitelist deleted files
  * disable x32 ABI in seccomp
  * tighten ?chroot
  * terminal sandbox escape
  * several TOCTOU fixes
  Behavior changes:
  * bringing back ?private-home option
  * deprecated ?user option, please use ?sudo -u username firejail?
  * allow symlinks in home directory for ?whitelist option
  * Firejail prompt is enabled by env variable FIREJAIL_PROMPT=?yes?
  * recursive mkdir
  * include /dev/snd in ?private-dev
  * seccomp filter update
  * release archives moved to .xz format
  New features:
  * AppImage support (?appimage)
  * AppArmor support (?apparmor)
  * Ubuntu snap support (/etc/firejail/snap.profile)
  * Sandbox auditing support (?audit)
  * remove environment variable (?rmenv)
  * noexec support (?noexec)
  * clean local overlay storage directory (?overlay-clean)
  * store and reuse overlay (?overlay-named)
  * allow debugging inside the sandbox with gdb and strace (?allow-debuggers)
  * mkfile profile command
  * quiet profile command
  * x11 profile command
  * option to fix desktop files (firecfg ?fix)
  Build options:
  * Busybox support (?enable-busybox-workaround)
  * disable overlayfs (?disable-overlayfs)
  * disable whitlisting (?disable-whitelist)
  * disable global config (?disable-globalcfg)
  Runtime options:
  * enable/disable overlayfs (overlayfs yes/no)
  * enable/disable quiet as default (quiet-by-default yes/no)
  * user-defined network filter (netfilter-default)
  * enable/disable whitelisting (whitelist yes/no)
  * enable/disable remounting of /proc and /sys (remount-proc-sys yes/no)
  * enable/disable chroot desktop features (chroot-desktop yes/no)
  New/updated profiels:
  * Gitter, gThumb, mpv, Franz messenger, LibreOffice
  * pix, audacity, xz, xzdec, gzip, cpio, less
  * Atom Beta, Atom, jitsi, eom, uudeview
  * tar (gtar), unzip, unrar, file, skypeforlinux,
  * inox, Slack, gnome-chess. Gajim IM client, DOSBox
- Enable apparmor support</changelog>
  <changelog author="tiwai@suse.de" date="1477569600">- Update to version 0.9.44:
  * CVE-2016-7545 submitted by Aleksey Manevich
  Modifications:
  * removed man firejail-config
  * ?private-tmp whitelists /tmp/.X11-unix directory
  * Nvidia drivers added to ?private-dev
  * /srv supported by ?whitelist
  New features:
  * allow user access to /sys/fs (?noblacklist=/sys/fs)
  * support starting/joining sandbox is a single command (?join-or-start)
  * X11 detection support for ?audit
  * assign a name to the interface connected to the bridge (?veth-name)
  * all user home directories are visible (?allusers)
  * add files to sandbox container (?put)
  * blocking x11 (?x11=block)
  * X11 security extension (?x11=xorg)
  * disable 3D hardware acceleration (?no3d)
  * x11 xpra, x11 xephyr, x11 block, allusers, no3d profile commands
  * move files in sandbox (?put)
  * accept wildcard patterns in user name field of restricted shell login feature
  New profiles:
  * qpdfview, mupdf, Luminance HDR, Synfig Studio, Gimp, Inkscape
  * feh, ranger, zathura, 7z, keepass, keepassx,
  * claws-mail, mutt, git, emacs, vim, xpdf, VirtualBox, OpenShot
  * Flowblade, Eye of GNOME (eog), Evolution</changelog>
  <changelog author="tiwai@suse.de" date="1483617600">- Update to version 0.9.44.2:
  Security fixes:
  * overwrite /etc/resolv.conf found by Martin Carpenter
  * TOCTOU exploit for ?get and ?put found by Daniel Hodson
  * invalid environment exploit found by Martin Carpenter
  * several security enhancements
  Bugfixes:
  * crashing VLC by pressing Ctrl-O
  * use user configured icons in KDE
  * mkdir and mkfile are not applied to private directories
  * cannot open files on Deluge running under KDE
  * ?private=dir where dir is the user home directory
  * cannot start Vivaldi browser
  * cannot start mupdf
  * ssh profile problems
  * ?quiet
  * quiet in git profile
  * memory corruption
- Fix VUL-0: local root exploit (CVE-2017-5180,bsc#1018259):
  firejail-CVE-2017-5180-fix1.patch
  firejail-CVE-2017-5180-fix2.patch</changelog>
  <changelog author="tiwai@suse.de" date="1484568000">- Update to version 0.9.44.4:
  * --bandwidth root shell found by Martin Carpenter (CVE-2017-5207)
  * disabled --allow-debuggers when running on kernel versions prior
    to 4.8; a kernel bug in ptrace system call allows a full bypass
    of seccomp filter; problem reported by Lizzie Dixon (CVE-2017-5206)
  * root exploit found by Sebastian Krahmer (CVE-2017-5180)
- Update to version 0.9.44.6:
  * new fix for CVE-2017-5180 reported by Sebastian Krahmer last week
  * major cleanup of file copying code
  * tightening the rules for --chroot and --overlay features
  * ported Gentoo compile patch
  * Nvidia drivers bug in --private-dev
  * fix ASSERT_PERMS_FD macro
  * allow local customization using .local files under /etc/firejail
    backported from our development branch
  * spoof machine-id backported from our development branch
- Remove obsoleted patches:
  firejail-CVE-2017-5180-fix1.patch
  firejail-CVE-2017-5180-fix2.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Update to version 0.9.48:
  * modifs: whitelisted Transmission, Deluge, qBitTorrent,
    KTorrent;
    please use ~/Downloads directory for saving files
  * modifs: AppArmor made optional; a warning is printed on the
    screen if the sandbox fails to load the AppArmor profile
  * feature: --novideo
  * feature: drop discretionary access control capabilities for
    root sandboxes
  * feature: added /etc/firejail/globals.local for global
    customizations
  * feature: profile support in overlayfs mode
  * new profiles: vym, darktable, Waterfox, digiKam, Catfish,
    HandBrake
  * bugfixes</changelog>
  <changelog author="aavindraa@gmail.com" date="1504958400">- Update to version 0.9.50:
  * New features:
  - per-profile disable-mnt (--disable-mnt)
  - per-profile support to set X11 Xephyr screen size (--xephyr-screen)
  - private /lib directory (--private-lib)
  - disable CDROM/DVD drive (--nodvd)
  - disable DVB devices (--notv)
  - --profile.print
  * modif: --output split in two commands, --output and --output-stderr
  * set xpra-attach yes in /etc/firejail/firejail.config
  * Enhancements:
  - print all seccomp filters under --debug
  - /proc/sys mounting
  - rework IP address assingment for --net options
  - support for newer Xpra versions (2.1+) -
  - all profiles use a standard layout style
  - create /usr/local for firecfg if the directory doesn't exist
  - allow full paths in --private-bin
  * New seccomp features:
  - --memory-deny-write-execute
  - seccomp post-exec
  - block secondary architecture (--seccomp.block_secondary)
  - seccomp syscall groups
  - print all seccomp filters under --debug
  - default seccomp list update
  * new profiles:
    curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
    Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
    Android Studio, electron, riot-web, Extreme Tux Racer,
    Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
    telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg,
    hashcat, obs, picard, remmina, sdat2img, soundconverter
    truecraft, gnome-twitch, tuxguitar, musescore, neverball
    sqlitebrowse, Yandex Browser, minetest</changelog>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
</package>
<package pkgid="e428ad675cc29390428cfabb0912cbf17bd4c61e08c188ede24526979c03a4af" name="firejail-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.64.4" rel="lp152.3.6.1"/>
  <changelog author="tiwai@suse.de" date="1502798400">- Update to version 0.9.48:
  * modifs: whitelisted Transmission, Deluge, qBitTorrent,
    KTorrent;
    please use ~/Downloads directory for saving files
  * modifs: AppArmor made optional; a warning is printed on the
    screen if the sandbox fails to load the AppArmor profile
  * feature: --novideo
  * feature: drop discretionary access control capabilities for
    root sandboxes
  * feature: added /etc/firejail/globals.local for global
    customizations
  * feature: profile support in overlayfs mode
  * new profiles: vym, darktable, Waterfox, digiKam, Catfish,
    HandBrake
  * bugfixes</changelog>
  <changelog author="aavindraa@gmail.com" date="1504958400">- Update to version 0.9.50:
  * New features:
  - per-profile disable-mnt (--disable-mnt)
  - per-profile support to set X11 Xephyr screen size (--xephyr-screen)
  - private /lib directory (--private-lib)
  - disable CDROM/DVD drive (--nodvd)
  - disable DVB devices (--notv)
  - --profile.print
  * modif: --output split in two commands, --output and --output-stderr
  * set xpra-attach yes in /etc/firejail/firejail.config
  * Enhancements:
  - print all seccomp filters under --debug
  - /proc/sys mounting
  - rework IP address assingment for --net options
  - support for newer Xpra versions (2.1+) -
  - all profiles use a standard layout style
  - create /usr/local for firecfg if the directory doesn't exist
  - allow full paths in --private-bin
  * New seccomp features:
  - --memory-deny-write-execute
  - seccomp post-exec
  - block secondary architecture (--seccomp.block_secondary)
  - seccomp syscall groups
  - print all seccomp filters under --debug
  - default seccomp list update
  * new profiles:
    curl, mplayer2, SMPlayer, Calibre, ebook-viewer, KWrite,
    Geary, Liferea, peek, silentarmy, IntelliJ IDEA,
    Android Studio, electron, riot-web, Extreme Tux Racer,
    Frozen Bubble, Open Invaders, Pingus, Simutrans, SuperTux
    telegram-desktop, arm, rambox, apktool, baobab, dex2jar, gitg,
    hashcat, obs, picard, remmina, sdat2img, soundconverter
    truecraft, gnome-twitch, tuxguitar, musescore, neverball
    sqlitebrowse, Yandex Browser, minetest</changelog>
  <changelog author="avindra@opensuse.org" date="1513166400">- Update to version 0.9.52:
  * New features
    + systemd-resolved integration
    + whitelisted /var in most profiles
    + GTK2, GTK3 and Qt4 private-lib support
    + --debug-private-lib
    + test deployment of private-lib for the some apps: evince,
    galculator, gnome-calculator, leafpad, mousepad,
    transmission-gtk, xcalc, xmr-stak-cpu, atril,
    mate-color-select, tar, file, strings, gpicview, eom, eog,
    gedit, pluma
    + netfilter template support
    + various new arguments
  * --writable-run-user
  * --rlimit-as
  * --rlimit-cpu
  * --timeout
  * --build (profile build tool)
  * --netfilter.print
  * --netfilter6.print
  * deprecations in modif
    + --allow-private-blacklists (blacklisting, read-only,
    read-write, tmpfs and noexec are allowed in private home
    directories
    + remount-proc-sys (firejail.config)
    + follow-symlink-private-bin (firejail.config)
    + --profile-path
  * enhancements
    + support Firejail user config directory in firecfg
    + disable DBus activation in firecfg
    + enumerate root directories in apparmor profile
    + /etc and /usr/share whitelisting support
    + globbing support for --private-bin
  * new profiles: upstreamed profiles from 3 sources:
    + https://github.com/chiraag-nataraj/firejail-profiles
    + https://github.com/nyancat18/fe
    + https://aur.archlinux.org/packages/firejail-profiles
  * new profiles: terasology, surf, rocketchat, clamscan, clamdscan,
    clamdtop, freshclam, xmr-stak-cpu, amule, ardour4, ardour5,
    brackets, calligra, calligraauthor, calligraconverter,
    calligraflow, calligraplan, calligraplanwork, calligrasheets,
    calligrastage, calligrawords, cin, dooble, dooble-qt4,
    fetchmail, freecad, freecadcmd, google-earth,imagej, karbon,
    1kdenlive, krita, linphone, lmms, macrofusion, mpd, natron,
    Natron, ricochet, shotcut, teamspeak3, tor, tor-browser-en,
    Viber, x-terminal-emulator, zart, conky, arch-audit, ffmpeg,
    bluefish, cinelerra, openshot-qt, pinta, uefitool, aosp,
    pdfmod, gnome-ring, xcalc, zaproxy, kopete, cliqz,
    signal-desktop, kget, nheko, Enpass, kwin_x11, krunner, ping,
    bsdtar, makepkg (Arch), archaudit-report cower (Arch), kdeinit4
- Add full link to source tarball from sourceforge
- Add asc file</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1535025600">- Changed the permissions of the firejail executable to 4750.
  Setuid mode is used, but only allowed for users in the newly
  created group 'firejail' (boo#1059013).
- Update to version 0.9.54:
  * modif: --force removed
  * modif: --csh, --zsh removed
  * modif: --debug-check-filename removed
  * modif: --git-install and --git-uninstall removed
  * modif: support for private-bin, private-lib and shell none has been
    disabled while running AppImage archives in order to be able to use
    our regular profile files with AppImages.
  * modif: restrictions for /proc, /sys and /run/user directories
    are moved from AppArmor profile into firejail executable
  * modif: unifying Chromium and Firefox browsers profiles.
    All users of Firefox-based browsers who use addons and plugins
    that read/write from ${HOME} will need to uncomment the includes for
    firefox-common-addons.inc in firefox-common.profile.
  * modif: split disable-devel.inc into disable-devel and
    disable-interpreters.inc
  * Firejail user access database (/etc/firejail/firejail.users,
    man firejail-users)
  * add --noautopulse to disable automatic ~/.config/pulse (for complex setups)
  * Spectre mitigation patch for gcc and clang compiler
  * D-Bus handling (--nodbus)
  * AppArmor support for overlayfs and chroot sandboxes
  * AppArmor support for AppImages
  * Enable AppArmor by default for a large number of programs
  * firejail --apparmor.print option
  * firemon --apparmor option
  * apparmor yes/no flag in /etc/firejail/firejail.config
  * seccomp syscall list update for glibc 2.26-10
  * seccomp disassembler for --seccomp.print option
  * seccomp machine code optimizer for default seccomp filters
  * IPv6 DNS support
  * whitelist support for overlay and chroot sandboxes
  * private-dev support for overlay and chroot sandboxes
  * private-tmp support for overlay and chroot sandboxes
  * added sandbox name support in firemon
  * firemon/prctl enhancements
  * noblacklist support for /sys/module directory
  * whitelist support for /sys/module directory
  * new profiles: basilisk, Tor Browser language packs, PlayOnLinux, sylpheed,
  * new profiles: discord-canary, pycharm-community, pycharm-professional,
  * new profiles: pdfchain, tilp, vivaldi-snapshot, bitcoin-qt, kaffeine,
  * new profiles: falkon, gnome-builder, asunder, VS Code, gnome-recipes,
  * new profiles: akonadi_controle, evince-previewer, evince-thumbnailer,
  * new profiles: blender-2.8, thunderbird-beta, ncdu, gnome-logs, gcloud,
  * new profiles: musixmatch, gunzip, bunzip2, enchant-lsmod, enchant-lsmod-2,
  * new profiles: enchant, enchant-2, Discord, acat, adiff, als, apack,
  * new profiles: arepack, aunpack profiles, ppsspp, scallion, clion,
  * new profiles: baloo_filemetadata_temp_extractor, AnyDesk, webstorm, xmind,
  * new profiles: qmmp, sayonara</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536580800">- Remove the rpmlintrc file since the warnings are no longer relevant.</changelog>
  <changelog author="Markos Chandras &lt;mchandras@suse.de&gt;" date="1536667200">- Drop ldconfig calls since firejail libraries are installed in their
  own subdirectory which is not scanned by ldconfig.</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1537617600">- update to version 0.9.56:
  * modif: removed CFG_CHROOT_DESKTOP configuration option
  * modif: removed compile time --enable-network=restricted
  * modif: removed compile time --disable-bind
  * modif: --net=none allowed even if networking was disabled at compile
    time or at run time
  * modif: allow system users to run the sandbox
  * support wireless devices in --net option
  * support tap devices in --net option (tunneling support)
  * allow IP address configuration if the parent interface specified
    by --net is not configured (--netmask)
  * support for firetunnel utility
  * disable U2F devices (--nou2f)
  * add --private-cache to support private ~/.cache
  * support full paths in private-lib
  * globbing support in private-lib
  * support for local user directories in firecfg (--bindir)
  * new profiles: ms-excel, ms-office, ms-onenote, ms-outlook, ms-powerpoint,
  * new profiles: ms-skype, ms-word, riot-desktop, gnome-mpv, snox, gradio,
  * new profiles: standardnotes-desktop, shellcheck, patch, flameshot,
  * new profiles: rview, rvim, vimcat, vimdiff, vimpager, vimtutor, xxd,
  * new profiles: Beaker, electrum, clamtk, pybitmessage, dig, whois,
  * new profiles: jdownloader, Fluxbox, Blackbox, Awesome, i3
  * new profiles: start-tor-browser.desktop</changelog>
  <changelog author="info@paolostivanin.com" date="1549022400">-  update to version 0.9.58:
  * --disable-mnt rework
  * --net.print command
  * GitLab CI/CD integration: disto specific builds
  * profile parser enhancements and conditional handling support
    for HAS_APPIMAGE, HAS_NODBUS, BROWSER_DISABLE_U2F
  * profile name support
  * added explicit nonewprivs support to join option
  * new profiles: QMediathekView, aria2c, Authenticator, checkbashisms
  * new profiles: devilspie, devilspie2, easystroke, github-desktop, min
  * new profiles: bsdcat, bsdcpio, bsdtar, lzmadec, lbunzip2, lbzcat
  * new profiles: lbzip2, lzcat, lzcmp, lzdiff, lzegrep, lzfgrep, lzgrep
  * new profiles: lzless, lzma, lzmainfo, lzmore, unlzma, unxz, xzcat
  * new profiles: xzcmp, xzdiff, xzegrep, xzfgrep, xzgrep, xzless, xzmore
  * new profiles: lzip, artha, nitroshare, nitroshare-cli, nitroshare-nmh
  * new profiles: nirtoshare-send, nitroshare-ui, mencoder, gnome-pie
  * new profiles: masterpdfeditor, QOwnNotes, aisleriot, Mendeley
  * new profiles: feedreader, ocenaudio, mpsyt, thunderbird-wayland
  * new profiles: supertuxkart, ghostwriter, gajim-history-manager
  * bugfixes</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1559476800">- update to version 0.9.60:
  * security bug reported by Austin Morton:
  Seccomp filters are copied into /run/firejail/mnt, and are writable
  within the jail. A malicious process can modify files from inside the
  jail. Processes that are later joined to the jail will not have seccomp
  filters applied.
  CVE-2019-12589
  boo#1137139
  * memory-deny-write-execute now also blocks memfd_create
  * add private-cwd option to control working directory within jail
  * blocking system D-Bus socket with --nodbus
  * bringing back Centos 6 support
  * drop support for flatpak/snap packages
  * new profiles: crow, nyx, mypaint, celluoid, nano, transgui, mpdris2
  * new profiles: sysprof, simplescreenrecorder, geekbench, xfce4-mixer
  * new profiles: pavucontrol, d-feet, seahorse, secret-tool, gnome-keyring
  * new profiles: regextester, hardinfo, gnome-system-log, gnome-nettool
  * new profiles: netactview, redshift, devhelp, assogiate, subdownloader
  * new profiles: font-manager, exfalso, gconf-editor, dconf-editor
  * new profiles: sysprof-cli, seahorse-tool, secret-tool, dconf, gsettings
  * new profiles: code-oss, pragha, Maelstrom, ostrichriders, bzflag
  * new profiles: freeciv, lincity-ng, megaglest, openttd, crawl, crawl-tiles
  * new profiles: teeworlds, torcs, tremulous, warsow, lugaru, manaplus
  * new profiles: pioneer, scorched3d, widelands, freemind, kid3, kid3-qt
  * new profiles: kid3-cli, nomacs, freecol, opencity, openclonk, slashem
  * new profiles: vultureseye, vulturesclaw, anki, cheese, utox, mp3splt
  * new profiles: oggsplt, flacsplt, gramps, newsboat, freeoffice-planmaker
  * new profiles: autokey-gtk, autokey-qt, autokey-run, autokey-shell
  * new profiles: freeoffice-presentations, freeoffice-textmaker, mp3wrap
  * new profiles: inkview, meteo-qt, mp3splt-gtk, ktouch, yelp, cantata</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1581422400">- update to version 0.9.62
  * added file-copy-limit in /etc/firejail/firejail.config
  * profile templates (/usr/share/doc/firejail)
  * allow-debuggers support in profiles
  * several seccomp enhancements
  * compiler flags autodetection
  * move chroot entirely from path based to file descriptor based mounts
  * whitelisting /usr/share in a large number of profiles
  * new scripts in conrib: gdb-firejail.sh and sort.py
  * enhancement: whitelist /usr/share in some profiles
  * added signal mediation to apparmor profile
  * new conditions: HAS_X11, HAS_NET
  * new profiles: qgis, klatexformula, klatexformula_cmdl, links, xlinks
  * new profiles: pandoc, teams-for-linux, OpenArena, gnome-sound-recorder
  * new profiles: godot, tcpdump, tshark, newsbeuter, keepassxc-cli
  * new profiles: keepassxc-proxy, rhythmbox-client, jerry, zeal, mpg123
  * new profiles: conplay, mpg123.bin, mpg123-alsa, mpg123-id3dump, out123
  * new profiles: mpg123-jack, mpg123-nas, mpg123-openal, mpg123-oss
  * new profiles: mpg123-portaudio, mpg123-pulse, mpg123-strip, pavucontrol-qt
  * new profiles: gnome-characters, gnome-character-map, rsync, Whalebird,
  * new profiles: tor-browser (AUR), Zulip, tb-starter-wrapper, bzcat,
  * new profiles: kiwix-desktop, bzcat, zstd, pzstd, zstdcat, zstdgrep, zstdless
  * new profiles: zstdmt, unzstd, i2p, ar, gnome-latex, pngquant, kalgebra
  * new profiles: kalgebramobile, signal-cli, amuled, kfind, profanity
  * new profiles: audio-recorder, cameramonitor, ddgtk, drawio, unf, gmpc
  * new profiles: electron-mail, gist, gist-paste</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588161600">- Add firejail-0.9.62-fix-usr-etc.patch:
  Check /usr/etc not just /etc
- Replace python interpreter line in sort.py</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1596888000">- Add patches fix-CVE-2020-17367.patch and fix-CVE-2020-17368.patch to fix CVE-2020-17367 and CVE-2020-17368 and boo#1174986</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597320000">- Update to 0.9.62.2
  * fix CVE-2020-17367
  * fix CVE-2020-17368
  * additional hardening and bug fixes
- Remove fix-CVE-2020-17368.patch
- Remove fix-CVE-2020-17367.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1597838400">- Update to 0.9.62.4
  * fix AppArmor broken in the previous release
  * miscellaneous fixes</changelog>
  <changelog author="Christian Boltz &lt;suse-beta@cboltz.de&gt;" date="1603713600">- Add firejail-apparmor-3.0.diff to make the AppArmor profile compatible with
  AppArmor 3.0 (add missing include &lt;tunables/global&gt;)</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604232000">- Update to version 0.9.64:
  * replaced --nowrap option with --wrap in firemon
  * The blocking action of seccomp filters has been changed from
    killing the process to returning EPERM to the caller. To get the
    previous behaviour, use --seccomp-error-action=kill or
    syscall:kill syntax when constructing filters, or override in
    /etc/firejail/firejail.config file.
  * Fine-grained D-Bus sandboxing with xdg-dbus-proxy.
    xdg-dbus-proxy must be installed, if not D-Bus access will be allowed.
    With this version nodbus is deprecated, in favor of dbus-user none and
    dbus-system none and will be removed in a future version.
  * DHCP client support
  * firecfg only fix dektop-files if started with sudo
  * SELinux labeling support
  * custom 32-bit seccomp filter support
  * restrict ${RUNUSER} in several profiles
  * blacklist shells such as bash in several profiles
  * whitelist globbing
  * mkdir and mkfile support for /run/user directory
  * support ignore for include
  * --include on the command line
  * splitting up media players whitelists in whitelist-players.inc
  * new condition: HAS_NOSOUND
  * new profiles: gfeeds, firefox-x11, tvbrowser, rtv, clipgrab, muraster
  * new profiles: gnome-passwordsafe, bibtex, gummi, latex, mupdf-x11-curl
  * new profiles: pdflatex, tex, wpp, wpspdf, wps, et, multimc, mupdf-x11
  * new profiles: gnome-hexgl, com.github.johnfactotum.Foliate, mupdf-gl, mutool
  * new profiles: desktopeditors, impressive, planmaker18, planmaker18free
  * new profiles: presentations18, presentations18free, textmaker18, teams
  * new profiles: textmaker18free, xournal, gnome-screenshot, ripperX
  * new profiles: sound-juicer, com.github.dahenson.agenda, gnome-pomodoro
  * new profiles: gnome-todo, x2goclient, iagno, kmplayer, penguin-command
  * new profiles: frogatto, gnome-mines, gnome-nibbles, lightsoff, warmux
  * new profiles: ts3client_runscript.sh, ferdi, abiword, four-in-a-row
  * new profiles: gnome-mahjongg, gnome-robots, gnome-sudoku, gnome-taquin
  * new profiles: gnome-tetravex, blobwars, gravity-beams-and-evaporating-stars
  * new profiles: hyperrogue, jumpnbump-menu, jumpnbump, magicor, mindless
  * new profiles: mirrormagic, mrrescue, scorched3d-wrapper, scorchwentbonkers
  * new profiles: seahorse-adventures, wordwarvi, xbill, gnome-klotski
  * new profiles: swell-foop, fdns, five-or-more, steam-runtime
  * new profiles: nicotine, plv, mocp, apostrophe, quadrapassel, dino-im
  * new profiles: hitori, bijiben, gnote, gnubik, ZeGrapher, xonotic-sdl-wrapper
  * new profiles: gapplication, openarena_ded, element-desktop, cawbird
  * new profiles: freetube, strawberry, jitsi-meet-desktop
  * new profiles: homebank, mattermost-desktop, newsflash, com.gitlab.newsflash
  * new profiles: sushi, xfce4-screenshooter, org.gnome.NautilusPreviewer, lyx
  * new profiles: minitube, nuclear, mtpaint, minecraft-launcher, gnome-calendar
  * new profiles: vmware, git-cola, otter-browser, kazam, menulibre, musictube
  * new profiles: onboard, fractal, mirage, quaternion, spectral, man, psi
  * new profiles: smuxi-frontend-gnome, balsa, kube, trojita, youtube
  * new profiles: youtubemusic-nativefier, cola, dbus-send, notify-send
  * new profiles: qrencode, ytmdesktop, twitch
  * new profiles: xournalpp, chromium-freeworld, equalx
- remove firejail-0.9.62-fix-usr-etc.patch, included upstream
- remove firejail-apparmor-3.0.diff, included upstream</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1604318400">- packaging fixes</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1611835200">- Update to 0.9.64.2:
  * allow --tmpfs inside $HOME for unprivileged users
  * --disable-usertmpfs compile time option
  * allow AF_BLUETOOTH via --protocol=bluetooth
  * setup guide for new users: contrib/firejail-welcome.sh
  * implement netns in profiles
  * added nolocal6.net IPv6 network filter
  * new profiles: spectacle, chromium-browser-privacy,
    gtk-straw-viewer, gtk-youtube-viewer, gtk2-youtube-viewer,
    gtk3-youtube-viewer, straw-viewer, lutris, dolphin-emu,
    authenticator-rs, servo, npm, marker, yarn, lsar, unar, agetpkg,
    mdr, shotwell, qnapi, new profiles: guvcview, pkglog, kdiff3, CoyIM.</changelog>
  <changelog author="???? ?????? &lt;ilya@ilya.pp.ua&gt;" date="1612699200">- Update to 0.9.64.4:
  * disabled overlayfs, pending multiple fixes
  * fixed launch firefox for open url in telegram-desktop.profile</changelog>
  <changelog author="Sebastian Wagner &lt;sebix+novell.com@sebix.at&gt;" date="1612872000">- Bring firejail 0.9.64.4 to Leap 15.2
  - fixes boo#1181990
  - fixes CVE-2021-26910</changelog>
</package>
<package pkgid="e9472101a444a139251b37de16761009aa02e2f0f9edf5105310113c502e5845" name="fish-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="lp152.5.3.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
</package>
<package pkgid="210e9e04f5e7eb81266ef02cfe80e732ff3c0e9f90a9f95df2d38a226446fcb3" name="fish-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="lp152.5.3.1"/>
  <changelog author="seanpwatson@live.com" date="1417435200">- Fixed conflict with youtube-dl</changelog>
  <changelog author="zawertun@gmail.com" date="1422446400">- Added check_for_command-not-found_command_on_suse.patch
  (https://github.com/fish-shell/fish-shell/issues/1208)</changelog>
  <changelog author="schwab@suse.de" date="1423137600">- no-return-in-nonvoid-function.patch: fix no-return-in-nonvoid-function
  error</changelog>
  <changelog author="simon@simotek.net" date="1426939200">- Require: python-curses Its required for the prompt page on
    the web config</changelog>
  <changelog author="develop7@develop7.info" date="1437998400">- update to v2.2.0
  See full changelog on
  https://github.com/fish-shell/fish-shell/releases/tag/2.2.0
- Drop check_for_command-not-found_command_on_suse.patch</changelog>
  <changelog author="infroma@gmail.com" date="1447934400">- Recommends: terminfo (required for some terminals)
- Requires: man (required for completions, otherwise fish complains
  about non existant `apropos` on every TAB)</changelog>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
</package>
<package pkgid="87f54f940e2f0917d024da2deb5d0c147c5d0115ba6e84330921dac3dd21b9fd" name="fish3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584360000">- Update to 3.1.0
  * A new $pipestatus variable contains a list of exit statuses
  of the previous job, for each of the separate commands in a pipeline
  * fish no longer buffers pipes to the last function in a pipeline,
  improving many cases where pipes appeared to block or hang
  * cd now always looks for its argument in the current directory as a
  last resort, even if the CDPATH variable does not include it or "."
  * fish's debugging arguments have been significantly improved
  * new builtin command, time, which allows timing of fish functions
  and builtins as well as external commands
  * Brace expansion now only takes place if the braces include a "," or
  a variable expansion, meaning common commands such as
  git reset HEAD@{0} do not require escaping
  * many other fixes and improvements</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585656000">- Fix build with gcc10 fix-gcc10-build.patch (boo#1167862)
- Use python3 rather then python2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Don't require python3 at all, it's only used for tests but there's
  no %check section.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588248000">- Update to 3.1.2:
  * Commands such as fzf and enhancd, when used with eval, would
    hang. eval buffered output too aggressively, which has been
  fixed (#6955).
- Changes in 3.1.2:
  * Commands which involve . ( ... | psub) now work correctly, as
    a bug in the function --on-job-exit option has been fixed (#6613).
  * Conflicts between upstream packages for ripgrep and bat, and the
    fish packages, have been resolved (#5822).
  * Starting fish in a directory without read access, such as via
    su, no longer crashes (#6597).
  * Glob ordering changes which were introduced in 3.1.0 have been
    reverted, returning the order of globs to the previous state (#6593).
  * Redirections using the deprecated caret syntax to a file
    descriptor (eg ^&amp;2) work correctly (#6591).
  * Redirections that append to a file descriptor (eg 2&gt;&gt;&amp;1)
    work correctly (#6614).
  * Building fish on macOS (#6602) or with new versions of GCC
    (#6604, #6609) is now successful.
  * time is now correctly listed in the output of builtin -n,
    and time --help works correctly (#6598).
  * Exported universal variables now update properly (#6612).
  * status current-command gives the expected output when used
    with an environment override - that is, F=B status current-command
    returns status instead of F=B (#6635).
  * test no longer crashes when used with "nan" or "inf" arguments,
    erroring out instead (#6655).
  * Copying from the end of the command line no longer crashes
    fish (#6680).
  * read no longer removes multiple separators when splitting a
    variable into a list, restoring the previous behaviour from fish
    3.0 and before (#6650).
  * Functions using --on-job-exit and --on-process-exit work
    reliably again (#6679).
  * Functions using --on-signal INT work reliably in interactive
    sessions, as they did in fish 2.7 and before (#6649). These handlers
    have never worked in non-interactive sessions, and making them
    work is an ongoing process.
  * Functions using --on-variable work reliably with variables which
    are set implicitly (rather than with set), such as
    "fish_bind_mode" and "PWD" (#6653).
  * 256 colors are properly enabled under certain conditions that were
    incorrectly detected in fish 3.1.0 ($TERM begins with xterm, does
    not include "256color", and $TERM_PROGRAM is not set) (#6701).
  * The Mercurial (hg) prompt no longer produces an error when the
    current working directory is removed (#6699). Also, for performance
    reasons it shows only basic information by default; to restore the
    detailed status, set $fish_prompt_hg_show_informative_status.
  * The VCS prompt, fish_vcs_prompt, no longer displays Subversion (svn)
    status by default, due to the potential slowness of this operation (#6681).
  * Pasting of commands has been sped up (#6713).
  * Using extended Unicode characters, such as emoji, in a non-Unicode
    capable locale (such as the C or POSIX locale) no longer renders
    all output blank (#6736).
  * help prefers to use xdg-open, avoiding the use of open on Debian
    systems where this command is actually openvt (#6739).
  * Command lines starting with a space, which are not saved in history,
    now do not get autosuggestions. This fixes an issue with Midnight
    Commander integration (#6763), but may be changed in a future version.
  * Copying to the clipboard no longer inserts a newline at the end of the
    content, matching fish 2.7 and earlier (#6927).
  * fzf in complex pipes no longer hangs. More generally, code run as
    part of command substitutions or eval will no longer have separate
    process groups. (#6624, #6806).
- Remove fix-gcc10-build.patch: upstreamed</changelog>
  <changelog author="Sam Yu &lt;ytz1995@hotmail.com&gt;" date="1596974400">- Fix empty output of fish builtin help</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1612785600">- Sync with tumbleweed fish package to update and fix bugs
- pc file contained references to /usr/local (boo#1181888)
  * fix-pc-file-paths.patch - Already fixed upstream</changelog>
</package>
<package pkgid="887d3763c1f344bb17d2cc7650b0cfd6ed5a40c935e695b39c194c16160e562f" name="fish3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.1.2" rel="lp152.2.3.1"/>
  <changelog author="sflees@suse.de" date="1464004800">- Update to v2.3.0
- Significant Changes
  * A new string builtin to handle? strings!
  * After seeing an escape character wait up to 300ms for an a
    dditional character.
  * Add new directories for vendor functions and configuration
    snippets (#2498)
  * A new fish_realpath builtin and associated function to allow
    the use of realpath even on those platforms that don't ship
    an appropriate command. (#2932)
  * Alt-# toggles the current command line between commented and
    uncommented states, making it easy to save a command in
    history without executing it.
  * The fish_vi_mode function is now deprecated in favour of
    fish_vi_key_bindings
- Backward-incompatible changes
  * Unmatched globs will now cause an error, except when used
    with for, set or count (#2719, #2394) and and or will now bind
    to the closest if or while, allowing compound conditions without
    begin and end (#1428)
  * set -ql now searches up to function scope for variables (#2502)
  * status -f will now behave the same when run as the main script
    or using source (#2643)
  * source no longer puts the file name in $argv if no arguments
    are given (#139)
- Full release notes at
  https://github.com/fish-shell/fish-shell/releases/tag/2.3.0</changelog>
  <changelog author="sflees@suse.de" date="1467633600">- Update to v2.3.1
- Significant changes
  * A new fish_key_reader binary for decoding interactive keypresses (#2991).
  * fish_mode_prompt has been updated to reflect the changes in the way the
    Vi input mode is set up (#3067), making this more reliable.
  * fish_config can now properly be launched from the OS X app bundle (#3140).
- Notable fixes and improvements
  * Extra lines were sometimes inserted into the output under Windows (Cygwin
    and Microsoft Windows Subsystem for Linux) due to TTY timestamps
    not being updated (#2859).
  * The string builtin's match mode now handles the combination of -rnv (match,
    invert and count) correctly (#3098).
  * Improvements to TTY special character handling (#3064), locale handling (#3124)
    and terminal environment variable handling (#3060).
  * Work towards handling the terminal modes for external commands launched
    from initialisation files (#2980).
  * Ease the upgrade path from fish 2.2.0 and before by warning users to restart
    fish if the string builtin is not available (#3057).
  * type -a now syntax-colorizes function source output.
  * Added completions for alsamixer, godoc, gofmt, goimports, gorename, lscpu,
    mkdir, modinfo, netctl-auto, poweroff, termite, udisksctl and xz (#3123).
  * Improved completions for apt (#3097), aura (#3102),git (#3114), npm (#3158),
    string and suspend (#3154).</changelog>
  <changelog author="sflees@suse.de" date="1467720000">- Update source url to point to github as within the release notes,
  the older url doens't seem available</changelog>
  <changelog author="mpluskal@suse.com" date="1473508800">- Use shared libpcre instead of bundled one
- Small packaging changes</changelog>
  <changelog author="aloisio@gmx.com" date="1478606400">- Update to version 2.4.0
  [#]# Notable fixes and improvements
  * The documentation is now generated properly and with the
    correct version identifier.
  * Automatic cursor changes are now only enabled on the
    subset of XTerm versions known to support them, resolving a
    problem where older versions printed garbage to the terminal
    before and after every prompt (#3499).
  * Improved the title set in Apple Terminal.app.
  * Added completions for `defaults` and improved completions
    for `diskutil` (#3478).
  [#] fish 2.4b1 (released October 18, 2016)
  [#]# Significant changes
  * The clipboard integration has been revamped with explicit
    bindings. The killring commands no longer copy from, or
    paste to, the X11 clipboard - use the new copy (`C-x`) and
    paste (`C-v`) bindings instead. The clipboard is now
    available on OS X as well as systems using X11 (e.g. Linux).
    (#3061)
  * `history` uses subcommands (`history delete`) rather than
    options (`history --delete`) for its actions (#3367). You
    can no longer specify multiple actions via flags (e.g.,
    `history --delete --save something`).
  * New `history` options have been added, including `--max=n`
    to limit the number of history entries, `--show-time` option
    to show timestamps (#3175, #3244), and `--null` to null
    terminate history entries in the search output.
  * `history search` is now case-insensitive by default (which
    also affects `history delete`) (#3236).
  * `history delete` now correctly handles multiline commands
    (#31).
  * Vi-style bindings no longer include all of the default
    emacs-style bindings; instead, they share some definitions
    (#3068).
  * If there is no locale set in the environment, various
    known system configuration files will be checked for a
    default. If no locale can be found, `en_US-UTF.8` will be
    used (#277).
  * A number followed by a caret (e.g. `5^`) is no longer
    treated as a redirection (#1873).
  * The `$version` special variable can be overwritten, so
    that it can be used for other purposes if required.
  [#]# Notable fixes and improvements
  * The `fish_realpath` builtin has been renamed to `realpath`
    and made compatible with GNU `realpath` when run without
    arguments (#3400). It is used only for systems without a
    `realpath` or `grealpath` utility (#3374).
  * Improved color handling on terminals/consoles with 8-16
    colors, particularly the use of bright named color (#3176,
    [#3260]).
  * `fish_indent` can now read from files given as arguments,
    rather than just standard input (#3037).
  * Fuzzy tab completions behave in a less surprising manner
    (#3090, #3211).
  * `jobs` should only print its header line once (#3127).
  * Wildcards in redirections are highlighted appropriately
    (#2789).
  * Suggestions will be offered more often, like after
    removing characters (#3069).
  * `history --merge` now correctly interleaves items in
    chronological order (#2312).
  * Options for `fish_indent` have been aligned with the other
    binaries - in particular, `-d` now means `--debug`. The
    `--dump` option has been renamed to `--dump-parse-tree`
    (#3191).
  * The display of bindings in the Web-based configuration has
    been greatly improved (#3325), as has the rendering of
    prompts (#2924).
  * fish should no longer hang using 100% CPU in the C locale
    (#3214).
  * A bug in FreeBSD 11 &amp; 12, Dragonfly BSD &amp; illumos
    prevented fish from working correctly on these platforms
    under UTF-8 locales; fish now avoids the buggy behaviour
    (#3050).
  * Prompts which show git repository information (via
    `__fish_git_prompt`) are faster in large repositories
    (#3294) and slow filesystems (#3083).
  * fish 2.3.0 reintroduced a problem where the greeting was
    printed even when using `read`; this has been corrected
    again (#3261).
  * Vi mode changes the cursor depending on the current mode
    (#3215).
  * Command lines with escaped space characters at the end
    tab-complete correctly (#2447).
  * Added completions for:
    + `arcanist` (#3256)
    + `connmanctl` (#3419)
    + `figlet` (#3378)
    + `mdbook` (#3378)
    +  `ninja` (#3415)
    +  `p4`, the Perforce client (#3314)
    +  `pygmentize` (#3378)
    +  `ranger` (#3378)
  * Improved completions for `aura` (#3297), `abbr` (#3267),
    `brew` (#3309), `chown` (#3380, #3383),`cygport` (#3392),
    `git` (#3274, #3226, #3225, #3094, #3087, #3035, #3021,
    [#2982], #3230), `kill &amp; `pkill` (#3200), `screen` (#3271),
    `wget` (#3470), and `xz` (#3378).
  * Distributors, packagers and developers will notice that
    the build process produces more succinct output by default;
    use `make V=1` to get verbose output (#3248).
  * Improved compatibility with minor platforms including musl
    (#2988), Cygwin (#2993), Android (#3441, #3442), Haiku
    (#3322) and Solaris .
- Dropped no longer necessary
  no-return-in-nonvoid-function.patch</changelog>
  <changelog author="sflees@suse.de" date="1486123200">- Update to 2.5.0
  Notable fixes and improvements
  * alias, run without options or arguments, lists all defined aliases, and
    aliases now include a description in the function signature that identifies
    them.
  * complete accepts empty strings as descriptions (#3557).
  * command accepts -q/--quiet in combination with --search (#3591), providing
    a simple way of checking whether a command exists in scripts.
  * Abbreviations can now be renamed with abbr --rename OLD_KEY NEW_KEY (#3610).
  * The command synopses printed by --help options work better with copying and
    pasting (#2673).
  * help launches the browser specified by the $fish_help_browser variable if it
    is set (#3131).
  * History merging could lose items under certain circumstances and is now
    fixed (#3496).
  * The $status variable is now set to 123 when a syntactically invalid command
    is entered (#3616).
  * Exiting fish now signals all background processes to terminate, not just
    stopped jobs (#3497).
  * A new prompt_hostname function which prints a hostname suitable for use in
    prompts (#3482).
  * The __fish_man_page function (bound to Alt-h by default) now tries to
    recognize subcommands (e.g. git add will now open the "git-add" man page)
    (#3678).
  * A new function edit_command_buffer (bound to Alt-e &amp; Alt-v by default) to
    edit the command buffer in an external editor (#1215, #3627).
  * set_color now supports italics (--italics), dim (--dim) and reverse
    (--reverse) modes (#3650).
  * Filesystems with very slow locking (eg incorrectly-configured NFS) will no
    longer slow fish down (#685).
  * Improved completions for apt (#3695), fusermount (#3642), make (#3628),
    netctl-auto (#3378), nmcli (#3648), pygmentize (#3378), and tar (#3719).
  * Added completions for:
    VBoxHeadless (#3378)
    VBoxSDL (#3378)
    base64 (#3378)
    caffeinate (#3524)
    dconf (#3638)
    dig (#3495)
    dpkg-reconfigure (#3521 &amp; #3522)
    feh (#3378)
    launchctl (#3682)
    lxc (#3554 &amp; #3564),
    mddiagnose (#3524)
    mdfind (#3524)
    mdimport (#3524)
    mdls (#3524)
    mdutil (#3524)
    mkvextract (#3492)
    nvram (#3524)
    objdump (#3378)
    sysbench (#3491)
    tmutil (#3524)
  * Full changelog https://github.com/fish-shell/fish-shell/releases/tag/2.5.0</changelog>
  <changelog author="vilene@posteo.net" date="1496836800">- Update to 2.6.0. Notable fixes and improvements:
  * Jobs running in the background can now be removed from the list of jobs
    with the new disown builtin, which behaves like the same command in other
    shells (#2810).
  * Command substitutions now have access to the terminal, like in other
    shells. This allows tools like fzf to work properly (#1362, #3922).
  * In cases where the operating system does not report the size of the
    terminal, the COLUMNS and LINES environment variables are used; if they
    are unset, a default of 80x24 is assumed.
  * New French (#3772 &amp; #3788) and improved German (#3834) translations.
  * fish no longer depends on the which external command.
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.6.0</changelog>
  <changelog author="jaime.marquinez.ferrandiz@fastmail.net" date="1511611200">- Update to 2.7.0. Notable improvements:
  * A new cdh (change directory using recent history) command provides a more
    friendly alternative to prevd/nextd and pushd/popd (#2847).
  * A new argparse command is available to allow fish script to parse arguments
    with the same behavior as builtin commands. This also includes the fish_opt helper command. (#4190).
  * Invalid array indexes are now silently ignored (#826, #4127).
  * Improvements to the debugging facility, including a prompt specific to the
    debugger (fish_breakpoint_prompt) and a status is-breakpoint subcommand (#1310).
  * string supports new lower and upper subcommands, for altering the case of
    strings (#4080). The case changing is not locale-aware yet.
  * string escape has a new --style=xxx flag where xxx can be script, var,
    or url (#4150), and can be reversed with string unescape (#3543).
  * History can now be split into sessions with the fish_history variable,
    or not saved to disk at all (#102).
  * Read history is now controlled by the fish_history variable rather than
    the --mode-name flag (#1504).
  * command now supports an --all flag to report all directories with the
    command. which is no longer a runtime dependency (#2778).
  * fish can run commands before starting an interactive session using the new
  - -init-command/-C options (#4164).
  * set has a new --show option to show lots of information about variables
    (#4265).
  * Full changelog: https://github.com/fish-shell/fish-shell/releases/tag/2.7.0</changelog>
  <changelog author="sflees@suse.de" date="1515153600">- Don't Require python-curses its not needed or used</changelog>
  <changelog author="avindra@opensuse.org" date="1522497600">- Update to 2.7.1
  * macos specific fix for iTerm2
- cleanup with spec-cleaner
- use https URL
- rpmlint: fix E: devel-file-in-non-devel-package
- rpmlint: fix E: env-script-interpreter</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Trim some bias from description.
- Anchor grep patterns in %post(un) so that it does not erroneously
  match other lines.</changelog>
  <changelog author="sean@suspend.net" date="1546084800">- Update to 3.0.0
  * Process and job expansion has largely been removed
  * A literal {} now expands to itself, rather than nothing
  * Literally accessing a zeor-index is now illegal syntax
  * for loop variables are no longer local to the for block
  * Local exported (set -1x) vars are now visible to functions
  * The new math builtin does not support logical expressions
  * fish now supports &amp;&amp; || and ! for better migration from POSIX
  * Variables may be used as commanes (#154)
  * fish may be started in private mode via fish --private
  * A new wait command for waiting on backgrounded processes
  * math is now a builtin wrather than a wrapper around bc (#3157)
  * while sets $status to a non-zero value if the loop is not exec'd (#4982)
  * Command sub output now limited to 10MB by default
  * The machine hostname is now exposed as the $hostname reserved variable
  * Bare bind invocations in config.fish now work</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1550145600">- Split out fish3 package for Leap 15.1</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1562068800">- Should write fish rather then fish3 into /etc/shells
- fish3-devel should conflict with fish-devel</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584360000">- Update to 3.1.0
  * A new $pipestatus variable contains a list of exit statuses
  of the previous job, for each of the separate commands in a pipeline
  * fish no longer buffers pipes to the last function in a pipeline,
  improving many cases where pipes appeared to block or hang
  * cd now always looks for its argument in the current directory as a
  last resort, even if the CDPATH variable does not include it or "."
  * fish's debugging arguments have been significantly improved
  * new builtin command, time, which allows timing of fish functions
  and builtins as well as external commands
  * Brace expansion now only takes place if the braces include a "," or
  a variable expansion, meaning common commands such as
  git reset HEAD@{0} do not require escaping
  * many other fixes and improvements</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1585656000">- Fix build with gcc10 fix-gcc10-build.patch (boo#1167862)
- Use python3 rather then python2</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Don't require python3 at all, it's only used for tests but there's
  no %check section.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1588248000">- Update to 3.1.2:
  * Commands such as fzf and enhancd, when used with eval, would
    hang. eval buffered output too aggressively, which has been
  fixed (#6955).
- Changes in 3.1.2:
  * Commands which involve . ( ... | psub) now work correctly, as
    a bug in the function --on-job-exit option has been fixed (#6613).
  * Conflicts between upstream packages for ripgrep and bat, and the
    fish packages, have been resolved (#5822).
  * Starting fish in a directory without read access, such as via
    su, no longer crashes (#6597).
  * Glob ordering changes which were introduced in 3.1.0 have been
    reverted, returning the order of globs to the previous state (#6593).
  * Redirections using the deprecated caret syntax to a file
    descriptor (eg ^&amp;2) work correctly (#6591).
  * Redirections that append to a file descriptor (eg 2&gt;&gt;&amp;1)
    work correctly (#6614).
  * Building fish on macOS (#6602) or with new versions of GCC
    (#6604, #6609) is now successful.
  * time is now correctly listed in the output of builtin -n,
    and time --help works correctly (#6598).
  * Exported universal variables now update properly (#6612).
  * status current-command gives the expected output when used
    with an environment override - that is, F=B status current-command
    returns status instead of F=B (#6635).
  * test no longer crashes when used with "nan" or "inf" arguments,
    erroring out instead (#6655).
  * Copying from the end of the command line no longer crashes
    fish (#6680).
  * read no longer removes multiple separators when splitting a
    variable into a list, restoring the previous behaviour from fish
    3.0 and before (#6650).
  * Functions using --on-job-exit and --on-process-exit work
    reliably again (#6679).
  * Functions using --on-signal INT work reliably in interactive
    sessions, as they did in fish 2.7 and before (#6649). These handlers
    have never worked in non-interactive sessions, and making them
    work is an ongoing process.
  * Functions using --on-variable work reliably with variables which
    are set implicitly (rather than with set), such as
    "fish_bind_mode" and "PWD" (#6653).
  * 256 colors are properly enabled under certain conditions that were
    incorrectly detected in fish 3.1.0 ($TERM begins with xterm, does
    not include "256color", and $TERM_PROGRAM is not set) (#6701).
  * The Mercurial (hg) prompt no longer produces an error when the
    current working directory is removed (#6699). Also, for performance
    reasons it shows only basic information by default; to restore the
    detailed status, set $fish_prompt_hg_show_informative_status.
  * The VCS prompt, fish_vcs_prompt, no longer displays Subversion (svn)
    status by default, due to the potential slowness of this operation (#6681).
  * Pasting of commands has been sped up (#6713).
  * Using extended Unicode characters, such as emoji, in a non-Unicode
    capable locale (such as the C or POSIX locale) no longer renders
    all output blank (#6736).
  * help prefers to use xdg-open, avoiding the use of open on Debian
    systems where this command is actually openvt (#6739).
  * Command lines starting with a space, which are not saved in history,
    now do not get autosuggestions. This fixes an issue with Midnight
    Commander integration (#6763), but may be changed in a future version.
  * Copying to the clipboard no longer inserts a newline at the end of the
    content, matching fish 2.7 and earlier (#6927).
  * fzf in complex pipes no longer hangs. More generally, code run as
    part of command substitutions or eval will no longer have separate
    process groups. (#6624, #6806).
- Remove fix-gcc10-build.patch: upstreamed</changelog>
  <changelog author="Sam Yu &lt;ytz1995@hotmail.com&gt;" date="1596974400">- Fix empty output of fish builtin help</changelog>
  <changelog author="Simon Lees &lt;sflees@suse.de&gt;" date="1612785600">- Sync with tumbleweed fish package to update and fix bugs
- pc file contained references to /usr/local (boo#1181888)
  * fix-pc-file-paths.patch - Already fixed upstream</changelog>
</package>
<package pkgid="66c26d3bb8b6c31ce59aebcf1f64a2c062e420be692421a8dd9c5f00b8130849" name="flac-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="1fc477e24ac48b7ac0994cb3f137e0e5ed7a69437d84ad5647590e1f3c0f4fb7" name="flac-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="0c63b67c193a7565040aadc3380e3206fa7ff421149ebb3cd0ee23436d3a9325" name="flac-debugsource" arch="i586">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="086763ba1f3e635c40653b37d1c58cd0714a78109cd2a6e48fc000194a8e6066" name="flac-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="ba6784304e339cdb05e7889e4a893825a80fb638e6ca95908338441b2678753f" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="lp152.3.6.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1581595200">- Update to version 1.6.2:
  + Due to a combination of some behaviour in flatpak and recent
    versions of ostree we at some point lost the use of deltas for
    the initial install case, instead always falling back to a full
    ostree operation which is a lot less efficient for pulls with
    many small files like a runtime. This caused some very slow
    installs from e.g. flathub, so it's recommended to update to
    this version to get better install performance.
  + We now correctly handle TMPDIR env var overrides when bwrap is
    setuid
  + Disallow running "flatpak run" under sudo (as it doesn't work
    and causes issues)
  + Fix build with older versions of glib
  + Minor documentation updates
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Drop obsolete _servicedata file.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174400">- Update to version 1.6.3:
  + The main change in this version is a fix for a regression in
    the progress calculation for applications using extra-data.
    Additionally the bundled version of bubblewrap is updated to
    0.4.1 which fixes a security issue in some cases. See
    GHSA-j2qp-rvxj-43vj for details.
  + Don't break if users primary gid is not in the nsswitch
    database
  + Fix crash in flatpak repair if no remotes are configured
  + Some updates to the oci authenticator
  + Retry downloads of extra data
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174401">- Require bubblewrap 0.4.1</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1589803200">- When SLE uses GNOME desktop environment, GNOME Software is
  automatically started to provide key update features. During the
  startup, it setups flatpak repository so that related features
  can function properly. In a system environment of no flatpak
  repository has ever been setup before, this triggers
  "org.freedesktop.Flatpak.modify-repo" polkit action.
  Therefore in systems which use a restrictive security policy
  (eg. SLES) for the aforementioned policy action, a polkit
  authentication dialog will pop up without any user interaction
  for the first time login. This is not user friendly.
  This submission creates /var/lib/flatpak/repo at package
  installation to avoid such a confusing authentication pop-up, at
  nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592308800">- Create a skeleton flatpak repo using "flatpak remotes" instead
  of a manually created directory (bsc#1172316, bsc#1169619,
  bsc#1170416).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1593086400">- Update to version 1.6.4:
  + This release backports some of the OCI authenticator fixes from
    the 1.7 series, and should now be able to host flatpak images
    on e.g. docker hub.
  + Other changes:
  - Fix a use-after free in libflatpak.
  - Don't list p2p downgrades in list of available updates.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594382400">- Update to version 1.8.1:
  * Avoid calling authenticator in update if ref didn't change
  * Don't fail transaction if ref is already installed (after
    transaction start)
  * Fix flatpak run handling of userns in the --device=all case
  * Fix handling of extensions from different remotes
  * Fix flatpak run --no-session-bus
  * Updated translations
- Update to version 1.8.0:
  * FlatpakTransaction has a new signal "install-authenticator"
    which clients can handle to install authenticators needed for
    the transaction. This is done in the CLI commands.
  * We now always expose the host timezone data, allowing us the
    expose the host /etc/localtime in a way that works better,
    fixing several apps that had timezone issues.
  * Fix flatpak enter which didn't work in some cases.
  * We now ship a systemd unit (not installed by default) to
    automatically detect plugged in usb sticks with sideload repos.
  * By default we no longer install the gdm env.d file, as the
    systemd generators work better.
  * create-usb now exports partial commits by default
  * Fix handling of docker media types in oci remotes
  * Fix subjects in remote-info --log output
- Remove source file used to generate a flatpak user on the system
  since it's now included by upstream:
  * system-user-flatpak.conf</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Fix invalid usage of %{_libexecdir} to reference systemd
  directories.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1598097600">- Update to version 1.8.2:
  + Added validation of collection id settings for remotes.
  + Fix seccomp filters on s390.
  + Robustness fixes to the spawn portal.
  + Fix support for masking update in the system installation.
  + Better support for distros with uncommon models of merged /usr.
  + Cache responses from localed/AccountService.
  + Fix hangs in cases where xdg-dbus-proxy fails to start.
  + Fix double-free in cups socket detection.
  + OCI authenticator now doesn't ask for auth in case of http
    errors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606132800">- Update to version 1.8.3:
  + Fixed progress reporting for OCI and extra-data.
  + The in-memory summary cache is more efficient.
  + Fixed authentication getting stuck in a loop in some cases.
  + Fixed authentication error reporting.
  + We now extract OCI info for runtimes as well as apps.
  + Fixed crash if anonymous authentication fails and -y is
    specified.
  + flatpak info now only looks at the specified installation if
    one is specified.
  + Better error reporting for server HTTP errors during download.
  + Uninstall now removes applications before the runtime it
    depends on.
  + Fixed test-suite to pass with the latest OSTree version.
  + Fixed dbus environment variables in flatpak enter.
  + Avoid updating metadata from the remote when uninstalling.
  + Fixed error message handling in various places.
  + FlatpakTransaction now verifies all passed in refs to avoid.
  + potential issues with invalid names.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1608033600">- Enable LTO (boo#1133124) as gobject-introspection works fine with LTO.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1609329600">- Move flatpak-bisect and flatpak-coredumpctl to devel subpackage,
  allow to remove python3 dependency on main package.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610020800">- Update to version 1.8.4:
  + Fix support for ppc64.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610712000">- Update to version 1.8.5 (CVE-2021-21261):
  + This is a security update that fixes a sandbox escape where a
    malicious application can execute code outside the sandbox by
    controlling the environment of the "flatpak run" command when
    spawning a sub-sandbox (boo#1180996)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610712001">- Update to version 1.10.0:
  + The major new feature in this series compared to 1.8 is the
    support for the new repo format which should make updates
    faster and download less data.
  + The systemd generator snippets now call flatpak
  - -print-updated-env in place of a bunch of shell for better
    login performance.
  + The .profile snippets now disable GVfs when calling flatpak to
    avoid spawning a gvfs daemon when logging in via ssh.
  + Build fixes for GCC 11.
  + Flatpak now finds the pulseaudio sockets better in uncommon
    configurations.
  + Sandboxes with network access it now also has access to the
    systemd-resolved socket to do dns lookups.
  + Flatpak supports unsetting env vars in the sandbox using
  - -unset-env, and --env=FOO= now sets FOO to the empty string
    instead of unsetting it.
  + Similarly the spawn portal has an option to unset an env var.
  + The spawn portal now has an option to share the pid namespace
    with the sub-sandbox.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1611489600">- Update to version 1.10.1:
  + Fix flatpak build on systems with setuid bwrap
  + Fix some compiler warnings
  + Fix crash on updating apps with no deploy data
  + Updated translations.
- Remove deprecated texinfo packaging macros.
- Switch to upstream release tarball.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1611835200">- Flatpak only requires glib 2.44, not 2.60
- Update ostree version required to 2020.8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1615377600">-  Update to version 1.10.2:
  + This is a security update which fixes a potential attack where
    a flatpak application could use custom formated .desktop files
    to gain access to files on the host system.
  + Fix memory leaks
  + Some test fixes
  + Documentation updates
  + G_BEGIN/END_DECLS added to library headders for c++ use
  + Fix for X11 cookies on OpenSUSE
  + Spawn portal better handles non-utf8 filenames</changelog>
</package>
<package pkgid="e7da6967f904eeb62bcd97a070f11bfb03f260dec818959246141edc7f59d57f" name="flatpak-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="lp152.3.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559131200">- Update to version 1.4.0:
  + This is the new stable series, ending the 1.3.x series. The
    major changes since the 1.2.x is the improved I/O use for
    system-installed applications, and the new format for
    pre-configured remotes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560427200">- Update to version 1.4.1:
  + There was an accidental ABI break in libflatpak in 1.4.0
    compared to the 1.2.x ABI which caused crashes in apps like
    gnome-software.
  + This has been fixed in this release so it is now ABI compatible
    with 1.2.x, but NOT compatible with 1.4.0. It is recommended
    that all distributions that shipped 1.4.0 update to 1.4.1 and
    rebuild all dependencies of libflatpak.
  + Make ABI compatible with 1.2.x.
  + Fix some potential crashes.
  + Fix some corner case where it was impossible to remove a
    remote.
  + Restore support for file: uris in the RuntimeRepo key in
    flatpakref files.
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add a _dbusconfigdir variable in the spec file so we install the
  flatpak-system-helper config file in a location actually read by
  dbus, which didn't support having config files in /usr/share
  until 1.9.18 (first introduced in SLE15).
- Remove the systemd environment generator if building with
  systemd &lt; 233 which doesn't support environment generators.
- Rename the libflapak-doc.xml file which has a typo in the name
  upstream.
- BuildRequire libgpgme-devel, not libqgpgme-devel which is not
  really needed.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1562155200">- Update to version 1.4.2:
  * Support extra_data in extensions.
  * Handle double slashes ("//") in XDG_DATA_DIRS.
  * Fix detection of local related refs.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1562587200">- Add system-user-flatpak.conf: generate a flatpak user for the
  system helper (boo#1137537).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 1.4.3:
  + Fix crash in revokefs.
  + Handle 'versions' extension key (in addition to 'version') when
    checking for local extensions, which was causing us to
    uninstall some actually used extensions with uninstall
  - -unused.
  + The 'required-flatpak' metadata key now supports listing
    multiple versions to support backported features.
  + Fix crash with older versions of polkit.
  + Fix installation of bundles.
  + Fix crash on deploy error.
  + Support building bundles of apps installed from a remote.
  + OCI: Fix handling of locally cached icons.
  + Fix crash when listing unconfigured remotes.
  + Ignore differences in trailing slashes for repo uris.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1574251200">- Add pkgconfig(libsystemd) BuildRequires (boo#1157126).
- Drop systemd_requires: strictly speaking, we do not require
  systemd.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574683200">- Package empty /etc/flatpak/remotes.d.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576843200">- Update to version 1.6.0:
  + This is the first stable release in the 1.6 series, main
    changes since 1.4 is the support for protected content and
    improvements in the self-sandboxing support.
  + There is one change in the support for OCI remotes, we now only
    support the use of labels, not annotations, as labels work with
    more registries. This means pre-existing OCI flatpak registries
    (like fedora) may need some changes.
  + New permissions --socket=cups for direct cups access.
  + Fix some leaks.
  + Fix reporting of progress with latest version of ostree.
  + New no-interaction flag for authenticators.
  + Support for auto-installing authenticators from a flatpak
    remote.
  + Warn less about unset XDG_DATA_DIRS.
  + Don't poll for updates in the portal when on a metered
    connection.
- Modernize spec with current macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1577448000">- Co-own  /usr/lib/systemd/user-environment-generators. We don't
  want to forcibly pull in systemd into the buildroot just to own
  this directory.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1577707200">- Change %_prefix/lib to %_libexecdir: Makefile installs the file
  explicitly into libexecdir. Let's be ready in case this path is
  going to change.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1579003200">- Update dependencies required by flatpak 1.6.0 .
- Require xdg-dbus-proxy instead of building the (outdated)
  builtin version.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1580385600">- Update to version 1.6.1:
  + This is a (mild) security update. Flatpak 1.6.0 added the
    ability for an application to request it to be updated, as long
    as the new version doesn't require new permissions.
    Unfortunately in some special cases, if an app had access to
    the home directory, but not the rest of the filesystem it would
    still allow a self-update where the new version could access
    some files outside the home directory.
  + New permission --device=shm giving access to host /dev/shm, as
    needed for jack.
  + Generated correct download size in build-commit-from
  + sub-sandbox now allows the child to share the gpu of the caller
    has full device access
  + Fix crash with disabled remotes
  + Fix builds with older versions of glib
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1581595200">- Update to version 1.6.2:
  + Due to a combination of some behaviour in flatpak and recent
    versions of ostree we at some point lost the use of deltas for
    the initial install case, instead always falling back to a full
    ostree operation which is a lot less efficient for pulls with
    many small files like a runtime. This caused some very slow
    installs from e.g. flathub, so it's recommended to update to
    this version to get better install performance.
  + We now correctly handle TMPDIR env var overrides when bwrap is
    setuid
  + Disallow running "flatpak run" under sudo (as it doesn't work
    and causes issues)
  + Fix build with older versions of glib
  + Minor documentation updates
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Drop obsolete _servicedata file.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174400">- Update to version 1.6.3:
  + The main change in this version is a fix for a regression in
    the progress calculation for applications using extra-data.
    Additionally the bundled version of bubblewrap is updated to
    0.4.1 which fixes a security issue in some cases. See
    GHSA-j2qp-rvxj-43vj for details.
  + Don't break if users primary gid is not in the nsswitch
    database
  + Fix crash in flatpak repair if no remotes are configured
  + Some updates to the oci authenticator
  + Retry downloads of extra data
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174401">- Require bubblewrap 0.4.1</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1589803200">- When SLE uses GNOME desktop environment, GNOME Software is
  automatically started to provide key update features. During the
  startup, it setups flatpak repository so that related features
  can function properly. In a system environment of no flatpak
  repository has ever been setup before, this triggers
  "org.freedesktop.Flatpak.modify-repo" polkit action.
  Therefore in systems which use a restrictive security policy
  (eg. SLES) for the aforementioned policy action, a polkit
  authentication dialog will pop up without any user interaction
  for the first time login. This is not user friendly.
  This submission creates /var/lib/flatpak/repo at package
  installation to avoid such a confusing authentication pop-up, at
  nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592308800">- Create a skeleton flatpak repo using "flatpak remotes" instead
  of a manually created directory (bsc#1172316, bsc#1169619,
  bsc#1170416).</changelog>
</package>
<package pkgid="e5c37dc451411fa4b5cc2582e19e3d4dad72d125a3514418f69ab22ba6ecbd7b" name="flatpak-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10.2" rel="lp152.3.6.1"/>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1581595200">- Update to version 1.6.2:
  + Due to a combination of some behaviour in flatpak and recent
    versions of ostree we at some point lost the use of deltas for
    the initial install case, instead always falling back to a full
    ostree operation which is a lot less efficient for pulls with
    many small files like a runtime. This caused some very slow
    installs from e.g. flathub, so it's recommended to update to
    this version to get better install performance.
  + We now correctly handle TMPDIR env var overrides when bwrap is
    setuid
  + Disallow running "flatpak run" under sudo (as it doesn't work
    and causes issues)
  + Fix build with older versions of glib
  + Minor documentation updates
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Drop obsolete _servicedata file.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174400">- Update to version 1.6.3:
  + The main change in this version is a fix for a regression in
    the progress calculation for applications using extra-data.
    Additionally the bundled version of bubblewrap is updated to
    0.4.1 which fixes a security issue in some cases. See
    GHSA-j2qp-rvxj-43vj for details.
  + Don't break if users primary gid is not in the nsswitch
    database
  + Fix crash in flatpak repair if no remotes are configured
  + Some updates to the oci authenticator
  + Retry downloads of extra data
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174401">- Require bubblewrap 0.4.1</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1589803200">- When SLE uses GNOME desktop environment, GNOME Software is
  automatically started to provide key update features. During the
  startup, it setups flatpak repository so that related features
  can function properly. In a system environment of no flatpak
  repository has ever been setup before, this triggers
  "org.freedesktop.Flatpak.modify-repo" polkit action.
  Therefore in systems which use a restrictive security policy
  (eg. SLES) for the aforementioned policy action, a polkit
  authentication dialog will pop up without any user interaction
  for the first time login. This is not user friendly.
  This submission creates /var/lib/flatpak/repo at package
  installation to avoid such a confusing authentication pop-up, at
  nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592308800">- Create a skeleton flatpak repo using "flatpak remotes" instead
  of a manually created directory (bsc#1172316, bsc#1169619,
  bsc#1170416).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1593086400">- Update to version 1.6.4:
  + This release backports some of the OCI authenticator fixes from
    the 1.7 series, and should now be able to host flatpak images
    on e.g. docker hub.
  + Other changes:
  - Fix a use-after free in libflatpak.
  - Don't list p2p downgrades in list of available updates.</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594382400">- Update to version 1.8.1:
  * Avoid calling authenticator in update if ref didn't change
  * Don't fail transaction if ref is already installed (after
    transaction start)
  * Fix flatpak run handling of userns in the --device=all case
  * Fix handling of extensions from different remotes
  * Fix flatpak run --no-session-bus
  * Updated translations
- Update to version 1.8.0:
  * FlatpakTransaction has a new signal "install-authenticator"
    which clients can handle to install authenticators needed for
    the transaction. This is done in the CLI commands.
  * We now always expose the host timezone data, allowing us the
    expose the host /etc/localtime in a way that works better,
    fixing several apps that had timezone issues.
  * Fix flatpak enter which didn't work in some cases.
  * We now ship a systemd unit (not installed by default) to
    automatically detect plugged in usb sticks with sideload repos.
  * By default we no longer install the gdm env.d file, as the
    systemd generators work better.
  * create-usb now exports partial commits by default
  * Fix handling of docker media types in oci remotes
  * Fix subjects in remote-info --log output
- Remove source file used to generate a flatpak user on the system
  since it's now included by upstream:
  * system-user-flatpak.conf</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1597838400">- Fix invalid usage of %{_libexecdir} to reference systemd
  directories.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1598097600">- Update to version 1.8.2:
  + Added validation of collection id settings for remotes.
  + Fix seccomp filters on s390.
  + Robustness fixes to the spawn portal.
  + Fix support for masking update in the system installation.
  + Better support for distros with uncommon models of merged /usr.
  + Cache responses from localed/AccountService.
  + Fix hangs in cases where xdg-dbus-proxy fails to start.
  + Fix double-free in cups socket detection.
  + OCI authenticator now doesn't ask for auth in case of http
    errors.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1606132800">- Update to version 1.8.3:
  + Fixed progress reporting for OCI and extra-data.
  + The in-memory summary cache is more efficient.
  + Fixed authentication getting stuck in a loop in some cases.
  + Fixed authentication error reporting.
  + We now extract OCI info for runtimes as well as apps.
  + Fixed crash if anonymous authentication fails and -y is
    specified.
  + flatpak info now only looks at the specified installation if
    one is specified.
  + Better error reporting for server HTTP errors during download.
  + Uninstall now removes applications before the runtime it
    depends on.
  + Fixed test-suite to pass with the latest OSTree version.
  + Fixed dbus environment variables in flatpak enter.
  + Avoid updating metadata from the remote when uninstalling.
  + Fixed error message handling in various places.
  + FlatpakTransaction now verifies all passed in refs to avoid.
  + potential issues with invalid names.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1608033600">- Enable LTO (boo#1133124) as gobject-introspection works fine with LTO.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1609329600">- Move flatpak-bisect and flatpak-coredumpctl to devel subpackage,
  allow to remove python3 dependency on main package.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610020800">- Update to version 1.8.4:
  + Fix support for ppc64.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610712000">- Update to version 1.8.5 (CVE-2021-21261):
  + This is a security update that fixes a sandbox escape where a
    malicious application can execute code outside the sandbox by
    controlling the environment of the "flatpak run" command when
    spawning a sub-sandbox (boo#1180996)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1610712001">- Update to version 1.10.0:
  + The major new feature in this series compared to 1.8 is the
    support for the new repo format which should make updates
    faster and download less data.
  + The systemd generator snippets now call flatpak
  - -print-updated-env in place of a bunch of shell for better
    login performance.
  + The .profile snippets now disable GVfs when calling flatpak to
    avoid spawning a gvfs daemon when logging in via ssh.
  + Build fixes for GCC 11.
  + Flatpak now finds the pulseaudio sockets better in uncommon
    configurations.
  + Sandboxes with network access it now also has access to the
    systemd-resolved socket to do dns lookups.
  + Flatpak supports unsetting env vars in the sandbox using
  - -unset-env, and --env=FOO= now sets FOO to the empty string
    instead of unsetting it.
  + Similarly the spawn portal has an option to unset an env var.
  + The spawn portal now has an option to share the pid namespace
    with the sub-sandbox.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1611489600">- Update to version 1.10.1:
  + Fix flatpak build on systems with setuid bwrap
  + Fix some compiler warnings
  + Fix crash on updating apps with no deploy data
  + Updated translations.
- Remove deprecated texinfo packaging macros.
- Switch to upstream release tarball.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1611835200">- Flatpak only requires glib 2.44, not 2.60
- Update ostree version required to 2020.8</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1615377600">-  Update to version 1.10.2:
  + This is a security update which fixes a potential attack where
    a flatpak application could use custom formated .desktop files
    to gain access to files on the host system.
  + Fix memory leaks
  + Some test fixes
  + Documentation updates
  + G_BEGIN/END_DECLS added to library headders for c++ use
  + Fix for X11 cookies on OpenSUSE
  + Spawn portal better handles non-utf8 filenames</changelog>
</package>
<package pkgid="ca8ab55a710d78d2faf229bc44c631e1b2682fc23e45edad221eb4b5c620902c" name="flatpak-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.3" rel="lp152.3.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1559131200">- Update to version 1.4.0:
  + This is the new stable series, ending the 1.3.x series. The
    major changes since the 1.2.x is the improved I/O use for
    system-installed applications, and the new format for
    pre-configured remotes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560427200">- Update to version 1.4.1:
  + There was an accidental ABI break in libflatpak in 1.4.0
    compared to the 1.2.x ABI which caused crashes in apps like
    gnome-software.
  + This has been fixed in this release so it is now ABI compatible
    with 1.2.x, but NOT compatible with 1.4.0. It is recommended
    that all distributions that shipped 1.4.0 update to 1.4.1 and
    rebuild all dependencies of libflatpak.
  + Make ABI compatible with 1.2.x.
  + Fix some potential crashes.
  + Fix some corner case where it was impossible to remove a
    remote.
  + Restore support for file: uris in the RuntimeRepo key in
    flatpakref files.
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1560513600">- Add a _dbusconfigdir variable in the spec file so we install the
  flatpak-system-helper config file in a location actually read by
  dbus, which didn't support having config files in /usr/share
  until 1.9.18 (first introduced in SLE15).
- Remove the systemd environment generator if building with
  systemd &lt; 233 which doesn't support environment generators.
- Rename the libflapak-doc.xml file which has a typo in the name
  upstream.
- BuildRequire libgpgme-devel, not libqgpgme-devel which is not
  really needed.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1562155200">- Update to version 1.4.2:
  * Support extra_data in extensions.
  * Handle double slashes ("//") in XDG_DATA_DIRS.
  * Fix detection of local related refs.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1562587200">- Add system-user-flatpak.conf: generate a flatpak user for the
  system helper (boo#1137537).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 1.4.3:
  + Fix crash in revokefs.
  + Handle 'versions' extension key (in addition to 'version') when
    checking for local extensions, which was causing us to
    uninstall some actually used extensions with uninstall
  - -unused.
  + The 'required-flatpak' metadata key now supports listing
    multiple versions to support backported features.
  + Fix crash with older versions of polkit.
  + Fix installation of bundles.
  + Fix crash on deploy error.
  + Support building bundles of apps installed from a remote.
  + OCI: Fix handling of locally cached icons.
  + Fix crash when listing unconfigured remotes.
  + Ignore differences in trailing slashes for repo uris.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1574251200">- Add pkgconfig(libsystemd) BuildRequires (boo#1157126).
- Drop systemd_requires: strictly speaking, we do not require
  systemd.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574683200">- Package empty /etc/flatpak/remotes.d.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576843200">- Update to version 1.6.0:
  + This is the first stable release in the 1.6 series, main
    changes since 1.4 is the support for protected content and
    improvements in the self-sandboxing support.
  + There is one change in the support for OCI remotes, we now only
    support the use of labels, not annotations, as labels work with
    more registries. This means pre-existing OCI flatpak registries
    (like fedora) may need some changes.
  + New permissions --socket=cups for direct cups access.
  + Fix some leaks.
  + Fix reporting of progress with latest version of ostree.
  + New no-interaction flag for authenticators.
  + Support for auto-installing authenticators from a flatpak
    remote.
  + Warn less about unset XDG_DATA_DIRS.
  + Don't poll for updates in the portal when on a metered
    connection.
- Modernize spec with current macros.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1577448000">- Co-own  /usr/lib/systemd/user-environment-generators. We don't
  want to forcibly pull in systemd into the buildroot just to own
  this directory.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1577707200">- Change %_prefix/lib to %_libexecdir: Makefile installs the file
  explicitly into libexecdir. Let's be ready in case this path is
  going to change.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1579003200">- Update dependencies required by flatpak 1.6.0 .
- Require xdg-dbus-proxy instead of building the (outdated)
  builtin version.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1580385600">- Update to version 1.6.1:
  + This is a (mild) security update. Flatpak 1.6.0 added the
    ability for an application to request it to be updated, as long
    as the new version doesn't require new permissions.
    Unfortunately in some special cases, if an app had access to
    the home directory, but not the rest of the filesystem it would
    still allow a self-update where the new version could access
    some files outside the home directory.
  + New permission --device=shm giving access to host /dev/shm, as
    needed for jack.
  + Generated correct download size in build-commit-from
  + sub-sandbox now allows the child to share the gpu of the caller
    has full device access
  + Fix crash with disabled remotes
  + Fix builds with older versions of glib
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1581595200">- Update to version 1.6.2:
  + Due to a combination of some behaviour in flatpak and recent
    versions of ostree we at some point lost the use of deltas for
    the initial install case, instead always falling back to a full
    ostree operation which is a lot less efficient for pulls with
    many small files like a runtime. This caused some very slow
    installs from e.g. flathub, so it's recommended to update to
    this version to get better install performance.
  + We now correctly handle TMPDIR env var overrides when bwrap is
    setuid
  + Disallow running "flatpak run" under sudo (as it doesn't work
    and causes issues)
  + Fix build with older versions of glib
  + Minor documentation updates
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Drop obsolete _servicedata file.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174400">- Update to version 1.6.3:
  + The main change in this version is a fix for a regression in
    the progress calculation for applications using extra-data.
    Additionally the bundled version of bubblewrap is updated to
    0.4.1 which fixes a security issue in some cases. See
    GHSA-j2qp-rvxj-43vj for details.
  + Don't break if users primary gid is not in the nsswitch
    database
  + Fix crash in flatpak repair if no remotes are configured
  + Some updates to the oci authenticator
  + Retry downloads of extra data
  + Updated translations.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586174401">- Require bubblewrap 0.4.1</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1589803200">- When SLE uses GNOME desktop environment, GNOME Software is
  automatically started to provide key update features. During the
  startup, it setups flatpak repository so that related features
  can function properly. In a system environment of no flatpak
  repository has ever been setup before, this triggers
  "org.freedesktop.Flatpak.modify-repo" polkit action.
  Therefore in systems which use a restrictive security policy
  (eg. SLES) for the aforementioned policy action, a polkit
  authentication dialog will pop up without any user interaction
  for the first time login. This is not user friendly.
  This submission creates /var/lib/flatpak/repo at package
  installation to avoid such a confusing authentication pop-up, at
  nearly 0 cost of security compromise (bsc#1169619, bsc#1170416).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592308800">- Create a skeleton flatpak repo using "flatpak remotes" instead
  of a manually created directory (bsc#1172316, bsc#1169619,
  bsc#1170416).</changelog>
</package>
<package pkgid="fb7d9b07c956552535136d267839704cdfb5af0a81d93b0fce9bcd073b76e911" name="flint-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0~7794" rel="lp152.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1391774400">- Update to new upstream release 2.4.1
  * C++ expressions template wrapper
  * Fast factorisation of polynomials over Z/nZ
  * improved p-adics
  * polynomials/matrices over p-adics
  * qadics
  * Finite fields (small and large F_q), polynomials/matrices over F_q
  * Finite fields with Zech logarithm representation
  * Fast factorisation of polynomials over F_q
  * Faster Brent-Kung modular composition
  * New prime sieving code
  * Lambert-W function
  * Precomputed inverses for polynomials and large integers
  * Williams' P+1 integer factoring algorithm
  * Harvey's KS2/KS4 polynomial multiplication
  * Faster primality testing up to 64 bits
  * Support for GMP
  * Support for Boehm-Demers-Weiser GC
  * Support for flint extension modules</changelog>
  <changelog author="jengelh@inai.de" date="1407672000">- Update to new upstream release 2.4.4
  * Fix a bug in the ARM assembly</changelog>
  <changelog author="schwab@suse.de" date="1413806400">- Don't use unknown option -mno-popcnt</changelog>
  <changelog author="jengelh@inai.de" date="1424347200">- Add 0002-compile-fixes.diff to fend off improper usage of NTL
  headers.</changelog>
  <changelog author="jengelh@inai.de" date="1435320000">- Update to new upstream release 2.4.5
  * fixed a severe bug in flint's fmpz_poly_gcd_heuristic</changelog>
  <changelog author="jengelh@inai.de" date="1447502400">- Update to new upstream release 2.5.2
  * LLL (rational, Nguyen-Stehle, from Gram matrix, with_removal,
  Storjohann/ULLL)
  * Hermite normal form (naive, xgcd, Domich-Kannan-Trotter,
  Kannan-Bachem, Pernet-Stein)
  * Smith normal form (diagonal, Kannen-Bachem, Iliopoulos)
  * Paterson-Stockmeyer algorithm
  * modular resultant; hgcd resultant; polynomial discriminant
  * multithreaded multimodular Taylor shift
  * multithreaded Brent-Kung composition
  * multithreaded Kaltofen-Shoup distinct degree factorisation
  * multiplication based reduced row echelon form
  * place inline functions in library for foreign function interfaces
  * Primality tests for large integers (Pocklington, Morrison)
  * Probable prime tests for large integers (Lucas, Baillie-PSW,
  strong-psp, Brillhart-Lehmer-Selfridge)
  * CRT for large integers
  * Dixon algorithm for nullspace
  * Brent-Kung composition in irreducibility and distinct degree
  factorisation
  * floating point QR decomposition
  * Schwarz-Rutishauser Gram-Schmidt algorithm
  * Ogita-Rump-Oishi dot product
  * Bodrato matrix squaring
  * matrix concatenation functions
  * additional functions for returning factor of modulus in polys
  over Z/nZ
  * Hadamard matrix construction
  * series addition/subtraction
  * teach flint_printf/sprintf about explicit width format specifiers</changelog>
  <changelog author="jengelh@inai.de" date="1457870400">- Update to git snapshot of the master branch
  [marked as 3.0~ in openSUSE due to lack of any prospect on what
  the version will be]
  * Add implementation of Moller-Granlund invert_limb
  * Add implementations of n_div2_preinv and n_divrem2_preinv.
  * Add primitive flint exception mechanism.
  * Add n_powmod2_ui_preinv
  * Add exception for impossible inverse to n_invmod and remove resulting exceptions throughout Flint.
  * Remove smooth factorisation since it is completely broken.
- Remove 0002-compile-fixes.diff</changelog>
  <changelog author="jengelh@inai.de" date="1479038400">- Adjust 0001-build-provide-autotools-files.patch for new
  NTL-10.x header file names.</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1598702400">- Update to version 2.6.3 [boo#1169283]
  * New features:
  * Multivariate polynomials over most standard rings (sparse
    distributed)
  * APR-CL primality proving
  * Elliptic Curve integer factoring
  * Pollard rho integer factoring
  * p+1 integer factoring
  * Best of Breed smooth &amp; general integer factoring routine
  * Howell and Strong Echelon form
  * Möller?Granlund precomputed inverses
  * Fibonacci polynomials
  * sqrt of series and polynomials
  * Division of series over Z
  * Shifted Legendre polynomials, Laguerre polynomials, Gegenbauer
    polys.
  * Threading of FFT for integer and polynomial multiplication over
    Z; threading of quadratic sieve for integer factoring; threading
    for multivariate polynomial multiplication, division and GCD;
    threaded multiplication of matrices mod p.
  * For more, see the NEWS file in the flint-devel subpackage.
- Marked as 3.0~7781 (git rev-list --count
  0e8613b3336f356e07f7bbd4bb2ae5eded68ca40..v2.6.3) for Leap 15.2
  since downgrades of the Version field are not easily possible.
- Enable integration with libntl
- Drop 0001-build-provide-autotools-files.patch</changelog>
</package>
<package pkgid="87c3c2511090baffefa73cc26f6151392bf79294511bbf1a89fdd3e021af5a67" name="fluidsynth-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.11" rel="lp152.4.3.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1448193600">- Added jackmulti.diff to fix inverse logic of audio.jack.multi option
- Added reverb_mixer.diff to workaround reverb issue,
  see: http://sourceforge.net/p/fluidsynth/tickets/137/</changelog>
  <changelog author="idonmez@suse.com" date="1448193601">- Add baselibs.conf as a source file</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tiwai@suse.de" date="1618401600">- Fix use after free vulnerability in file loader (CVE-2021-28421,
  bsc#1184705):
  fluidsynth-1.11-CVE-2021-28421.patch</changelog>
</package>
<package pkgid="c1b821c7eccfca2365dbe3c557b08a14f354f6c70ab4fe56a2704b21df11eb4a" name="fluidsynth-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="lp152.4.3.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1448193600">- Added jackmulti.diff to fix inverse logic of audio.jack.multi option
- Added reverb_mixer.diff to workaround reverb issue,
  see: http://sourceforge.net/p/fluidsynth/tickets/137/</changelog>
  <changelog author="idonmez@suse.com" date="1448193601">- Add baselibs.conf as a source file</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tiwai@suse.de" date="1618401600">- Fix use after free vulnerability in file loader (CVE-2021-28421,
  bsc#1184705):
  fluidsynth-1.11-CVE-2021-28421.patch</changelog>
</package>
<package pkgid="8d4e95891870bdda7a34fbf0c16f369ffd1c686c633c17bc9e72342f5d42d185" name="fluidsynth-debugsource" arch="i586">
  <version epoch="0" ver="1.1.11" rel="lp152.4.3.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1448193600">- Added jackmulti.diff to fix inverse logic of audio.jack.multi option
- Added reverb_mixer.diff to workaround reverb issue,
  see: http://sourceforge.net/p/fluidsynth/tickets/137/</changelog>
  <changelog author="idonmez@suse.com" date="1448193601">- Add baselibs.conf as a source file</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tiwai@suse.de" date="1618401600">- Fix use after free vulnerability in file loader (CVE-2021-28421,
  bsc#1184705):
  fluidsynth-1.11-CVE-2021-28421.patch</changelog>
</package>
<package pkgid="27489fb09d41004d885c73ed4b2764f0bec8277f4cd27255bb6ce98117bb8abf" name="fluidsynth-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="lp152.4.3.1"/>
  <changelog author="tom.mbrt@googlemail.com" date="1448193600">- Added jackmulti.diff to fix inverse logic of audio.jack.multi option
- Added reverb_mixer.diff to workaround reverb issue,
  see: http://sourceforge.net/p/fluidsynth/tickets/137/</changelog>
  <changelog author="idonmez@suse.com" date="1448193601">- Add baselibs.conf as a source file</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1504699200">- Update to version 1.1.7:
  * consistently relicense libfluidsynth under LGPL-2.1+
  * fluid_synth_set_channel_type() was not exported properly
  * fix calculations for modulators
  * fix SysEx parsing issues
  * fix mangling with illegal sample loops, causing audible glitches
  * fix inverse logic of audio.jack.multi option
  * fix channel fine tune RPN to use correct range
  * fix timing problems when changing the sequencers scale from a callback event
  * workaround incorrectly rendered audio when requesting more than 64 frames from fluid_synth_write_*()
  * adjust ALSA MIDI port type
  * avoid voice_count becoming negative
  * avoid notes with a fixed key generator playing forever
  * avoid TCP/IP connections from closing in an undefined manner
  * a lot of memory leaks, NULL dereferences and SegFaults
  * add support of vorbis-compressed sf3 sound fonts
  * add sostenuto pedal to the synth
  * add vbr quality when encoding with libsndfile
  * re-implement routing reverb and chorus to distinct buffers in fluid_synth_nwrite_float()
  * add IPv6 support to socket API
- remove the following patches as they got fixed upstream:
  * fluidsynth-fix-build-lash.diff
  * jackmulti.diff
  * reverb_mixer.diff</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1507896000">- Update to version 1.1.8:
  * fix build against glib &lt; 2.30
  * fix dsound audio driver on windows
  * fix a bug around `synth.audio-groups` setting, which caused improper multi-channel rendering
  * cmake 3.0.2 is now required
  * compilation with clang is now possible
  * build fixes on OS/2
- Use pkgconfig for resolving build requirements
- Minor description update</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1515067200">- Update to version 1.1.9:
  * fix building the portaudio driver on Windows
  * fix build if no MIDI drivers are available
  * fix return value of fluid_file_set_encoding_quality()
  * fix use-after-free in fluid_timer
  * fix memory leak in pulseaudio driver
  * fix memory leak in rvoice_mixer
  * fix dumptuning shell command displaying uninitialized values
  * fix a resource leak in source shell command
  * harmonize fluidsynth's output library naming with autotools on Windows
  * dont set LIB_SUFFIX when building with MinGW
  * avoid a possible deadlock when initializing fluidsynths DLL on windows
  * avoid a buffer overrun when mixing effects channels in fluid_synth_nwrite_float()
  * correctly clean up fluid_server on Windows
  * implement handling of FLUID_SEQ_ALLSOUNDSOFF events in fluid_seq_fluidsynth_callback()
  * support for registering audio drivers based on actual needs</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Switch to cmake macros
- Use %license to install license
- Disable optional lash support as we try to remove lash
- Format with spec-cleaner</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519560000">- Update to 1.1.10:
  * avoid a buffer overrun when loading malformed soundfonts
  * fix synth.default-soundfont returning incomplete path
  * improve reliability of fluid_is_soundfont()
  * include windows version info in libfluidsynth.dll
  * enable jack midi driver to support more than 16 midi channels
  * minor cmake adjustments for MSVC builds to enable building fluidsynth as vcpkg package
  * fix build issues against statically built fluidsynth library on all OSs
  * enable fluidsynth to be set up as systemd user service
  * cmake: prevent double usage of LIB_SUFFIX and LIB_INSTALL_DIR
- Install systemd service files</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1519992000">- Avoid using indirection macros
- Do not hard-code /usr/sbin</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1520337600">- Add 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch
  to fix pkgconfig file generation when absolute lib and include
  paths are used (boo#1084081)</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1525608000">- Update to 1.1.11:
  * fix pkgconfig file for absolute paths
  * add a cmake option for OSS support
  * fix broken enable-midishare cmake option
  * fix double free in fluid_midi_router
  * prevent malicious soundfonts from causing buffer overflows
  * avoid SF3 files to be loaded incorrectly
  * fix an endless loop in fast file renderer
- remove 0001-Fix-pkgconfig-file-for-absolute-paths-347.patch</changelog>
  <changelog author="tiwai@suse.de" date="1618401600">- Fix use after free vulnerability in file loader (CVE-2021-28421,
  bsc#1184705):
  fluidsynth-1.11-CVE-2021-28421.patch</changelog>
</package>
<package pkgid="4af890786ef425d69220caab864142e235a4ec2ed7546592fd795d84043c2cb9" name="fmt-debugsource" arch="x86_64">
  <version epoch="0" ver="6.2.1" rel="lp152.2.3.1"/>
  <changelog author="munix9@googlemail.com" date="1541764800">- initial package for version 5.2.1</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1544097600">- Added baselibs.conf as source</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1544097601">- Do without em dashes in summaries.</changelog>
  <changelog author="Ferdinand Thiessen &lt;rpm@fthiessen.de&gt;" date="1547294400">- Update to version 5.3.0:
  * Introduced experimental chrono formatting support
  * Added experimental support for emphasis
  (bold, italic, underline, strikethrough), colored output to a
  file stream, and improved colored formatting API
  * Added support for 4-bit terminal colors
  * Made std::string_view work as a format string
  * Added wide string support to compile-time format string checks
  * Made colored print functions work with wide strings
  * Introduced experimental Unicode support
  * Removed undocumented basic_fixed_buffer which has been
  superseded by the iterator-based API
  * Disallowed repeated leading zeros in an argument ID
  * Deprecated fmt::visit, parse_context, and wparse_context.
  Use fmt::visit_format_arg, format_parse_context, and
  wformat_parse_context instead.
- Removed upstream merged fix-fmt_pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install fmt.pc into libdir with
  0001-install-pkg-config-file-into-libdir.patch</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1575028800">- Update to version 6.0.0
  (too many changes to list, see ChangeLog.rst)
- Dropped 0001-install-pkg-config-file-into-libdir.patch (no
  longer necessary)
- Switched to MIT license
- Increased SOVERSION to 6</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1575201600">- Added fmt-bigendian_1.patch, fmt-bigendian_2.patch,
  fmt-bigendian_3.patch and fmt-bigendian_4.patch to fix tests
  on big endian targets</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1575460800">- Update to version 6.1.0
  * {fmt} now formats IEEE 754 ``float`` and ``double`` using
    the shortest decimal representation with correct rounding by
    default:
    .. code:: c++
    [#]include &lt;cmath&gt;
    [#]include &lt;fmt/core.h&gt;
    int main() {
    fmt::print("{}", M_PI);
    }
    prints ``3.141592653589793``.
  * Made the fast binary to decimal floating-point formatter the
    default, simplified it and improved performance. {fmt} is now
    15 times faster than libc++'s ``std::ostringstream``, 11
    times faster than ``printf`` and 10% faster than
    double-conversion on `dtoa-benchmark
    (https://github.com/fmtlib/dtoa-benchmark)
    ==================  =========  =======
    Function            Time (ns)  Speedup
    ==================  =========  =======
    ostringstream        1,346.30    1.00x
    ostrstream           1,195.74    1.13x
    sprintf                995.08    1.35x
    doubleconv              99.10   13.59x
    fmt                     88.34   15.24x
    ==================  =========  =======
  * {fmt} no longer converts ``float`` arguments to ``double``.
    In particular this improves the default (shortest)
    representation of floats and makes
    ``fmt::format`` consistent with ``std::format`` specs
    (#1336, #1353, #1360, #1361)
    .. code:: c++
    fmt::print("{}", 0.1f);
    prints ``0.1`` instead of ``0.10000000149011612``.
  * Made floating-point formatting output consistent with
    ``printf``/iostreams (#1376, #1417)
  * Added support for 128-bit integers (#1287)
    .. code:: c++
    fmt::print("{}", std::numeric_limits&lt;__int128_t&gt;::max());
    prints ``170141183460469231731687303715884105727``.
  * The overload of ``print`` that takes ``text_style`` is now
    atomic, i.e. the output from different threads doesn't
    interleave (#1351)
  * Made compile time in the header-only mode ~20% faster by
    reducing the number of template instantiations. ``wchar_t``
    overload of ``vprint`` was moved from
    ``fmt/core.h`` to ``fmt/format.h``.
  * Added an overload of ``fmt::join`` that works with tuples
    (#1322, #1330)
    .. code:: c++
    [#]include &lt;tuple&gt;
    [#]include &lt;fmt/ranges.h&gt;
    int main() {
    std::tuple&lt;char, int, float&gt; t{'a', 1, 2.0f};
    fmt::print("{}", t);
    }
    prints ``('a', 1, 2.0)``.
  * Changed formatting of octal zero with prefix from "0o0" to
    "0":
    .. code:: c++
    fmt::print("{:#o}", 0);
    prints ``0``.
  * The locale is now passed to ostream insertion (``&lt;&lt;``)
    operators (#1406)
    .. code:: c++
    [#]include &lt;fmt/locale.h&gt;
    [#]include &lt;fmt/ostream.h&gt;
    struct S {
    double value;
    };
    std::ostream&amp; operator&lt;&lt;(std::ostream&amp; os, S s) {
    return os &lt;&lt; s.value;
    }
    int main() {
    auto s = fmt::format(std::locale("fr_FR.UTF-8"), "{}", S{0.42});
    // s == "0,42"
    }
  * Locale-specific number formatting now uses grouping (#1393,
    [#1394])
  * Fixed handling of types with deleted implicit rvalue
    conversion to ``const char**`` (#1421)
    .. code:: c++
    struct mystring {
    operator const char*() const&amp;;
    operator const char*() &amp;;
    operator const char*() const&amp;&amp; = delete;
    operator const char*() &amp;&amp; = delete;
    };
    mystring str;
    fmt::print("{}", str); // now compiles
  * Enums are now mapped to correct underlying types instead of
    ``int`` (#1286)
  * Enum classes are no longer implicitly converted to ``int``
    (#1424)
  * Added ``basic_format_parse_context`` for consistency with
    C++20 ``std::format`` and deprecated ``basic_parse_context``.
  * Fixed handling of UTF-8 in precision (#1389, #1390)
  * Added a CUDA test (#1285, #1317)
  * Improved documentation (#1276, #1291, #1296, #1315, #1332,
    [#1337], #1395, #1418)
  * Various code improvements (#1358, #1407)
  * Fixed compile-time format string checks for user-defined
    types (#1292)
  * Worked around a false positive in
    ``unsigned-integer-overflow`` sanitizer (#1377)
  * Fixed various warnings and compilation issues (#1273, #1278,
    [#1280], #1281, #1288, #1290, #1301, #1305, #1306, #1309,
    [#1312], #1313, #1316, #1319, #1320, #1326, #1328, #1344,
    [#1345], #1347, #1349, #1354, #1362, #1366, #1364, #1370,
    [#1371], #1385, #1388, #1397, #1414, #1416, #1422, #1427,
    [#1431], #1433)
- Dropped fmt-bigendian_1.patch, fmt-bigendian_2.patch,
  fmt-bigendian_3.patch and fmt-bigendian_4.patch (merged
  upstream)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1575547200">- Update to version 6.1.1
  * Added a missing decimal point in exponent notation with
    trailing zeros.
  * Removed deprecated format_arg_store::TYPES.</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1576065600">- Update to version 6.1.2
  * Fixed ABI compatibility with libfmt.so.6.0.0 (#1471).
  * Fixed handling types convertible to std::string_view (#1451).
    Thanks @denizevrenci (Deniz Evrenci).
  * Made CUDA test an opt-in enabled via the FMT_CUDA_TEST CMake
    option.
  * Fixed sign conversion warnings (#1440). Thanks @0x8000-0000
    (Florin Iucha).</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1586174400">- Update to version 6.2.0
  * Improved error reporting when trying to format an object of
    a non-formattable type:
  * Reduced library size by ~10%.
  * Always print decimal point if # is specified (#1476, #1498):
  * Implemented the 'L' specifier for locale-specific numeric
    formatting to improve compatibility with std::format. The 'n'
    specifier is now deprecated and will be removed in the next
    major release.
  * Moved OS-specific APIs such as windows_error from
    fmt/format.h to fmt/os.h. You can define
    FMT_DEPRECATED_INCLUDE_OS to automatically include fmt/os.h from
    fmt/format.h for compatibility but this will be disabled in the
    next major release.
  * Added precision overflow detection in floating-point
    formatting.
  * Implemented detection of invalid use of fmt::arg.
  * Used type_identity to block unnecessary template argument
    deduction.
  * Improved UTF-8 handling (#1109):
  * Added experimental dynamic argument storage (#1170, #1584):
  * Made fmt::join accept initializer_list (#1591).
  * Fixed handling of empty tuples (#1588).
  * Fixed handling of output iterators in format_to_n (#1506).
  * Fixed formatting of std::chrono::duration types to wide
    output (#1533).
  * Added const begin and end overload to buffers (#1553).
  * Added the ability to disable floating-point formatting via
    FMT_USE_FLOAT, FMT_USE_DOUBLE and FMT_USE_LONG_DOUBLE macros for
    extremely memory-constrained embedded system (#1590).
  * Made FMT_STRING work with constexpr string_view (#1589).
  * Implemented a minor optimization in the format string parser
    (#1560).
  * Improved attribute detection (#1469, #1475, #1576).
  * Improved documentation (#1481, #1523).
  * Fixed symbol visibility on Linux when compiling with
  - fvisibility=hidden (#1535).
  * Implemented various build configuration fixes and
    improvements (#1264, #1460, #1534, #1536, #1545, #1546, #1566,
    [#1582], #1597, #1598).
  * Fixed various warnings and compilation issues
- Dropped Group tag</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1586865600">- Apply 7d01859ef16e6b65bc023ad8bebfedecb088bf81.patch
  to fix kodi compilation and probably others:
  https://github.com/fmtlib/fmt/issues/1620</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1589025600">- Update to version 6.2.1
  * Fixed ostream support in ``sprintf``
    (`#1631 &lt;https://github.com/fmtlib/fmt/issues/1631&gt;`_).
  * Fixed type detection when using implicit conversion to
    ``string_view`` and ostream ``operator&lt;&lt;`` inconsistently
    (`#1662 &lt;https://github.com/fmtlib/fmt/issues/1662&gt;`_).
- Drop 7d01859ef16e6b65bc023ad8bebfedecb088bf81.patch (no longer
  necessary)
- Spec cleanup</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1592913600">- Add fmt-6.2.1-fix_pkgconfig_paths.patch (fix for boo#1173270)</changelog>
</package>
<package pkgid="47ccf47a9cfe969b21866088060bbff0c4454324fb892bc42c9349a735968032" name="fontforge-debuginfo" arch="i586">
  <version epoch="0" ver="20200314" rel="lp152.2.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Add reproducible.patch to override font build dates (boo#1047218)
- repack sources to .xz since we have to repack already</changelog>
  <changelog author="pgajdos@suse.com" date="1566388800">- version update to 20190801 [bsc#1145185]
  * Bugfixes
  * Added Croatian translation
  * Added user decompositions
  * New graphic for the splash/about screen
  * Images embedded in SFDs are now serialised as PNGs
  * Both the Windows and Mac builds are now built with Python 3 instead of Python 2.
  * The minimum supported version for the Mac build is now MacOS Sierra (10.12)
  * FontForge no longer uses gnulib
  * collab support has been removed
  * Complete GDK support, enabled by default on Windows and Macintosh, from @jtanx.
  * Enhanced UFO 3 support, with separate import/export paths for UFO 2 and UFO 3,
    from @frank-trampe. See the technical bulletin here for more information.
  * Improved feature file support, from @skef and @khaledhosny.
  * WOFF2 support, from @jtanx.
  * Unicode 12.1.0 support, from @JoesCat.
  * Extended Python interfaces, from @skef.
- modified patches
  % fontforge-version.patch (refreshed)
- deleted patches
  - reproducible.patch (upstreamed)</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1572436800">- add python38_config.patch to build with python-3.8
- spec-cleaned</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586952000">- Update to version 20200314:
  * FontForge now has much improved stroke expansion functionality.
    The main change is that it actually works most of the time. New
    features include support for arbitrary convex nibs and the
    miter-clip and arc join styles from SVG 2. All functionality is
    accessible from the Python and native APIs.
  * Remove overlap handles certain important edge cases better.
  * The Python API now has a function called genericGlyphChange
    that matches the "Change Glyph" command in the GUI. See #4133
    for more details.
  * The Python API now has functions for getting Unicode script and
    for interrogating glyph boundaries.
  * One can now use text flags (rather than just numerical flags)
    when opening a font file via the Python API.
  * UFO import now outputs the note field properly.
  * SVG import is much more robust.
  * We have dropped most gnulib and autotools logic in favor of
    CMake, which dramatically simplifies the build system and just
    as dramatically improves build time.
  * As part of the switch to CMake, per the deprecation of
    Python 2, and per the lack of objections to the proposal on
    the mailing list, we have dropped support for building
    FontForge with Python 2 support. The non-build-system Python 2
    code remains, but it is neither tested nor maintained nor
    supported and is likely to follow a trajectory of decay and
    then removal.
  * Documentation is now rendered in Sphinx, which makes
    maintenance and improvement easier.
  * Translations now happen on crowdin, which makes contributions
    easier.
  * We got such a contribution for Croatian.
  * Character view point coloring is more consistent, and preview
    fills support transparency.
  * The user can now move and close tabs in the character view.
  * The metrics view now allows for entry of negative kerning
    values and runs a bit more smoothly.
  * There is now a warning when a user is about to discard an
    unsaved script.
  * We fixed bugs all over, as always, with particular attention
    given to the metrics view, Python, Spiro, and high-resolution
    displays.
  * Notes on build system changes:
    + libgutils and libgunicode have been combined into
    libfontforge
    + libgdraw and libfontforgeexe have been combined into the
    fontforge executable itself
    + No development files are installed (headers, or pkg-config).
    This is because we do not provide a stable API or ABI to work
    against, nor are the headers actually well configured to be
    used externally. We are also not aware of any maintained
    product that compiles against FontForge itself.
  * Fixes use-after-free (heap) in the SFD_GetFontMetaData()
    function and fix NULL pointer dereference in the
    SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
    bnc#1160236, CVE-2020-5395, CVE-2020-5496).
- Drop patch that isn't needed anymore:
  * python38_config.patch
- Add patches to fix build:
  * fix-return-statement.patch
  * fix-sphinx-doc.patch (only for Leap 15.2)</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1590408000">- add support-sphinx3.patch and fix-glossary.patch to allow
  python-Sphinx &gt;= 3
  gh#fontforge/fontforge#4269
  gh#fontforge/fontforge#4284</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593432000">- Add patch to support transforming bitmap glyphs from python
  with one of the predefined transformations in fontforge.
  * add-bitmap-transform-support.patch
  (boo#1169444)</changelog>
</package>
<package pkgid="d1e9ef9ad646cbda3400dae59a4fdef49a65aa6e85c55915bd4952273ad55f0e" name="fontforge-debuginfo" arch="x86_64">
  <version epoch="0" ver="20200314" rel="lp152.2.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Add reproducible.patch to override font build dates (boo#1047218)
- repack sources to .xz since we have to repack already</changelog>
  <changelog author="pgajdos@suse.com" date="1566388800">- version update to 20190801 [bsc#1145185]
  * Bugfixes
  * Added Croatian translation
  * Added user decompositions
  * New graphic for the splash/about screen
  * Images embedded in SFDs are now serialised as PNGs
  * Both the Windows and Mac builds are now built with Python 3 instead of Python 2.
  * The minimum supported version for the Mac build is now MacOS Sierra (10.12)
  * FontForge no longer uses gnulib
  * collab support has been removed
  * Complete GDK support, enabled by default on Windows and Macintosh, from @jtanx.
  * Enhanced UFO 3 support, with separate import/export paths for UFO 2 and UFO 3,
    from @frank-trampe. See the technical bulletin here for more information.
  * Improved feature file support, from @skef and @khaledhosny.
  * WOFF2 support, from @jtanx.
  * Unicode 12.1.0 support, from @JoesCat.
  * Extended Python interfaces, from @skef.
- modified patches
  % fontforge-version.patch (refreshed)
- deleted patches
  - reproducible.patch (upstreamed)</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1572436800">- add python38_config.patch to build with python-3.8
- spec-cleaned</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586952000">- Update to version 20200314:
  * FontForge now has much improved stroke expansion functionality.
    The main change is that it actually works most of the time. New
    features include support for arbitrary convex nibs and the
    miter-clip and arc join styles from SVG 2. All functionality is
    accessible from the Python and native APIs.
  * Remove overlap handles certain important edge cases better.
  * The Python API now has a function called genericGlyphChange
    that matches the "Change Glyph" command in the GUI. See #4133
    for more details.
  * The Python API now has functions for getting Unicode script and
    for interrogating glyph boundaries.
  * One can now use text flags (rather than just numerical flags)
    when opening a font file via the Python API.
  * UFO import now outputs the note field properly.
  * SVG import is much more robust.
  * We have dropped most gnulib and autotools logic in favor of
    CMake, which dramatically simplifies the build system and just
    as dramatically improves build time.
  * As part of the switch to CMake, per the deprecation of
    Python 2, and per the lack of objections to the proposal on
    the mailing list, we have dropped support for building
    FontForge with Python 2 support. The non-build-system Python 2
    code remains, but it is neither tested nor maintained nor
    supported and is likely to follow a trajectory of decay and
    then removal.
  * Documentation is now rendered in Sphinx, which makes
    maintenance and improvement easier.
  * Translations now happen on crowdin, which makes contributions
    easier.
  * We got such a contribution for Croatian.
  * Character view point coloring is more consistent, and preview
    fills support transparency.
  * The user can now move and close tabs in the character view.
  * The metrics view now allows for entry of negative kerning
    values and runs a bit more smoothly.
  * There is now a warning when a user is about to discard an
    unsaved script.
  * We fixed bugs all over, as always, with particular attention
    given to the metrics view, Python, Spiro, and high-resolution
    displays.
  * Notes on build system changes:
    + libgutils and libgunicode have been combined into
    libfontforge
    + libgdraw and libfontforgeexe have been combined into the
    fontforge executable itself
    + No development files are installed (headers, or pkg-config).
    This is because we do not provide a stable API or ABI to work
    against, nor are the headers actually well configured to be
    used externally. We are also not aware of any maintained
    product that compiles against FontForge itself.
  * Fixes use-after-free (heap) in the SFD_GetFontMetaData()
    function and fix NULL pointer dereference in the
    SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
    bnc#1160236, CVE-2020-5395, CVE-2020-5496).
- Drop patch that isn't needed anymore:
  * python38_config.patch
- Add patches to fix build:
  * fix-return-statement.patch
  * fix-sphinx-doc.patch (only for Leap 15.2)</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1590408000">- add support-sphinx3.patch and fix-glossary.patch to allow
  python-Sphinx &gt;= 3
  gh#fontforge/fontforge#4269
  gh#fontforge/fontforge#4284</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593432000">- Add patch to support transforming bitmap glyphs from python
  with one of the predefined transformations in fontforge.
  * add-bitmap-transform-support.patch
  (boo#1169444)</changelog>
</package>
<package pkgid="8e180822bbd1fa8eef91576df0d98353a52c1b1fb310a422e17ce7915b936e9b" name="fontforge-debugsource" arch="i586">
  <version epoch="0" ver="20200314" rel="lp152.2.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Add reproducible.patch to override font build dates (boo#1047218)
- repack sources to .xz since we have to repack already</changelog>
  <changelog author="pgajdos@suse.com" date="1566388800">- version update to 20190801 [bsc#1145185]
  * Bugfixes
  * Added Croatian translation
  * Added user decompositions
  * New graphic for the splash/about screen
  * Images embedded in SFDs are now serialised as PNGs
  * Both the Windows and Mac builds are now built with Python 3 instead of Python 2.
  * The minimum supported version for the Mac build is now MacOS Sierra (10.12)
  * FontForge no longer uses gnulib
  * collab support has been removed
  * Complete GDK support, enabled by default on Windows and Macintosh, from @jtanx.
  * Enhanced UFO 3 support, with separate import/export paths for UFO 2 and UFO 3,
    from @frank-trampe. See the technical bulletin here for more information.
  * Improved feature file support, from @skef and @khaledhosny.
  * WOFF2 support, from @jtanx.
  * Unicode 12.1.0 support, from @JoesCat.
  * Extended Python interfaces, from @skef.
- modified patches
  % fontforge-version.patch (refreshed)
- deleted patches
  - reproducible.patch (upstreamed)</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1572436800">- add python38_config.patch to build with python-3.8
- spec-cleaned</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586952000">- Update to version 20200314:
  * FontForge now has much improved stroke expansion functionality.
    The main change is that it actually works most of the time. New
    features include support for arbitrary convex nibs and the
    miter-clip and arc join styles from SVG 2. All functionality is
    accessible from the Python and native APIs.
  * Remove overlap handles certain important edge cases better.
  * The Python API now has a function called genericGlyphChange
    that matches the "Change Glyph" command in the GUI. See #4133
    for more details.
  * The Python API now has functions for getting Unicode script and
    for interrogating glyph boundaries.
  * One can now use text flags (rather than just numerical flags)
    when opening a font file via the Python API.
  * UFO import now outputs the note field properly.
  * SVG import is much more robust.
  * We have dropped most gnulib and autotools logic in favor of
    CMake, which dramatically simplifies the build system and just
    as dramatically improves build time.
  * As part of the switch to CMake, per the deprecation of
    Python 2, and per the lack of objections to the proposal on
    the mailing list, we have dropped support for building
    FontForge with Python 2 support. The non-build-system Python 2
    code remains, but it is neither tested nor maintained nor
    supported and is likely to follow a trajectory of decay and
    then removal.
  * Documentation is now rendered in Sphinx, which makes
    maintenance and improvement easier.
  * Translations now happen on crowdin, which makes contributions
    easier.
  * We got such a contribution for Croatian.
  * Character view point coloring is more consistent, and preview
    fills support transparency.
  * The user can now move and close tabs in the character view.
  * The metrics view now allows for entry of negative kerning
    values and runs a bit more smoothly.
  * There is now a warning when a user is about to discard an
    unsaved script.
  * We fixed bugs all over, as always, with particular attention
    given to the metrics view, Python, Spiro, and high-resolution
    displays.
  * Notes on build system changes:
    + libgutils and libgunicode have been combined into
    libfontforge
    + libgdraw and libfontforgeexe have been combined into the
    fontforge executable itself
    + No development files are installed (headers, or pkg-config).
    This is because we do not provide a stable API or ABI to work
    against, nor are the headers actually well configured to be
    used externally. We are also not aware of any maintained
    product that compiles against FontForge itself.
  * Fixes use-after-free (heap) in the SFD_GetFontMetaData()
    function and fix NULL pointer dereference in the
    SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
    bnc#1160236, CVE-2020-5395, CVE-2020-5496).
- Drop patch that isn't needed anymore:
  * python38_config.patch
- Add patches to fix build:
  * fix-return-statement.patch
  * fix-sphinx-doc.patch (only for Leap 15.2)</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1590408000">- add support-sphinx3.patch and fix-glossary.patch to allow
  python-Sphinx &gt;= 3
  gh#fontforge/fontforge#4269
  gh#fontforge/fontforge#4284</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593432000">- Add patch to support transforming bitmap glyphs from python
  with one of the predefined transformations in fontforge.
  * add-bitmap-transform-support.patch
  (boo#1169444)</changelog>
</package>
<package pkgid="b2bfc8518a24eb47c0273c6ec75310ddcc7de6e2db073e03c72244f8fe5395a1" name="fontforge-debugsource" arch="x86_64">
  <version epoch="0" ver="20200314" rel="lp152.2.3.1"/>
  <changelog author="coolo@suse.com" date="1423137600">- added propagate-creation-and-modification-times-to-ttf.patch from
  debian's reproducible build project to get reproducible font builds</changelog>
  <changelog author="pgajdos@suse.com" date="1427803200">- updated to 20150330:
  * fixes a few crashes, enhances round-tripping of information in
    certain file formats, and fixes some bad logic
  * adds support for fine point adjustment
  * etc. see https://github.com/fontforge/fontforge/releases
    for details
- remove %requires_ge libpng16-16 as it seems fontforge is not so
  picky anymore
- doc is generated
- remove pfaedit compat
- removed patches (upstreamed or not needed):
  - fontforge-fixgiflib.patch
  - fontforge-arraysubscript.patch
  - fontforge-fdleak.patch
  - fontforge-libpng.diff
  - fontforge-docdir.patch
  - fontforge-python-module-name.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- repack source [bnc#926061]</changelog>
  <changelog author="coolo@suse.com" date="1430481600">- also repackage the broken gnulib links to fix build with
  newer libtool</changelog>
  <changelog author="pgajdos@suse.com" date="1431345600">- updated to 20150430: this release includes a few bug fixes,
  performance enhancements, and refreshed icons.
- download uthash when get-source.sh
- fontforge --version now returns fontforge release version
  + fontforge-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1450267200">- updated to 20150824: This fixes a few bugs, including some in
  U. F. O. kerning classes and FreeType rasterization, and adds
  a Korean translation.</changelog>
  <changelog author="pgajdos@suse.com" date="1453809600">- do not crash on invalid input data (when eof reached) [bsc#963023]
  + fontforge-eof-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- updated to 20161005 [bsc#1014793]:
  * This release introduces a new icon set, new functionality for
    custom icon selection graphics, support for GlyphOrderAndAliasDB
    files, and support for Unicode 9.0.
  * It also fixes a number of small bugs relating to certain bitmap
    typefaces, stroke expansion, handling of CID ranges, and the
    user interface.
- removed upstreamed patches:
  - propagate-creation-and-modification-times-to-ttf.patch
  - fontforge-eof-crash.patch</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- switch to python 3</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- updated to 20170731
  * This incorporates a large number of adjustments and fixes.</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Add reproducible.patch to override font build dates (boo#1047218)
- repack sources to .xz since we have to repack already</changelog>
  <changelog author="pgajdos@suse.com" date="1566388800">- version update to 20190801 [bsc#1145185]
  * Bugfixes
  * Added Croatian translation
  * Added user decompositions
  * New graphic for the splash/about screen
  * Images embedded in SFDs are now serialised as PNGs
  * Both the Windows and Mac builds are now built with Python 3 instead of Python 2.
  * The minimum supported version for the Mac build is now MacOS Sierra (10.12)
  * FontForge no longer uses gnulib
  * collab support has been removed
  * Complete GDK support, enabled by default on Windows and Macintosh, from @jtanx.
  * Enhanced UFO 3 support, with separate import/export paths for UFO 2 and UFO 3,
    from @frank-trampe. See the technical bulletin here for more information.
  * Improved feature file support, from @skef and @khaledhosny.
  * WOFF2 support, from @jtanx.
  * Unicode 12.1.0 support, from @JoesCat.
  * Extended Python interfaces, from @skef.
- modified patches
  % fontforge-version.patch (refreshed)
- deleted patches
  - reproducible.patch (upstreamed)</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1572436800">- add python38_config.patch to build with python-3.8
- spec-cleaned</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1586952000">- Update to version 20200314:
  * FontForge now has much improved stroke expansion functionality.
    The main change is that it actually works most of the time. New
    features include support for arbitrary convex nibs and the
    miter-clip and arc join styles from SVG 2. All functionality is
    accessible from the Python and native APIs.
  * Remove overlap handles certain important edge cases better.
  * The Python API now has a function called genericGlyphChange
    that matches the "Change Glyph" command in the GUI. See #4133
    for more details.
  * The Python API now has functions for getting Unicode script and
    for interrogating glyph boundaries.
  * One can now use text flags (rather than just numerical flags)
    when opening a font file via the Python API.
  * UFO import now outputs the note field properly.
  * SVG import is much more robust.
  * We have dropped most gnulib and autotools logic in favor of
    CMake, which dramatically simplifies the build system and just
    as dramatically improves build time.
  * As part of the switch to CMake, per the deprecation of
    Python 2, and per the lack of objections to the proposal on
    the mailing list, we have dropped support for building
    FontForge with Python 2 support. The non-build-system Python 2
    code remains, but it is neither tested nor maintained nor
    supported and is likely to follow a trajectory of decay and
    then removal.
  * Documentation is now rendered in Sphinx, which makes
    maintenance and improvement easier.
  * Translations now happen on crowdin, which makes contributions
    easier.
  * We got such a contribution for Croatian.
  * Character view point coloring is more consistent, and preview
    fills support transparency.
  * The user can now move and close tabs in the character view.
  * The metrics view now allows for entry of negative kerning
    values and runs a bit more smoothly.
  * There is now a warning when a user is about to discard an
    unsaved script.
  * We fixed bugs all over, as always, with particular attention
    given to the metrics view, Python, Spiro, and high-resolution
    displays.
  * Notes on build system changes:
    + libgutils and libgunicode have been combined into
    libfontforge
    + libgdraw and libfontforgeexe have been combined into the
    fontforge executable itself
    + No development files are installed (headers, or pkg-config).
    This is because we do not provide a stable API or ABI to work
    against, nor are the headers actually well configured to be
    used externally. We are also not aware of any maintained
    product that compiles against FontForge itself.
  * Fixes use-after-free (heap) in the SFD_GetFontMetaData()
    function and fix NULL pointer dereference in the
    SFDGetSpiros() and SFD_AssignLookups() function(bnc#1160220,
    bnc#1160236, CVE-2020-5395, CVE-2020-5496).
- Drop patch that isn't needed anymore:
  * python38_config.patch
- Add patches to fix build:
  * fix-return-statement.patch
  * fix-sphinx-doc.patch (only for Leap 15.2)</changelog>
  <changelog author="Benjamin Greiner &lt;code@bnavigator.de&gt;" date="1590408000">- add support-sphinx3.patch and fix-glossary.patch to allow
  python-Sphinx &gt;= 3
  gh#fontforge/fontforge#4269
  gh#fontforge/fontforge#4284</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593432000">- Add patch to support transforming bitmap glyphs from python
  with one of the predefined transformations in fontforge.
  * add-bitmap-transform-support.patch
  (boo#1169444)</changelog>
</package>
<package pkgid="8d6fcb5bae304a71457610b24325922f6eb9a86afe185fece43fd494ea5c10e5" name="fonttosfnt-debuginfo" arch="i586">
  <version epoch="0" ver="1.1.0" rel="lp152.2.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split fonttosfnt from xorg-x11. Initial version: 1.0.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496232000">- Update to version 1.0.5+20170126.aead36f:
  * config:
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Move man pages into their own directory.
  - Add missing AC_CONFIG_SRCDIR.
  * man:
  - Remove trailing spaces and tabs.
  - Replace hard coded man page section with substitution
    strings.
  * configure: Drop AM_MAINTAINER_MODE.
  * autogen.sh:
  - Honor NOCONFIGURE=1.
  - Use exec instead of waiting for configure to finish.
  - Use quoted string variables.
  - Add default patch prefix.
- Switch to source service git checkout.
- Following the above, add libtool BuildRequires, and pass
  NOCONFIGURE=1 ./autogen.sh: Needed now that we build from a git
  checkout.
- Add pkgconfig(xorg-macros) BuildRequires: New dependency.
- Stop packaging ChangeLog and NEWS, dropped upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1534507200">- Update to version 1.0.5
  * Is it a bird? is it a plane? No it's a fonttofs.. fontstof..
    fonttofn... it's a release of the tool that wraps a bitmap
    font into a truetype wrapper! Bringing you the last 9 years
    of exciting changes including ansification and lots of
    autotools cleanup changes, because that is how we rolled 7
    years ago. (Almost) no source files were harmed in the
    making of this release.
- get rid of _service/_servicedata files</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1578398400">- Update to version 1.1.0
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Correct a string literal
  * Mention .otb as an extension
  * Accept a BDF font on stdin
  * Avoid undefined behaviour
  * Round font size to integer value when reading bitmap font
  * Mark vsprintf_alloc as printf-like function
  * check for freetype NULL atoms
  * let freetype handle ISO-8859-1 mapping
  * allow ISO-646.1991-IRV as well, adobe standard for bdf</changelog>
</package>
<package pkgid="3ce172f5211486f8b50c2ae7f7f09c599d180b8ef2bb924fa462cd167fa636b7" name="fonttosfnt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="lp152.2.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split fonttosfnt from xorg-x11. Initial version: 1.0.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496232000">- Update to version 1.0.5+20170126.aead36f:
  * config:
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Move man pages into their own directory.
  - Add missing AC_CONFIG_SRCDIR.
  * man:
  - Remove trailing spaces and tabs.
  - Replace hard coded man page section with substitution
    strings.
  * configure: Drop AM_MAINTAINER_MODE.
  * autogen.sh:
  - Honor NOCONFIGURE=1.
  - Use exec instead of waiting for configure to finish.
  - Use quoted string variables.
  - Add default patch prefix.
- Switch to source service git checkout.
- Following the above, add libtool BuildRequires, and pass
  NOCONFIGURE=1 ./autogen.sh: Needed now that we build from a git
  checkout.
- Add pkgconfig(xorg-macros) BuildRequires: New dependency.
- Stop packaging ChangeLog and NEWS, dropped upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1534507200">- Update to version 1.0.5
  * Is it a bird? is it a plane? No it's a fonttofs.. fontstof..
    fonttofn... it's a release of the tool that wraps a bitmap
    font into a truetype wrapper! Bringing you the last 9 years
    of exciting changes including ansification and lots of
    autotools cleanup changes, because that is how we rolled 7
    years ago. (Almost) no source files were harmed in the
    making of this release.
- get rid of _service/_servicedata files</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1578398400">- Update to version 1.1.0
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Correct a string literal
  * Mention .otb as an extension
  * Accept a BDF font on stdin
  * Avoid undefined behaviour
  * Round font size to integer value when reading bitmap font
  * Mark vsprintf_alloc as printf-like function
  * check for freetype NULL atoms
  * let freetype handle ISO-8859-1 mapping
  * allow ISO-646.1991-IRV as well, adobe standard for bdf</changelog>
</package>
<package pkgid="fd5c4917e8d936c20c216d07c03cdb095c1b39a06e04bbf1246f07f0117a7e14" name="fonttosfnt-debugsource" arch="i586">
  <version epoch="0" ver="1.1.0" rel="lp152.2.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split fonttosfnt from xorg-x11. Initial version: 1.0.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496232000">- Update to version 1.0.5+20170126.aead36f:
  * config:
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Move man pages into their own directory.
  - Add missing AC_CONFIG_SRCDIR.
  * man:
  - Remove trailing spaces and tabs.
  - Replace hard coded man page section with substitution
    strings.
  * configure: Drop AM_MAINTAINER_MODE.
  * autogen.sh:
  - Honor NOCONFIGURE=1.
  - Use exec instead of waiting for configure to finish.
  - Use quoted string variables.
  - Add default patch prefix.
- Switch to source service git checkout.
- Following the above, add libtool BuildRequires, and pass
  NOCONFIGURE=1 ./autogen.sh: Needed now that we build from a git
  checkout.
- Add pkgconfig(xorg-macros) BuildRequires: New dependency.
- Stop packaging ChangeLog and NEWS, dropped upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1534507200">- Update to version 1.0.5
  * Is it a bird? is it a plane? No it's a fonttofs.. fontstof..
    fonttofn... it's a release of the tool that wraps a bitmap
    font into a truetype wrapper! Bringing you the last 9 years
    of exciting changes including ansification and lots of
    autotools cleanup changes, because that is how we rolled 7
    years ago. (Almost) no source files were harmed in the
    making of this release.
- get rid of _service/_servicedata files</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1578398400">- Update to version 1.1.0
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Correct a string literal
  * Mention .otb as an extension
  * Accept a BDF font on stdin
  * Avoid undefined behaviour
  * Round font size to integer value when reading bitmap font
  * Mark vsprintf_alloc as printf-like function
  * check for freetype NULL atoms
  * let freetype handle ISO-8859-1 mapping
  * allow ISO-646.1991-IRV as well, adobe standard for bdf</changelog>
</package>
<package pkgid="0b4eb6a31059ebb274684f3616d9f67590d91e3d76f162a52711b5d9c452f322" name="fonttosfnt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="lp152.2.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1334318400">- Split fonttosfnt from xorg-x11. Initial version: 1.0.4.</changelog>
  <changelog author="zaitor@opensuse.org" date="1496232000">- Update to version 1.0.5+20170126.aead36f:
  * config:
  - Replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS.
  - Move man pages into their own directory.
  - Add missing AC_CONFIG_SRCDIR.
  * man:
  - Remove trailing spaces and tabs.
  - Replace hard coded man page section with substitution
    strings.
  * configure: Drop AM_MAINTAINER_MODE.
  * autogen.sh:
  - Honor NOCONFIGURE=1.
  - Use exec instead of waiting for configure to finish.
  - Use quoted string variables.
  - Add default patch prefix.
- Switch to source service git checkout.
- Following the above, add libtool BuildRequires, and pass
  NOCONFIGURE=1 ./autogen.sh: Needed now that we build from a git
  checkout.
- Add pkgconfig(xorg-macros) BuildRequires: New dependency.
- Stop packaging ChangeLog and NEWS, dropped upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1534507200">- Update to version 1.0.5
  * Is it a bird? is it a plane? No it's a fonttofs.. fontstof..
    fonttofn... it's a release of the tool that wraps a bitmap
    font into a truetype wrapper! Bringing you the last 9 years
    of exciting changes including ansification and lots of
    autotools cleanup changes, because that is how we rolled 7
    years ago. (Almost) no source files were harmed in the
    making of this release.
- get rid of _service/_servicedata files</changelog>
  <changelog author="Stefan Dirsch &lt;sndirsch@suse.com&gt;" date="1578398400">- Update to version 1.1.0
  * Update README for gitlab migration
  * Update configure.ac bug URL for gitlab migration
  * Correct a string literal
  * Mention .otb as an extension
  * Accept a BDF font on stdin
  * Avoid undefined behaviour
  * Round font size to integer value when reading bitmap font
  * Mark vsprintf_alloc as printf-like function
  * check for freetype NULL atoms
  * let freetype handle ISO-8859-1 mapping
  * allow ISO-646.1991-IRV as well, adobe standard for bdf</changelog>
</package>
<package pkgid="b82b5ad715066a3ef735e2ac1d804708001ba896b2dfd8b2f42887f7603b7132" name="fossil-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1591876800">- Add fossil-2.11-reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593864000">- fossil 2.11.1:
  * Make the "fossil git export" command more restrictive about
    characters that it allows in the tag names</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1598443200">- fossil 2.12.1:
  * CVE-2020-24614: Remote authenticated users with check-in or
    administrative privileges could have executed arbitrary code
    [boo#1175760]
  * Security fix in the "fossil git export" command. New
    "safety-net" features were added to prevent similar problems
    in the future.
  * Enhancements to the graph display for cases when there are
    many cherry-pick merges into a single check-in. Example
  * Enhance the fossil open command with the new --workdir option
    and the ability to accept a URL as the repository name,
    causing the remote repository to be cloned automatically. Do
    not allow "fossil open" to open in a non-empty working
    directory unless the --keep option or the new --force option
    is used.
  * Enhance the markdown formatter to more closely follow the
    CommonMark specification with regard to text
    highlighting. Underscores in the middle of identifiers (ex:
    fossil_printf()) no longer need to be escaped.
  * The markdown-to-html translator can prevent unsafe HTML (for
    example: &lt;script&gt;) on user-contributed pages like forum and
    tickets and wiki. The admin can adjust this behavior using the
    safe-html setting on the Admin/Wiki page. The default is to
    disallow unsafe HTML everywhere.
  * Added the "collapse" and "expand" capability for long forum
    posts.
  * The "fossil remote" command now has options for specifying
    multiple persistent remotes with symbolic names. Currently
    only one remote can be used at a time, but that might change
    in the future.
  * Add the "Remember me?" checkbox on the login page. Use a
    session cookie for the login if it is not checked.
  * Added the experimental "fossil hook" command for managing
    "hook scripts" that run before checkin or after a push.
  * Enhance the fossil revert command so that it is able to revert
    all files beneath a directory.
  * Add the fossil bisect skip command.
  * Add the fossil backup command.
  * Enhance fossil bisect ui so that it shows all unchecked
    check-ins in between the innermost "good" and "bad" check-ins.
  * Added the --reset flag to the "fossil add", "fossil rm", and
    "fossil addremove" commands.
  * Added the "--min N" and "--logfile FILENAME" flags to the
    backoffice command, as well as other enhancements to make the
    backoffice command a viable replacement for automatic
    backoffice. Other incremental backoffice improvements.
  * Added the /fileedit page, which allows editing of text files
    online. Requires explicit activation by a setup user.
  * Translate built-in help text into HTML for display on web
    pages.
  * On the /timeline webpage, the combination of query parameters
    "p=CHECKIN" and "bt=ANCESTOR" draws all ancestors of CHECKIN
    going back to ANCESTOR.
  * Update the built-in SQLite so that the "fossil sql" command
    supports new output modes ".mode box" and ".mode json".
  * Add the "obscure()" SQL function to the "fossil sql" command.
  * Added virtual tables "helptext" and "builtin" to the "fossil
    sql" command, providing access to the dispatch table including
    all help text, and the builtin data files, respectively.
  * Delta compression is now applied to forum edits.
  * The wiki editor has been modernized and is now Ajax-based.
- Remove fossil-2.11-reproducible.patch: Upstream integrated the
  patch and improved it to also recognize SOURCE_DATE_EPOCH.
- Remove fossil-2.7-remove_date_time.patch: OBS now sets
  SOURCE_DATE_EPOCH and gcc recognizes it, so the removal of
  __DATE__ and __TIME__ is not needed anymore.
- Package the fossil.1 manual page.</changelog>
</package>
<package pkgid="d10615620f60eb056e78eb4310599f983d12b626a84c4068caeae33ed7964190" name="fossil-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.2.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1421755200">- fossil 1.30:
  * Added the fossil bundle command.
  * Added the fossil purge command.
  * Added the fossil publish command.
  * Added the fossil unpublished command.
  * Add support for Docker.
  * Enhancements and additions to web interface
  * Add the fossil fusefs DIRECTORY command ans FuseFS support for
    examining history
  * Add the administrative log that records all configuration.
  * Improvements to command line interface
  * Use full 40-character SHA1 hashes (instead of abbreviations)
    in most internal URLs.
  * Improvements to sync resilience
  * Fix CVE-2014-3566 "POODLE SSL 3.0" vulnerability.
- build with system sqlite that have a new enough version
- build with fuse
- update fossil-1.29-remove_date_time.patch
  to fossil-1.30-remove_date_time.patch</changelog>
  <changelog author="astieger@suse.com" date="1426939200">- fossil 1.32:
  * backwards compatibility fixes
  * Anti-aliased rendering of arrowheads on timeline graphs.
  * Added vi/less-style key bindings to the --tk diff GUI.
  * Documentation updates
  * Add the --repolist option to server commands
  * Added the "Xekri" skin.
  * Enhance the "ln=" query parameter on artifact displays to accept
    multiple ranges, separate by spaces (or "+" when URL-encoded).
  * Added fossil forget as an alias for fossil rm.
- includes changes from 1.31:
  * Improve file change graphs, fossil rebuild recommended
  * Optional full-text search, /srchsetup page, fts-config command
  * Improve UI and wiki funktionality
  * new rebuild --ifneeded
  * Added override skins option ("skin:", --skin)
  * Added the /md_rules pages about Markdown format.
  * Added the --repolist and --nojail options to server commands
  * Added the fossil all add subcommand to "fossil all".
  * Improvements to the /login page.
  * Downloads by "nobody" now enabled by default in new repositories.
  * Add IPv6 support to fossil sync and fossil clone
  * Added the /mimetype_list page.
  * Added the /hash-collisions page.</changelog>
  <changelog author="astieger@suse.com" date="1432555200">- fossil 1.33:
  * Improved fork detection on fossil update, fossil status and
    related commands.
  * Change the default skin to what used to be called "San
    Francisco Modern".
  * Add the /repo-tabsize web page
  * Add fossil import --svn, for importing a subversion repository
    into fossil which was exported using "svnadmin dump".
  * Add the "--compress-only" option to fossil rebuild.
  * Use a pie chart on the /reports?view=byuser page.
  * Enhanced fossil clean --verily so that it ignores keep-glob
    and ignore-glob settings. Added the -x alias for --verily.
  * Add the --soft and --hard options to fossil rm and fossil mv.
  * Improved ability to customize the timelime graph.
  * Improvements to the /sitemap page.
  * Automatically adjust the CLI timeline to the terminal width on Linux.
  * Added [info commands] and [info vars] commands to TH1.
  * Fix some obscure issues with TH1 expression processing.
  * Fix titles in search results for documents that are not wiki,
    markdown, or HTML.
  * Formally translate TH1 to Tcl return codes and vice-versa,
    where necessary, in the Tcl integration subsystem.
  * Add fossil leaves -multiple, for finding multiple leaves on
    the same branch.
  * Added the "Blitz" skin option.
  * Make fossil open honor ".fossil-settings/allow-symlinks".
  * Allow fossil add to be used on symlinks to nonexistent or
    unreadable files in the same way as fossil addremove.
  * Added fork warning to be issued if sync produced a fork
  * Update the info page to report when a file becomes a symlink.
    Additionally show the UUID for files whose types have changed
    without changing contents or symlink target.
  * Have fossil changes and fossil status report when executable
    or symlink status changes on otherwise unmodified files.
  * Permit filtering weekday and file reports by user. Also ensure
    the user parameter is preserved when changing types. Add a
    field for direct entry of the user name to each applicable
    report.
  * Create parent directories of empty-dirs if they don't already
    exist.
  * Inhibit timeline links to wiki pages that have been deleted.
- source tarball signature not available for this release
- new minimum sqlite3 requirement is 3.8.7, build with bundled
  version where it is not available.</changelog>
  <changelog author="astieger@suse.com" date="1447156800">- fossil 1.34:
  * Make the fossil clean command undoable for files less than
    10MiB.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 7.0 to 8.0.
  * Add the new amend command which is used to modify tags of a
    "check-in".
  * Fix bug in import command, handling version 3 of the svndump
    format for subversion.
  * Add the all cache command.
  * TH1 enhancements
  * Add the --undo option to the diff command.
  * Build-in Antirez's "linenoise" command-line editing library
    for use with the fossil sql command on Unix platforms.
  * Add stash cat as an alias for the stash show command.
  * Automatically pull before fossil merge when auto-sync is
    enabled.
  * Fix --hard option to fossil mv and fossil rm to enable them to
    work properly with certain relative paths.
  * Change the mimetype for ".n" and ".man" files to text/plain.
  * Display improvements in the fossil bisect chart command.</changelog>
  <changelog author="astieger@suse.com" date="1467028800">- fossil 1.35:
  * Enable symlinks by default on all non-Windows platforms.
  * Enhance the Markdown formatting so that hyperlinks that begin
    with "/" are relative to the root of the Fossil repository.
  * Rework the /setup_list page (the User List page) to display all
    users in a click-to-sort table.
  * Fix backslash-octal escape on filenames while importing from git
  * When markdown documents begin with &lt;h1&gt; HTML elements, use that
    header at the document title.
  * Added the /bigbloblist page.
  * Enhance the /finfo page so that when it is showing the ancestors
    of a particular file version, it only shows direct ancestors and
    omits changes on branches, thus making it show the same set of
    ancestors that are used for /blame.
  * Added the --page option to the fossil ui command
  * Added the fossil bisect ui command
  * Enhanced the fossil diff command so that it accepts directory
    names as arguments and computes diffs on all files contained
    within those directories.
  * Fix the fossil add command so that it shows "SKIP" for files
    added that were already under management.
  * TH1 enhancements:
    Add [array exists] command.
    Add minimal [array names] command.
    Add tcl_platform(engine) and tcl_platform(platform) array elements.
  * Added the fossil reparent command
  * Added --include and --exclude options to fossil tarball and
    fossil zip and the in= and ex= query parameters to the
    /tarball and /zip web pages.
  * Add support for encrypted Fossil repositories.
  * If the FOSSIL_PWREADER environment variable is set, then use
    the program it names in place of getpass() to read passwords
    and passphrases</changelog>
  <changelog author="idonmez@suse.com" date="1487246400">- Update to version 1.37:
  Changes for Version 1.37 (2017-01-16)
  * Add checkbox widgets to various web pages.
  * Add the fossil all ui command
  * Add the /file webpage
  * Enhance the /brlist webpage to make use of branch colors.
  * Add support for the ms=EXACT|LIKE|GLOB|REGEXP query parameter
    on the /timeline webpage, with associated form widgets.
  * Enhance the changes and status commands with many new filter
    options so that specific kinds of changes can be found without
    having to pipe through grep or sed.
  * Enhanced the fossil sql command so that it opens the checkout
    database and the configuration database in addition to the
    respository database.
  * TH1 enhancements:
  * Add [unversioned content] command.
  * Add [unversioned list] command.
  * Add project_description variable.
  * Rename crnl-glob setting to crlf-glob, but keep crnl-glob as
    a compatibility alias.
  * Added the --command option to the diff command.
  * Fix a C99-ism that prevents the 1.36 release from building
    with MSVC.
  * Fix ticket set when using the "+" prefix with fields from the
    "ticketchng" table.
  * Remove the "fusefs" command from builds that do not have the
    underlying support enabled.
  * Fixes for incremental git import/export.
  * Minor security enhancements to encrypted repositories.
  Changes for Version 1.36 (2016-10-24)
  * Add support for unversioned content, the fossil unversioned
    command and the /uv and /uvlist web pages.
  * The download page is moved into unversioned content so that
    the self-hosting Fossil websites no longer uses any external
    content.
  * Added the "Search" button to the graphical diff generated by
    the --tk option on the diff command.
  * Added the "--checkin VERSION" option to the diff command.
  * Various performance enhancements to the diff command.
  * Update internal Unicode character tables, used in regular
    expression handling, from version 8.0 to 9.0.
  * Fix multi-line timeline bug
  * Enhance the fossil purge command.
  * New command fossil shell.
  * SQL parameters whose names are all lower-case in Ticket Report
    SQL queries are filled in using HTTP query parameter values.
  * Added support for child projects that are able to pull from
    their parent but not push.
  * Added the -nocomplain option to the TH1 "query" command.
  * Added support for the chng=GLOBLIST query parameter on the
    /timeline webpage.
- Refresh fossil-1.30-remove_date_time.patch and rename it to
  fossil-1.37-remove_date_time.patch
- Drop support for &lt; openSUSE 11.4</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Trim description</changelog>
  <changelog author="max@suse.com" date="1488974400">- Update to version 2.0:
  * Use the hardened SHA1 implemenation by Marc Stevens and Dan
    Shumow.
  * Add the ability to read and understand artifact names that are
    based on SHA3-256 rather than SHA1, but do not actually
    generate any such names.
  * Added the sha3sum command.
  * Update the built-in SQLite to version 3.17.0.</changelog>
  <changelog author="max@suse.com" date="1494244800">- Update to version 2.2:
  * GIT comment tags are now handled by Fossil during import/export.
  * Show the content of README files on directory listings.
  * Support for Basic Authentication if enabled (default off).
  * Show the hash algorithms used on the /rcvfromlist page.
  * The /tarball and /zip pages now use the the r= query parameter to
    select which check-in to deliver. The uuid= query parameter is
    still accepted for backwards compatibility.
  * Update the built-in SQLite to version 3.18.0.
  * Run "PRAGMA optimize" on the database connection as it is closing.
- Changes in Version 2.1:
  * Add support for hash policies that control which of the
    Hardened-SHA1 or SHA3-256 algorithms is used to name new
    artifacts.
  * Add the "gshow" and "gcat" subcommands to fossil stash.
  * Add the /juvlist web page and use it to construct the Download
    Page of the Fossil self-hosting website using Ajax.</changelog>
  <changelog author="max@suse.com" date="1502452800">- Update to version 2.3:
  * Update internal Unicode character tables, used in regular
    expression handling, from version 9.0 to 10.0.
  * Show the last-sync-URL on the /urllist page (
  * Added the "Event Summary" activity report. example
  * Added the "Security Audit" page, available to administrators
    only
  * Added the Last Login time to the user list page,
    for administrators only
  * Added the --numstat option to the fossil diff command
  * Limit the size of the heap and stack on unix systems, as a
    proactive defense against the Stack Clash attack.
  * Fix "database locked" warnings caused by "PRAGMA optimize".
  * Fix a potential XSS vulnerability on the /help webpage.
    (bsc#1053267).
  * Documentation updates</changelog>
  <changelog author="max@suse.com" date="1512648000">- Use bcond for deciding between system and builtin sqlite.
- Update to version 2.4:
  * New feature: URL Aliases. URL Aliases allow an administrator to
    define their own URLs on the web interface that are rewritten to
    built-in URLs with specific parameters. Create and configure
    URL Aliases using the /Setup/URL_Aliases menu option in the
    web interface.
  * Add tech-note search capability.
  * Add the -r|--revision and -o|--origin options to the annotate
    command.
  * Add the origin= query parameter to the /annotate webpage.
  * The fossil annotate command and the /annotate web page go
    backwards in time as far as can be computed in 30 milliseconds
    by default, rather than stopping after 20 steps. The new
    limit= query parameter or the --limit command-line option can
    be used to alter this timeout.
  * Provide separate on-line help screens for each setting.
  * Back out support for the --no-dir-symlinks option
  * Remove support from the legacy configuration sync
    protocol. The only way now to do a configuration push or pull
    is to use the new protocol that was added in 2011.
  * Add the from= and to= query parameters to /fdiff in order to
    get a diff of two files in the same check-in.
  * CVE-2017-17459, bsc#1071709: Fix the "ssh://" protocol to
    prevent an attack whereby the attacker convinces a victim to
    run a "clone" with a dodgy URL and thereby gains access to
    their system
  * Provide a checkbox that will temporarily disable all ad-units.
  * Improvements to the /stat page
  * Various new hyperlinks to the /bloblist and /bigbloblist pages.
  * Correct the /doc page to support read-only repositories.
  * Correct /zip, /tarball, zip, and tarball pages and commands to
    honor the versioned manifest setting when outside of an open
    checkout directory.
  * The admin-log and access-log settings are now on by default
    for new repositories.
  * Update the built-in SQLite to version 3.21.0.</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- update to 2.5:
  * UI updates
  * display ettings persist across pages
  * improve responsiveness fo server process
  * Support for SQL Archives as a download option</changelog>
  <changelog author="astieger@suse.com" date="1538049600">- update to 2.7:
  * New email alerts feature
  * New discussion forum feature
  * UI improvements for built-in skins on small screens
  * Use of Content Security Policy (CSP) in built-in skins
- includes changes from 2.6:
  * Add the new "Classic" timeline viewing mode
  * Add support HTTP cache control mechanisms
  * Improvements to various pages and functions
  * Additional defenses against web-based attacks
- requires SQLite &gt;= 3.25.0
- rebase fossil-1.37-remove_date_time.patch to
  fossil-2.7-remove_date_time.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1564920000">- update to 2.9:
  * Add the fossil git export command
  * Web UI layout and behavior improvements
  * Add the fossil touch command, and the --setmtime option on the
    fossil open and fossil update commands
  * Add the /secureraw page that requires the complete SHA1 or SHA3
    hash, not just a prefix, before it will deliver content
  * Improvement to clone and sync behavior
  * many other bug fixes and improvements
- includes changes from 2.8:
  * Show cherry-pick merges as dotted lines on the timeline graph.
    The "fossil rebuild" command must be run to create and populate
    the new "cherrypick" table in the repository in order for this
    feature to operate.
  * Web UI improvements
  * Wiki setup is now at /setup_wiki
  * Provide the ability to redirect all HTTP pages to HTTPS
  * Add the backoffice-disable setting to completely disable the
    backoffice feature</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1570276800">- fossil 2.10:
  * Add support for CGI-based Server Extensions
  * UI improvement and extensions
  * Change the default hash policy to SHA3
  * Performance optimizations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1590580800">- fossil 2.11:
  * Support Markdown in the default ticket configuration
  * Timestamp strings in object names can now omit punctation
  * Enhance backlink processing so that it works with Markdown-
    formatted tickets and so that it works for wiki pages
    fossil rebuild is needed to take full advantage of this fix
  * Many improvements to the forum and especially email notification
    of forum posts
  * Minimum length of a self-registered user ID increased from 3 to 6
    characters
  * Rework the fossil grep command to be more useful
  * Expose the redirect-to-https setting to the settings command
  * Most commands now support the Unix-conventional "--" flag to
    treat all following arguments as filenames instead of flags
  * Add the mimetypes config setting
  * security harening against possibly tampered database schemas
  * Now sends the Content-Security-Policy header
  * Stop using the IP address as part of the login cookie
  * many web UI and CLI improvements, documentation updates</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1591876800">- Add fossil-2.11-reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1593864000">- fossil 2.11.1:
  * Make the "fossil git export" command more restrictive about
    characters that it allows in the tag names</changelog>
  <changelog author="Reinhard Max &lt;max@suse.com&gt;" date="1598443200">- fossil 2.12.1:
  * CVE-2020-24614: Remote authenticated users with check-in or
    administrative privileges could have executed arbitrary code
    [boo#1175760]
  * Security fix in the "fossil git export" command. New
    "safety-net" features were added to prevent similar problems
    in the future.
  * Enhancements to the graph display for cases when there are
    many cherry-pick merges into a single check-in. Example
  * Enhance the fossil open command with the new --workdir option
    and the ability to accept a URL as the repository name,
    causing the remote repository to be cloned automatically. Do
    not allow "fossil open" to open in a non-empty working
    directory unless the --keep option or the new --force option
    is used.
  * Enhance the markdown formatter to more closely follow the
    CommonMark specification with regard to text
    highlighting. Underscores in the middle of identifiers (ex:
    fossil_printf()) no longer need to be escaped.
  * The markdown-to-html translator can prevent unsafe HTML (for
    example: &lt;script&gt;) on user-contributed pages like forum and
    tickets and wiki. The admin can adjust this behavior using the
    safe-html setting on the Admin/Wiki page. The default is to
    disallow unsafe HTML everywhere.
  * Added the "collapse" and "expand" capability for long forum
    posts.
  * The "fossil remote" command now has options for specifying
    multiple persistent remotes with symbolic names. Currently
    only one remote can be used at a time, but that might change
    in the future.
  * Add the "Remember me?" checkbox on the login page. Use a
    session cookie for the login if it is not checked.
  * Added the experimental "fossil hook" command for managing
    "hook scripts" that run before checkin or after a push.
  * Enhance the fossil revert command so that it is able to revert
    all files beneath a directory.
  * Add the fossil bisect skip command.
  * Add the fossil backup command.
  * Enhance fossil bisect ui so that it shows all unchecked
    check-ins in between the innermost "good" and "bad" check-ins.
  * Added the --reset flag to the "fossil add", "fossil rm", and
    "fossil addremove" commands.
  * Added the "--min N" and "--logfile FILENAME" flags to the
    backoffice command, as well as other enhancements to make the
    backoffice command a viable replacement for automatic
    backoffice. Other incremental backoffice improvements.
  * Added the /fileedit page, which allows editing of text files
    online. Requires explicit activation by a setup user.
  * Translate built-in help text into HTML for display on web
    pages.
  * On the /timeline webpage, the combination of query parameters
    "p=CHECKIN" and "bt=ANCESTOR" draws all ancestors of CHECKIN
    going back to ANCESTOR.
  * Update the built-in SQLite so that the "fossil sql" command
    supports new output modes ".mode box" and ".mode json".
  * Add the "obscure()" SQL function to the "fossil sql" command.
  * Added virtual tables "helptext" and "builtin" to the "fossil
    sql" command, providing access to the dispatch table including
    all help text, and the builtin data files, respectively.
  * Delta compression is now applied to forum edits.
  * The wiki editor has been modernized and is now Ajax-based.
- Remove fossil-2.11-reproducible.patch: Upstream integrated the
  patch and improved it to also recognize SOURCE_DATE_EPOCH.
- Remove fossil-2.7-remove_date_time.patch: OBS now sets
  SOURCE_DATE_EPOCH and gcc recognizes it, so the removal of
  __DATE__ and __TIME__ is not needed anymore.
- Package the fossil.1 manual page.</changelog>
</package>
<package pkgid="d1b5ee6eaa60544b53458aab641ee60f4562de16ba66e733aaa7406a8ec2bd38" name="fpc-debuginfo" arch="i586">
  <version epoch="0" ver="3.2.0" rel="lp152.6.3.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
</package>
<package pkgid="d5cbff7f71883e8c7d2fefbf8072bf3d63d7a049fa709bc3e4e04066af41eb03" name="fpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="lp152.6.3.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
</package>
<package pkgid="52d7d436758bf08bac01ac2f625af4d56c67bf66da7202f71e5d11d98561fd9c" name="fpc-debuginfo" arch="i586">
  <version epoch="0" ver="3.2.0" rel="lp152.6.6.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport r46209 - "@PLT is needed for calls to link it properly
  with pic code" [bsc#1176706]:
  * fpc-si_c-x86_64-plt.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600948800">- add aarch64-fpc-compilation-fix.patch: pass vfp flags to
  gas
- Handle fpu initialization (bsc#1122855):
  * add aarch64-fpu-initialization.patch: initialize fpu properly
  * aarch64: disable bootstrap mode</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1601035200">- Add patch to fix build on ppc64le:
  * fpc-fix-library-paths-on-ppc64.patch</changelog>
</package>
<package pkgid="67e246a71ff3bbc1267a585af730c5f8bdb79ac34117ec620936f51b4079af86" name="fpc-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="lp152.6.6.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport r46209 - "@PLT is needed for calls to link it properly
  with pic code" [bsc#1176706]:
  * fpc-si_c-x86_64-plt.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600948800">- add aarch64-fpc-compilation-fix.patch: pass vfp flags to
  gas
- Handle fpu initialization (bsc#1122855):
  * add aarch64-fpu-initialization.patch: initialize fpu properly
  * aarch64: disable bootstrap mode</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1601035200">- Add patch to fix build on ppc64le:
  * fpc-fix-library-paths-on-ppc64.patch</changelog>
</package>
<package pkgid="9454d998e43fc2ac17997c69ef3e3eed42e35c4b1200ff4ad8ef0e28547e299c" name="fpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="lp152.6.3.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
</package>
<package pkgid="bec29b603fffbe6a1f15af5b6c495154287690c695ca2668f6a8405e086c51e0" name="fpc-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.0" rel="lp152.6.6.2"/>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 3.0.0
  * remove patch fpc-2.6.2-make-user.pdf-fix.patch as fixed upstream
  * use previous fpc version instead prebuild one for build
  * New features see http://wiki.freepascal.org/FPC_New_Features_3.0
  * Changes see http://wiki.freepascal.org/User_Changes_3.0</changelog>
  <changelog author="markus.beth@web.de" date="1513339200">- Update to 3.0.4
  * Changes see http://wiki.freepascal.org/User_Changes_3.0.4
- Added update-fpcdocs.patch to fix doc generation</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526385600">- Fix %arm build
- Add ExclusiveArch for %ix86 x86_64 %arm ppc ppc64</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536062400">- Add aarch64 support</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536062401">- Add patch to fix aarch64 build:
  * fpc-fix_aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536321600">- Remove 'fpcsrc/packages/nvapi/nvapi.pas' due to license problems</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1536580800">- Move patches and sources out of %ifarch conditions</changelog>
  <changelog author="termim@gmail.com" date="1552737600">- http --&gt; https in URL</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566820800">- Use separate subpackages for documentation and examples, and make
  both noarch.
- Make PDF documentation build reproducible
- Use tex(foo) style BuildRequires, only request what is really needed.
- Install COPYING* in licensedir
- Drop gpm and ncurses runtime requires (not used by the compiler,
  but only for some of the examples).
- Remove defattr and BuildRoot from spec file.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1566993600">- Use _multibuild for building the doc subpackage. This removes e.g.
  TeXLive, python and X11 from the dependency chain of the main package.
- Remove noarch for doc subpackage as we need to use %ifarch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1593518400">- Update to 3.2.0
  * Changes see https://wiki.freepascal.org/User_Changes_3.2.0
- Enable bootstrap for aarch64, ppc, ppc64, ppc64le
  * Add bootstrap binary archives
    + fpc-3.2.0-aarch64.zip
    + fpc-3.2.0-ppc.zip
    + fpc-3.2.0-ppc64.zip
    + fpc-3.2.0-ppc64le.zip
- Drop old git snapshot source for aarch64 build
  * fpcbuild.zip
- Add patch to fix library paths on aarch64
  * fpc-fix-library-paths-on-aarch64.patch
- Drop patches for issues fixed upstream
  * fpc-fix_aarch64.patch
  * update-fpcdocs.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665600">- Fix bootstrap handling</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597665601">- Fix doc building when bootstrap is used</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1597752000">- Drop '%elifarch' usage for now since it is not well supported
  by the source validator, see:
  https://github.com/openSUSE/obs-service-source_validator/issues/85</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1600689600">- Backport r46209 - "@PLT is needed for calls to link it properly
  with pic code" [bsc#1176706]:
  * fpc-si_c-x86_64-plt.patch</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1600948800">- add aarch64-fpc-compilation-fix.patch: pass vfp flags to
  gas
- Handle fpu initialization (bsc#1122855):
  * add aarch64-fpu-initialization.patch: initialize fpu properly
  * aarch64: disable bootstrap mode</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1601035200">- Add patch to fix build on ppc64le:
  * fpc-fix-library-paths-on-ppc64.patch</changelog>
</package>
<package pkgid="8cb30ebb8b1435569e621869972c0579647779127a19f74e7b1a9242e813d320" name="freeradius-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="10b9632facc8a7ee0a5d551a2ffc3e6e8e47485897676df18ab87d1413beec13" name="freeradius-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="e1b641fe17c1743f8ee1c834420fc3ab7933776c6a7723837138b3ab26908494" name="freeradius-server-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="56446cb157be24177d63daee81d660a141adcd5dcf4b061393d3a8b5acd1f658" name="freeradius-server-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="831011dbfafe646f25d22119c8dece00f36f885d767c05ca6135cb397213b114" name="freeradius-server-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="ad4186639893d044576c2cbb4068636af073c75987bcc87b037330a1075f634d" name="freeradius-server-krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="73929c6b9c1fbd30501c0606d9e92536add0017fbfc2a6667508b5f4f3d8b00a" name="freeradius-server-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="ab6822c6e9efd30cd572a5107bb79a26c8c5764d7102d4051147e5314816fff4" name="freeradius-server-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="9bb193c3af5b2b607c8c8826503a2186da7801b55c9a462f1d556bdbb9f618ab" name="freeradius-server-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="5e723e090848f02c229682bc6632da0dc5d697648fbcee612ad93ee8ede63337" name="freeradius-server-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="d646f7f4ff71a0cd87d50006fde13af29332933e69e4679ae97393e008465f20" name="freeradius-server-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="9ba65db4ea7659cd9a97120e3fbc9cd5ce77c44942cfb70429d0baeac7191455" name="freeradius-server-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="bdd3358460697d7fcf1d1fa6e4015706352c754cb9871569871f1e578d6779ce" name="freeradius-server-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="c161c37d209ad154a58ea0918b8b2823071a417c29495122cb0b79bb1dab183f" name="freeradius-server-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="68d2268439b51de72b22843a824bade4f852a4a4d6e3251a3767f7f73407399a" name="freeradius-server-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="129e45b29e66f5f469038e8609b8e090e1240c25991531b490ad4612eadcb9f0" name="freeradius-server-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="94d242f2e9c0a0509580fc537f12ca687a3fc5a2e4e3c89ddbc7042b5eab2e0b" name="freeradius-server-python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="15fca60b8a9a24022090659193f14ee67a096b5beb331f68536b81d5e7769968" name="freeradius-server-python3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="1b21d305d2f41932f3100ece30ad1b6bb0020f9027cf6f67dfc0c99f8cf16b1e" name="freeradius-server-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="29292e949b3b2436d3320503cac50f9f3da318036ed623757f83ef4891419d69" name="freeradius-server-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="dbe335065f729dcd3d0b39e5cd21b96ba20f54b31e7753dfd68b8bbf8b032d37" name="freeradius-server-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1483272000">- Remove --with-pic which is for static libs only.
- Use SUSE RPM group names. Trim filler words from description.
- Do not hide errors from groupadd/useradd.</changelog>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
</package>
<package pkgid="9dbba8c7f40691eed6330a94bd9a6794ec396ad070414867c8041f4a2e1a9407" name="freeradius-server-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.21" rel="lp152.2.6.1"/>
  <changelog author="adam.majer@suse.de" date="1485777600">- Merge changes from SLE to openSUSE (FATE#322416):
  * freeradius-server-radclient-init-error-buffer.patch - make sure
    we initialize error buffer. bsc#911886: radclient error free()
    invalid pointer
  * freeradius-server-opensslversion.patch: remove OpenSSL version
    check and assume we know what we are doing. (bnc#1013311)
  * merge .changes file, mostly.
- do not attempt to detect "vulnerable" OpenSSL versions. SUSE
  security fixes do not necessarily bump version numbers as
  does upstream OpenSSL (bnc#1021375)
- do not generate certificates in %post. End-user needs to do this
  manually.
- keep FreeTDS disabled on SLE12 - we never shipped it enabled
- require OpenSSL 1.0+
- use pkgconfig(systemd) instead of plain systemd as BuildRequires
- don't list manual pages as %doc</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we use systemd
- Remove require for unused fillup</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- removed obsolete freeradius-server-fix-cert-bootstrap.patch
  because recent /etc/raddb/certs/bootstrap simply works
- update to 3.0.13 (still FATE#322416)
  Feature improvements
  * Add dictionary.rfc7930.  Note that we do not implement
    the RFC.
  * Added 'cipher_server_preference' to mods-available/eap
    Patch from #1797.
  * OpenSSL 1.1.0 compatibility fixes.
  * rlm_perl: radiusd::xlat to evaluate xlat string
    within perl script
  * Allow authentication retry in winbind. Patch from
    Herwin Weststrate. See raddb/mods-available/mschap.
  * Added "recv-coa" method to rlm_rest.  It behaves the
    same as "authorize".
  * Document Trust Router tr_port option.  Patch from
    Stefan Paetow.
  * Update elasticsearch/logstash examples so that they work
    with elastic stack v5.  Patch from Matthew Newton.
  * Print information about packets, replies, and contents
    in the detail file reader.
  * Update abfab-tr policy.  Pull request #1893
    from Stefan Paetow.
  * Reject packets which contain User-Password and
    EAP-Message.
  * Add example for filtering Access-Challenge.
    See sites-enabled/default.
  * Pull symlink fixes from v4.0.x.  Fixes #1859.
  * Add systemd reload.  Not everything is reloaded, but
    some is.  Fixes #1662.
  * Better documentation for listen "ipaddr".  Fixes #1921
  * Add dictionary.cnergee, updated dictionary.nomadix.
  * radclient no longer needs -x to print statistics with -s.
  Bug fixes
  * Minor typos.  Fixes #1763
  * Fix typo in RPM build.  Closes #1767.
  * rlm_mschap check for password expiry only
    if password was correct.  Fixes #1762.
  * Update debian build.
  * update rlm_counter "man" page.  Fixes #1775.
  * Remove erroneous assert.  Fixes #1778.
  * fix mschap password change test.  Fixes #1792.
  * Cleanup config file on data remove.  Fixes #1795.
  * passwd module returns "notfound" if not found.
  * Check for old OpenSSL, and don't build rlm_eap_fast
    if it necessary.  Fixes #1803
  * Cleanup memory better after ldap version query.
    Patch from Aleksey Katargin.
  * Rename lt_* functions to avoid linker issues with
    libtool.  Fixes #1277
  * Many miscellaneous fixes and typos.
  * Allow long strings in %{%{foo} bar:-%{baz} blah".
    Fixes #1866
  * Fix filtering operators, along with more documentation and
    more tests for them.
  * Fix OpenSSL fixes.  Fixes #1876.
  * Finish SQL select queries even when SELECT returns no rows.
    Fixes #1879.
  * Set Module-Failure-Message for more EAP errors.
  * Correct typo in dictionary.rfc5580.  Fixes #1882
  * Remove obselete systemd syslog.target.
  * Client-Port-Balance load-balancing now uses client port.
  * Radrelay examples fixed from Alex Clouter.
  * Update systemd target.  Pull request #1896.
  * Trim starting whitespace in xlat strings.
  * Get MySQL result lengths using normal API.
  * suid down after fchown().  Fixes #1914.
  * Fix cases of comparing pointer to NUL character.  Fixes #1915.
  * OpenSSL v1.1 fixes.  Pull request #1921.
  * Better Handle v4/v6 host names.  Pull request #1919.
  * Remove "Auth-Type = System" from docs and examples.
  * Don't crash on malformed %{home_server}.  Fixes #1922
  * fix erroneous use of talloc destructor in rlm_eap
  * Issue trigger modules.sql.fail.  Fixes #1923
  * Document python_path gotcha's.  Fixes #1845
  * dlopen() the specific version of Python.  Fixes #1592</changelog>
  <changelog author="adam.majer@suse.de" date="1496059200">- update to 3.0.14 (still FATE#322416)
  Feature improvements
  * Enforce TLS client certificate expiration on session resumption,
    and Session-Timeout. See CVE-2017-9148 (bnc#1041445)
  * Updated dictionary.cisco.vpn3000, dictionary.patton
  * Added dictionary.dellemc
  * Lowered the log output for failed PEAP sessions.
  * ALlow utc in rlm_date.
  * The internal OpenSSL session cache has been disabled.
    Please see mods-available/eap
  * Update detail reader documentation.
  * Make outgoing RadSec connections non-blocking.
  * Add SQL backing to Moonshot-*-TargetedId generation.
  Bug Fixes
  * radtest uses Cleartext-Password for EAP, not User-Password.
  * Update documentation for mods-enabled/ linking.
  * Enhanced checks for moonshot salt.
  * Allow session resumption for RadSec connections.
  * Update "huntgroups" file to note that port ranges are not supported
  * Fix OpenSSL permissions issues on default key files.
  * Certificates are not required when PSK is used.
  * Allow SubjectAltName as first extension in cert.
  * Fixed talloc issue with TLS session resumption.
  * "&amp;Attr-26 := 0x01" now produces useful error messages.
  * Handle connection error in rlm_ldap_cacheable_groupobj.
  * Fix endian issues in DHCP.
  * Multiple minor fixes for Coverity complaints.
  * Handle unexpected regex.
  * Fix minor issues in dictionaries.
  * Fix typos and grammar. Patches from Alan Buxey.
  * Fix erroneous VP creation in rlm_preproces.
  * Fix MIB. Patch from Jeff Gehlbach.
  * Trust router updates from Alejandro Perez.
  * Allow build with LibreSSL.
  * Use correct packet for channel bindings.
  * Many fixes found by PVS-Studio. Thanks to PVS-Studio for giving us
    a test license. Please see the git commit history for more info.
  * Fix incorrect length check in EAP-PWD. This may be exploitable.
  * Stop rotating session database files (radutmp, radwtmp) since
    these are not logfiles.
- freeradius-server-radiusd-logrotate.patch: updated</changelog>
  <changelog author="michael@stroeder.com" date="1500292800">- update to 3.0.15 with security fixes for
  issues found via fuzzing by Guido Vranken (bsc#1049086)
  https://freeradius.org/security/fuzzer-2017.html
  * CVE-2017-10978: FR-GV-201 (v2,v3) Read / write overflow in make_secret()
  * CVE-2017-10983: FR-GV-206 (v2,v3) DHCP - Read overflow when decoding option 63
  * CVE-2017-10984: FR-GV-301 (v3) Write overflow in data2vp_wimax()
  * CVE-2017-10985: FR-GV-302 (v3) Infinite loop and memory exhaustion with 'concat' attributes
  * CVE-2017-10986: FR-GV-303 (v3) DHCP - Infinite read in dhcp_attr2vp()
  * CVE-2017-10987: FR-GV-304 (v3) DHCP - Buffer over-read in fr_dhcp_decode_suboptions()
  * CVE-2017-10988: FR-GV-305 (v3) Decode 'signed' attributes correctly
  * FR-AD-002 (v3) String lifetime issues in rlm_python
  * FR-AD-003 (v3) Incorrect statement length passed into sqlite3_prepare</changelog>
  <changelog author="varkoly@suse.com" date="1503662400">- bsc#1055679 - freeradius-server does not provide winbind/AD auth
  Added libwbclient-devel as buildrequires</changelog>
  <changelog author="adam.majer@suse.de" date="1505822400">- Fix permissions of radiusd.service (bnc#1053654)</changelog>
  <changelog author="michael@stroeder.com" date="1515672000">- update to 3.0.16
  Feature improvements
  * rlm_python now supports multiple lists.  From #2031.
  * Add trust router re-keying.  From #2007.
  * Add support for Samba / AD LDAP schema.
  See doc/schemas/ldap/samba/README.txt and
  doc/schemas/ldap/samba/
  * Add "tls_min_version" and "tls_max_version" to EAP module
  for Debian OpenSSL issues.
  * Better documentation for client certificates in PEAP and TTLS:
  it usually doesn't work.  Fixes #2068.
  * Distinguish login failure from AD unavailable.  Fixes #2069.
  * Update RH spec files.  Fixes #2070.
  * Run Post-Proxy-Type if all home servers are dead.
  Fixes #2072.
  * Print offending IP addresses when EAP sessions come from
  two upstream home servers, and rate-limit the messages.
  * Minor packaging updates.
  * Better documentation for rlm_rest.
  * EAP-FAST now has it's own "cipher_list", so that it is
  easier to configure.
  * EAP-FAST now forcibly disables TLS1.2, until such time
  as we implement the new keying mechanism from TLS1.2.
  * Add documentation for allow_expired_crl.
  * Update Debian logrotation.  #2093 and #2101.
  * DHCP relay can now drop responses.  #2095.
  * rlm_sqlippool can now assign Delegated-IPv6-Prefix.
  It also now can assign any IPv4 or IPv6 address.
  Based on patches from maximumG.  #2094.
  See raddb/mods-available/sqlippool for changes.
  * radeapclient can now use EAP-SIM-Ki to dynamically
  create the necessary triplets.
  * Explain why many LDAP connections are closed.
  Fixes #1969.
  * Debian build / package issues fixed by Matthew Newton.
  * dictionary.patton updates from Brice Schaffner.  Fixes #2137.
  * Added scripts to build "inner-server.pem", and updated
  mods-config/inner-eap and certs/README to match.
  * Added provisions for using an external CA.  See raddb/certs/
  * Include dhcpclient binary in freeradius-dhcp debian packge.
  Bug fixes
  * Bind the lifetime of program name and python path to the module
  FR-AD-002 (redone)
  * Pass correct statement length into sqlite3_prepare[_v2]
  FR-AD-003 (redone)
  * Allow 100-Continue responses with additional headers in rlm_rest.
  * fix corner case where detail files were not being locked
  correctly.
  * Fix (SQL-Group == "%{...}") checks, and same for LDAP-Group.
  Fixes #1947
  * Clean up exfile code.  Which should help to avoid issues
  with reading / writing 100's of detail files.
  * Fix build for winbind.  Patch from Alex Clouter.
  * Fix checkrad for Mikrotik.  Patch from Muchael Ducharme.
  * Fix home server stats lookup.  Patch from Phil Mayers.
  * Add libjson-c3 as an optional dependency.
  * Require LTB OpenLDAP on CentOS / Redhat, to avoid linking
  against NSS, which breaks the server.  Fixes #2040.
  * rlm_python fixes.  Fixes #2041
  * Typos in "man" pages.  Fixes #2045
  * Expand "next" in %{%{...}:-%{...}}.  Fixes #2048
  * Don't add TLS attributes twice.  Fixes #2050.
  * Fix memory allocation in rlm_rest.  Fixes #2051.
  * Update trustrouter for new API. Fixes #2059.
  * Fix SQLite issues on FreeBSD.  Fixes #2060
  * Don't do debug logging of bad passwords.  Fixes #2064. (bsc#1099802)
  * More graceful handling of "die" in rlm_perl.  Fixes #2073.
  * Fix occasional crash when using
  cisco_accounting_username_bug = yes
  * EAP-FAST fixes from Isaac Boukris.
  [#2078], #2076, and #2082, #2126.
  * DHCP fixes, relay, #2092, add run-time check, #2028
  * Decode multiple RADIUS packets at a time in highly loaded
  RadSec connections.  Patch from Jan Tomasek.  #2106.
  * TunnelPassword is not "single value" in LDAP schema.
  Fixes #2061.
  * sql log now opens the expanded filename, not the input one.
  This was a regression introduced in 3.0.15.
  * Remove unnecessary UNIQUE constrain in Oracle schemas.
  * Fix SSL thread and locking issues when modules also use SSL.
  Fixes #2125 and #2129.
  * Re-add dhcpclient "raw packet" changes.  Patches from
  Nicolas Chaigne and Matthew Newton.  Fixes #2155.</changelog>
  <changelog author="michael@stroeder.com" date="1523966400">- update to 3.0.17
  Feature Improvements
  * Add CURLOPT_CAINFO. Patch from Nicolas C #2167.
  * "stats home server" now supports "src IPADDR", to specify home
  server also by source IP. Fixes #2169.
  * Add Dockerfiles for a selection of common systems.
  * Increase number of permitted file descriptors, for systems with many
  home servers.
  * Add TLS-Client-Cert-X509v3-Extended-Key-Usage-OIDs
  Patch from Isaac Boukris. Fixes #2205.
  * Update main READMEs. Patches from Matthew Newton.
  * Added dictionary.mimosa.
  Bug Fixes
  * Don't call post-proxy twice when proxying to a virtual server.
  Matthew Newton, #2161.
  * Use "raw" string value for shared secrets and dynamic clients
  It now parses strings with backslashes and "special characters"
  correctly. Fixes #2168.
  * Fix RuntimeDirectory for RedHat, from Alan Buxey.
  * Relax checks in 'if' parser from Isaac Bourkis.
  * Minor cleanups for %{debug_attr:&amp;request} from Isaac Boukris.
  * Be more aggressive about cleaning up cached certificate attributes,
  due to deficiencies in OpenSSL. Reported by Nicolas Reich.
  * Be more accepting when parsing IPv6 addresses. Bug noted by Klara Mall.
  * Fix double free in rlm_sql. Fixes #2180.
  * rlm_detail now writes empty Access-Accept packets.
  * rlm_python can now create tagged attributes.
  * Don't crash on duplicate realm + authhost / accthost
  * Allow partial certificate chain to trusted CA. Fixes #2162.
  * Treat SSL_read() returning zero as error. Fixes #2164.
  * detail writer now checks if the file was renamed or deleted.
  * Add User-Name to Access-Accept if EAP-Message exists, not Stripped-User-Name.
  * RedHat Systemd updates. Fixes #2184.
  * Use correct API for State variable in rlm_securid.
  * Remove broken radclient option "-i".
  * Fix "users" file (and hints, etc). So that it does not get confused
  about entry ordering with multiple $INCLUDEs.
  * Fix rlm_sql to expand the un-escaped string, not the raw string.
  * Link default and inner-tunnel only if they exist. Fixes #2206.
  * Don't use both IP_PKTINFO and IP_SENDSRCADDR.
  * Always install signal handler for SIGINT (needed by Docker).
  * Fix intermediate CA flow for OCSP. Fixes #2160 Intermediate certs
  which are not self-signed will now be checked.
  * sqlippool now returns "fail" if it fails IP allocation.
  * Fix rlm_yubikey to look for correct attribute in replay attack check.</changelog>
  <changelog author="michael@stroeder.com" date="1530014400">- also fix ownership of /var/log/radius in systemd unit</changelog>
  <changelog author="adam.majer@suse.de" date="1530705600">- install license as %license instead of documentation</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1551182400">- update to 3.0.18
  * cleanup_delay can now be 30 seconds. This helps with proxies that have packet loss.
  * Do-Not-Respond policies can now be set in the "post-auth" section.
  * Encode / Decode ADSL Forum DHCP options.
  * Fix module ordering issues. e.g. when "sqlippool" needs "sql".
  See the "instantiate" section of radiusd.conf.
  * Add Big Switch dictionary. Fixes #2252.
  * Add sql_session_start policy (raddb/policy.d/accounting)
  This minimizes race conditions when using Simultaneous-Use (#2257).
  * For rlm_perl, all variables are now tainted by default.
  See raddb/mods-available/perl, and the "perl_flags" configuration item.
  This change should only affect people who are using variables in
  insecure ways.
  * Allow "sqlcounter" module to be listed in "post-auth".
  * Add support for IPv6 attributes in SQL. Fixes #2280
  * The server is better at handling fail-over for outbound RadSec and
  TCP connections. Fixes #2284.
  * The server is now more aggressive about retrying failed outbound
  RadSec and TCP connections. Fixes #2284.
  * Add TLS-Session-Version and TLS-Session-Cipher-Suite to the "session_state" list.
  * Add expansion for Radsec connections. "%{listen:TLS-...}" for
  TLS-Client-Cert-* and TLS-Cert-* attributes.
  * Add notes on running "ldapsearch" using the parameters from the LDAP module.
  * "ipaddr" attributes can now be cast to "integer" type attributes
  in an "update" section.
  * Move main thread queue to using atomic queues. This should help
  with contention in high load scenarios.
  * Add "recv_buff" setting to listeners. For more details,
  see sites-available/default.
  * The sqlippool module can now use attributes other than "Pool-Name"
  to assign IP pools. The "Pool-Name" attribute is still the default.
  * The "unpack" expansion can now unpack substrings.
  See mods-available/unpack for documentation and examples.
  * The preprocess module now does "ciscvo_vsa_hack" for Eltex-AVPair
  Fixes #2301. Vendors SHOULD NOT USE THAT KIND OF ATTRIBUTE.
  * Allow for &lt;instance&gt;-LDAP-UserDN. See mods-available/ldap for more information.
  * Add sanitizing of control list for moonshot. Fixes #2318.
  * Update rlm_sql_mysql to be compatible with MySQL 8
  Fixes https://bugs.launchpad.net/bugs/1795310.
  * Allow logging of only Access-Accept or Access-Reject messages
  See radiusd.conf, "auth_accept" and "auth_reject".
  * Removed Connect-Rate comparison. It was unused and broken.
  * Add dictionary.infinera.
  * Use OpenSSL HMAC functions instead of local ones.
  * Some SQL modules can now use "auto_escape" to escape unsafe strings
  See mods-config/sql/main/mysql/queries.conf.
  * Add wispr2date conversion in mods-available/date.
  * Implement dictionary-based handling in rlm_python.
  Fixes #2334 See mods-available/python for details.
  * Add support for SKIP LOCKED in sqlippool. This can improve performance
  by an order of magnitude or more.
  See raddb/mods-config/sql/ippool/*/queries.conf Fixes #2383
  * Allow PSK and certificates at the same time Except for TLS 1.3
  which does not support that.
  * Update docker scripts. Fixes #2306 Patch from Matthew Newton.
  * Add crypt xlat.
  * MySQL connections can now skip verifying the server certificate.
  Fixes #2481. See mods-available/sql.
  * Add better mechanism to detect MariaDB (Old MySQL).
  * Add RFC 7532 "bang path" support for realms Fixes #2492.
  * Update dictionary.ukerna documentation. Fixes #2493.
  * Add support for systemd service and watchdogs Fixes #2499.
  * Check for openss/rand.h, and allow building without OpenSSL engine.
  Patch from Eneas U de Queiroz Fixes #2517.
  * The default PosgtreSQL queries now use "ON CONFLICT" to better
  deal with issues. This requires PostgreSQL 9.5 or later.
  Please use a recent version of PostgreSQL, or edit the default
  queries to remove "ON CONFLICT".
  BUG FIXES
  * The session-state list is no longer cleaned in the inner-tunnel.
  This lets the outer Access-Reject section access session-state.
  * Fix typo in lock initialization for TLS sockets Found by Sergio NNX.
  * Add check for crash when home server down Fixes #2233.
  * Add username key for postauth table.
  * Better libpcap checks, when the header files or libraries are missing. Fixes #2245.
  * Allow building with old versions of OpenSSL Fixes #2247.
  * Allow non-FreeRADIUS State attributes to be used with the
  "session-state" list. i.e. State length != 16.
  * Be more aggressive about cleaning up zombie children when running in debug mode.
  * Use LTDL_DEEPBIND, which fixes issues with Oracle libraries
  exporting LDAP API functions.
  * unlock files when asked to unlock them.
  * return error instead of asserting in map code.
  * Don't write 0 bytes to SSL. Fixes #2270.
  * Remove "expiry_time IS NULL" from allocate_update query. Fixes #2262.
  * Various dictionary cleanups and consistency checks Fixes #2281.
  * rlm_python has stronger thread locking to prevent reported issues.
  Performance may be affected.
  * Don't allow Message-Authenticator to overflow past the end of a large packet.
  * Fix crash in sqlippool when SQL server goes away Fixes #2300.
  * Typos in man pages. Patch from Nikolai Kondrashov Fixes #2303.
  * Fix crash with CoA packets/ Fixes #2304.
  * Fix crash in rlm_exec with CoA. Fixes #2328.
  * Print errors while parsing the log config, and don't quit when
  deprecated log settings are found.
  * Fix DHCP encoder xlat so that it can be used with a list of attributes.
  It previously only encoded the first member of the list,
  and now encodes all members.
  * The "expr" module now skips more whitespace.
  * Remove internal FreeRADIUS-Response-Delay attributes from
  attr_filter Access-Reject.
  * Don't send junk to redis when maximum args reached.
  * Small updates to IPv6 for accounting schema Fixes #2364.
  * Fix OpenDirectory integration in rlm_mschap.
  * Fix slow memory leak with dynamic clients.
  * Don't artificially truncate debug output for long strings.
  * Fix memory leak in EAP-PWD.
  * Fix crash in "hints" file with Fall-Through = yes.
  * Fix crash / timer issues with many CoA packets.
  * Fix attr_filter so that it does not treat vendor attributes of
  number 26 as Vendor-Specific.
  * Fix reconnect correctly in rlm_sql_mysql.
  * Fix rlm_cache to properly use Cache-TTL &lt; 0 Fixes #2485.
  * Fix rare occurance of bad xlat expansion.
  * Check for rare race condition when a proxy reply arrives too late.</changelog>
  <changelog author="adam.majer@suse.de" date="1551268800">- reformat changelog mostly by wrapping lines
- add missing bug numbers for security fixes</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1554897600">- update to 3.0.19 (jira#SLE-5890)
  Feature improvements
  * Update dictionary.cisco
  * Update sqlippool to allow for stored procedures with
    PostgreSQL.  This increases performance substantially.
    Patch from Nathan Ward.  Fixes #2540.
  * Re-added "show client config" command to radmin.
  * Cleaned up mods-available/sql example so that it is
    easier to understand.
  * Added pfSense dictionary. Closes #2581
  * Update dictionary.h3c Closes #2592
  * Update elasticsearch/logstash config for v6.7.0.
  * EAP-PWD security fixes from Mathy Vanhoef. See
    http://freeradius.org/security/
    (CVE-2019-11234, CVE-2019-11235, bsc#1132549, bsc#1132664)
  Bug fixes
  * Update dynamic_client module and server core so that
    the functionality works.  This has been broken since
    at least v2.
  * Fix crash in sqlippool due to escaping changes.
    Patch from Nathan Ward.  Fixes #2532, #2533.
  * Fix systemd notify, watchdog and unit files.
    Fixes #2541, #2499.
  * Fix erroneous length check in EAP-FAST.
  * Update documentation to remove old "ignore_null"
    configuration. Fixes #2578.
  * Fix default POD port. Should be 3799.  Fixes #2591
  * Correctly encode vendor-specific "encrypted" attributes.
    Fixes #2600</changelog>
  <changelog author="Johannes Engel &lt;jcnengel@gmail.com&gt;" date="1577102400">- Add missing BuildRequire on samba-core-devel required for windbind
  support in rlm_mschap.</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1583928000">- Enable memcached driver on SLE15</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1584446400">- update to 3.0.20 (bsc#1146848)
  Feature Improvements
  * Added Force10 dictionary.
  * Update dictionary.hp with new attributes. #2690.
  * Update dictionary.aruba with new attributes. #2696.
  * Fix side-channel leak in EAP-PWD (bsc#1144524, CVE-2019-13456)
  * Relax OpenSSL version checks, now that their API is both public, and stable.
  * Note that tls_min_version/tls_max_version also support "1.3"
    Since there is no standard yet for EAP with TLS 1.3, it will not work.
  * Added tripplite dictionary from #2760.
  * Switch to the async interface for rlm_sql_postgresql so that
    we can enforce query_timeout.
  * Added new LDAP option 'allow_dangling_group_ref'.
  * Updated documentation and functionality for EAP session caching
    See "cache" section of mods-available/eap.
  * Tighten systemd unit file security. Fixes #2637.
  * Disable TLS 1.0 and TLS 1.1 support in the default configuration
    We STRONGLY recommend doing this for all installations.
  * Add expansions for *outgoing* Radsec connections
    "%{proxy_listen:TLS-...}" for TLS-Client-Cert-* and
    TLS-Cert-* attributes. Fixes #2839.
  * Add %{listen:tls} which returns "yes" or "no" for
    TLS or non-TLS connections.
  * Update dictionary.lancom with new attributes. #2847.
  * Added rlm_sql_mongo. See raddb/mods-available/sql.
    Note that this module is experimental.
  * Added more documentation in sites-available/robust-proxy-accounting.
  * sqlippool now re-allocates unexpired leases, to prevent IP pool
    exhaustion when clients perform multiple reauthentication attempts
  * Add support to radmin keep the history in ~/.radmin_history.
  * Add support for ENV and LD_PRELOAD in radiusd.conf.
    See the new ENV sub-section of radiusd.conf.
  * Update dictionary.aptilo. #3002.
  * Update dictionary.airespace. #3039.
  * Add sites-available/coa-relay, which makes CoA easier #3045.
  * Add example stored procedure for IP Pools in MySQL
    See mods-config/sql/ippool/mysql/procedure.sql
  * Update dictionary.dhcp dictionary with the recent hardware types.
  * Add experimental rlm_python3. This should largely work
    the same as rlm_python, which was Python2 only.
  * Add Dockerfiles for Debian10 and CentOS8.
  * Add RPM spec file compatibility for RHEL/CentOS 8.
  * Notes on certificate constraints. See raddb/certs/server.cnf.
  * Add NAIRealm example to raddb/certs/server.cnf, for RFC 7585.
  Bug Fixes
  * Allow listen.ipaddr to reference an IPv6-only host. Fixes #2627
  * ERX-Acct-Request-Reason is "integer". Closes #2635.
  * Fix a slow memory leak in the file management code.
  * Try to fix file permissions if they get modified while
    the server is running
  * Fix slow memory leak with clients.
  * Fix request and connection timeouts in rlm_rest.
  * Fix systemd issues.
  * Fixes from clang analyzer.
  * Fix missing include for the dictionaries:
    alcatel.esam, altiga,alvarion.wimax.v2_2,aptis,asn,
    audiocodes,avaya,bristol, columbia_university,freedhcp,garderos,
    infoblox,motorola.illegal, starent.vsa1, telkom, wimax.wichorus.
  * Fix internal sanity check when running with "-Xx".
  * Allow "inner-tunnel" virtual servers to work better
    with "accept" and "reject" policies.
  * Fix dictionary.huawei data types for
    Huawei-DNS-Server-IPv6-address and Huawei-Framed-IPv6-Address.
  * Framed-Interface-ID in postgresql/queries.conf is string,
    not inet Fixes #2817.
  * Fix rlm_cache to complain on unknown attributes in the "update"
    section of its configuration.
  * Add configure checks for -latomic. This helps on armel,
    mips and mipsel. Fixes #2828.
  * Add support to Oracle 19 and 18. Via #2857.
  * Add support for decoding tags in rlm_rest. Fixes #2848.
  * Use correct passwords when updating CRLs in raddb/certs/.
  * Properly separate "originate-coa" packets when accounting
    packets are read from the detail file reader.
  * Use the correct virtual server for pre/post-proxy.
  * radsqlrelay fixes backported from "master" branch
  * Fix DoS issues due to multithreaded BN_CTX access
    (bsc#1166847, CVE-2019-17185)
- disable python2 for SLE15 and Factory
- freeradius-server-enable-python3.patch: enable Python3 module
- freeradius-python3_patches.patch: backport python3 fixes from upstream
- freeradius-server-opensslversion.patch: updated</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1585051200">- update to 3.0.21 (jsc#SLE-11896)
  Feature Improvements
  * New stored procedure for allocating IPs with PostgreSQL
    Rates of 1500 IPs per second are now possible
    See raddb/mods-config/sql/ippool/postgresql/procedure.sql
  * Add SQL IP pool support for Microsoft SQL Server
    See raddb/mods-config/sql/ippool/mssql/
  * Added RCNTEC dictionary. Closes #3168.
  * Added Pica8 dictionary. Closes #3179.
  * Add TLS-Client-Cert-Valid-Since attribute holding not
    Before date Patch from Boris Lytochkin. Fixes #3157.
  * Generate attributes containing unknown OIDs See raddb/sites-available/tls
  * Update the WiMAX dictionary.
  * Added ability to rlm_python(Python2) show a stacktrace
    from errors. #2979.
  * Add WiFi Alliance Policy OIDs.
    See raddb/certs/xpextensions
  * radmin now shows coa stats, too.
  * Sample schema extensions for summarizing data in SQL
    See mods-config/sql/main/*/process-radacct.sql
  * Update dictionary.aerohive, dictionary.fortinet,
    dictionary.arista and dictionary.erx.
  * Added VAS Experts dictionary.
  * Many updates to RPM and jenkins builds from Matthew Newton.
  * Added %C (time now in seconds) and %c (microsecond component of now)
    back-ported from the "master" branch.
  * Add reload capability to systemd unit file in Debian and RedHat.
  * Increase timestamp precision in postauth to maximum supported by each
    database and simplify (and make more consistent between drivers)
    the timestamps in SQL queries by using expansions.
  * Option to set dictionary path in raduat script.
  Bug Fixes
  * Various fixes found by PVS-Studio.
  * Set permissions of certificates in bootstrap shell script Fixes #3132.
  * Increase the 'nasportid' SQL field for 'varchar(32)'. #3141.
  * Skip processing proxy reply if there are no home servers available.
  * Update SQLite IPPool queries. Fixes #3177
  * rlm_sql_unixodbc fixes. Fixes #2822.
  * Fixes when building with LibreSSL.
  * Fix the rlm_python3 build. Note that this module is experimental. #3183.
  * The rlm_python should append the 'python_path' paths in 'sys.path'.
    It fixes the expected behavior to use the existing Python modules
    Fixes #3180.
  * Fix rlm_python to print the script errors properly.
  * Bound total query time for PostgreSQL. Fixes #3253.
  * Many fixes to Oracle sqlippool. It now does 500 IPs per second
    without any tuning. Fixes #3270.
  * Reference sqlippool by it's correct name. Fixes #3272.
  * Revert 3.0.20 patch which caused crashes on duplicate clients.
  * Update WiMAX-MSK attribute. Fixes #3280.
  * Fix crash when trying to access non-existant regex capture group.
  * Use timestamps (request or server) rather than SQL NOW()
    in accounting queries so that these are stable when replayed
    from a file buffer.
- freeradius-python3_patches.patch: upstreamed</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1598443200">- freeradius-server-radiusd-logrotate.patch: fix permissions in
  logrotate global section (bsc#1170505, bsc#1174905)</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1609761600">- freeradius-server-radiusd-logrotate.patch: move logrotate
  options into specific parts for each log as "global" options
  will persist past and clobber global options in the
  main logrotate config (bsc#1180525)</changelog>
</package>
<package pkgid="6e5652f0602101f4aba8691ed5268bb4a34a5c9788eb4cee8f69712e40f687c8" name="freetype2-debugsource" arch="i586">
  <version epoch="0" ver="2.10.1" rel="lp152.2.2.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="ea1ab2cbb2c5fd03bef5bb0a5c3832ac46ef65bd1d47af6401989e6bfe1b101a" name="freetype2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp152.2.2.1"/>
  <changelog author="idonmez@suse.com" date="1448798400">- Update to version 2.6.2
  * IMPORTANT CHANGES
  - The auto-hinter now supports stem darkening, to be controlled by
    the    new   `no-stem-darkening'    and   `darkening-parameters'
    properties.   This is  an  experimental  feature contributed  by
    Nikolaus Waxweiler, and  the interface might change  in a future
    release.
  - By default, stem darkening is now switched off (for both the CFF
    engine and the  auto-hinter).  The main reason is  that you need
    linear  alpha  blending  and  gamma correction  to  get  correct
    rendering results, and  the latter is not yet  available in most
    freely  available  rendering  stacks like  X11.   Applying  stem
    darkening without proper gamma correction  leads to far too dark
    rendering results.
  - The   meaning  of   `FT_RENDER_MODE_LIGHT'  has   been  slightly
    modified.   It  now  essentially  means `no  hinting  along  the
    horizontal  axis'; in  particular,  no change  of glyph  advance
    widths.  Consequently, the auto-hinter  is used for all scalable
    font  formats  except  for  CFF.    It  is  planned  that  other
    font-specific rendering engines (TrueType, Type 1) will follow.
  * MISCELLANEOUS
  - The default  LCD filter  has been changed  to be  normalized and
    color-balanced.
  - For    better    compatibility   with    FontConfig,    function
    `FT_Library_SetLcdFilter'  accepts   a  new   enumeration  value
    `FT_LCD_FILTER_LEGACY1'   (which  has   the   same  meaning   as
    `FT_LCD_FILTER_LEGACY').
  - A large number of bugs have been detected by using the libFuzzer
    framework,  which should  further  improve  handling of  invalid
    fonts.  Thanks again to Kostya Serebryany and Bungeman!
  - `TT_CONFIG_OPTION_MAX_RUNNABLE_OPCODES',  a   new  configuration
    option, controls the maximum number of executed opcodes within a
    bytecode program.  You don't want to change this except for very
    special  situations (e.g.,  making a  library fuzzer  spend less
    time to handle broken fonts).
  - The smooth renderer has been made faster.</changelog>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
</package>
<package pkgid="d2ab8ebc28033267b4b426faa70c89372cfd27876411f65028079190c42d8c6e" name="freetype2-debugsource" arch="i586">
  <version epoch="0" ver="2.10.1" rel="lp152.2.5.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="ebfde5c84df17b6c0da201d25e96741411ab5cdfe0f2a06572b9bcd0c9069c00" name="freetype2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.10.1" rel="lp152.2.5.1"/>
  <changelog author="idonmez@suse.com" date="1459166400">- Update to version 2.6.3
  * IMPORTANT CHANGES
  - Khmer,  Myanmar, Bengali,  and Kannada  script support  has been
    added to the auto-hinter.
  * MISCELLANEOUS
  - Better  support of  Indic  scripts like  Devanagari  by using  a
    top-to-bottom hinting flow.
  - All  FreeType macros  starting  with two  underscores have  been
    renamed to  avoid a violation of  both the C and  C++ standards.
    Example: Header  macros of the  form `__FOO_H__' are  now called
    `FOO_H_'.  In most cases,  this should be completely transparent
    to the user.   The exception to this  is `__FTERRORS_H__', which
    must be  sometimes undefined by  the user to get  FreeType error
    strings:  Both this  form and  the new  `FTERRORS_H_' macro  are
    accepted for backwards compatibility.
  - Minor improvements mainly to the Type 1 driver.
  - The  new CFF  engine now  supports all  Type 2  operators except
    `random'.
  - The macro `_STANDALONE_', used for  compiling the B/W and smooth
    rasterizers  as   stand-alone  modules,  has  been   renamed  to
    `STANDALONE_', since macro names starting with an underscore and
    followed by an uppercase letter are reserved in both C and C++.
  - Function  `FT_Library_SetLcdFilterWeights'  now  also  activates
    custom LCD filter weights (instead of just adjusting them).
  - Support for  `unpatented hinting'  has been  completely removed:
    Consequently,  the two  functions `FT_Face_CheckTrueTypePatents'
    and  `FT_Face_SetUnpatentedHinting'  now  return  always  false,
    doing nothing.</changelog>
  <changelog author="dimstar@opensuse.org" date="1467979200">- Upadte to version 2.6.4:
  * A new subpixel hinting mode, which is now the default rendering
    mode for TrueType fonts. It implements (almost everything of)
    version 40 of the bytecode engine. The existing code base in
    FreeType (the `Infinality code') was stripped to the bare
    minimum and all configurability removed in the name of speed
    and simplicity. The configurability was mainly aimed at legacy
    fonts like Arial, Times New Roman, or Courier. [Legacy fonts
    are fonts that modify vertical stems to achieve clean
    black-and-white bitmaps.] The new mode focuses on applying a
    minimal set of rules to all fonts indiscriminately so that
    modern and web fonts render well while legacy fonts render
    okay. Activation of the subpixel hinting support can be
    controlled with the `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option at compile time: If set to value 1, you
    get the old Infinality mode (which was never the default due to
    its slowness). Value 2 activates the new subpixel hinting mode,
    and value 3 activates both. The default is value 2. At run
    time, you can select the subpixel hinting mode with the
    `interpreter-version' property (provided you have compiled in
    the corresponding hinting mode); see `ftttdrv.h' for more.
  * Support for the following scripts has been added to the
    auto-hinter: Armenian, Cherokee, Ethiopic, Georgian, Gujarati,
    Gurmukhi, Malayalam, Sinhala, Tamil.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1468411200">- Update to version 2.6.5:
  + Compilation works again  on Mac OS X (bug introduced in version
    2.6.4).
  + The new  subpixel hinting  mode is now  disabled by  default; it
    will  be enabled  by default  in the  forthcoming 2.7.x  series.
    Main reason for reverting this feature is the principle of least
    surprise: a  sudden change in  appearance of all fonts  (even if
    the rendering improves  for almost all recent  fonts) should not
    be expected in a new micro version of a series.
- Rebase freetype2-subpixel.patch.</changelog>
  <changelog author="develop7@develop7.info" date="1473422400">- update to version 2.7:
  * IMPORTANT CHANGES
    + As announced earlier, the 2.7.x series now uses the new subpixel
    hinting  mode as  the  default, emulating  a  modern version  of
    ClearType.
    This change inevitably leads to different rendering results, and
    you   might   change   the   `TT_CONFIG_OPTION_SUBPIXEL_HINTING'
    configuration option to  adapt it to your taste (or  use the new
    `FREETYPE_PROPERTIES'    environment    variable).    See    the
    corresponding entry  below for  version 2.6.4, which  gives more
    information.
    + A new option  `FT_CONFIG_OPTION_ENVIRONMENT_PROPERTIES' has been
    introduced.   If  set (which  is  the  default), an  environment
    variable  `FREETYPE_PROPERTIES' can  be used  to control  driver
    properties.  Example:
    FREETYPE_PROPERTIES=truetype:interpreter-version=35 \
    cff:no-stem-darkening=1 \
    autofitter:warping=1
    This allows to select, say, the subpixel hinting mode at runtime
    for a given application.  See file `ftoption.h' for more.
  * IMPORTANT BUG FIXES
    + After  loading a  named instance  of  a GX  variation font,  the
    `face_index'  value  in  the returned  `FT_Face'  structure  now
    correctly holds the named instance  index in the upper 16bits as
    documented.
  * MISCELLANEOUS
    + A new macro `FT_IS_NAMED_INSTANCE' to  test whether a given face
    is a named instance.
    + More fixes to GX font handling.
    + Apple's   `GETVARIATION'  bytecode   operator  (needed   for  GX
    variation font support) has been implemented.
    + Another round  of fuzzer fixes,  mainly to reject  invalid fonts
    faster.
    + Handling of raw CID fonts  was broken (bug introduced in version
    2.6.4).
    + The smooth rasterizer has been streamlined  to make it faster by
    approx. 20%.
    + The `ftgrid'  demo program now  understands command  line option
    `-d' to give start-up design coordinates.
    + The `ftdump' demo program has  a new command line option `-p' to
    dump TrueType bytecode instructions.
- removed freetype2-subpixel.patch in favor of above
  FREETYPE_PROPERTIES environment variable</changelog>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="Cristian Rodr&#xED;guez &lt;crrodriguez@opensuse.org&gt;" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1603195200">- Add CVE-2020-15999.patch to fix a heap buffer overflow has been
  found  in the handling of embedded PNG bitmaps
  CVE-2020-15999 bsc#1177914</changelog>
</package>
<package pkgid="310c12ef97b147f152343f01b5eedfe10e2c8f6c2c673135fde6fc2f4d7d667b" name="fuse-overlayfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp152.2.3.1"/>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="5c1df0ba32c225b612401ffa6866cd95275d39ed87b346d20cd4c76d6047bee7" name="fuse-overlayfs-debugsource" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="lp152.2.3.1"/>
  <changelog author="Flavio Castelli &lt;fcastelli@suse.com&gt;" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="Sascha Grunert &lt;sgrunert@suse.com&gt;" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="Ralf Haferkamp &lt;rhafer@suse.com&gt;" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="Dirk Mueller &lt;dmueller@suse.com&gt;" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="de2e5c3f90afcf2ab8a8b8b9a2c1493600e33b0055fd88a9a19d3b7d28a313ab" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.12.00" rel="lp152.3.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1542283200">- Update to version 18.11.00 (boo#1116172):
  * dmicheck: checks (Extended) Maximum Capacity for type 16
  * snapcraft: add libbsd-dev to build-packages
  * efi_runtime: re-enable the resetsystem runtime interface
  * olog:olog.json: Update OPAL skiboot errors to check on olog scan
  * acpi: button: check fixed hardware &amp; control method power buttons
  * kernelscan: add -k option to specify klog json filename
  * src/lib: add module probing helper functions
  * lib: fwts_efi_module: use the new module loading helper functions
  * lib/fwts_cpu: use new use the new module loading helper functions</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 19.01.00:
  * mtrr: check memory type above 4GB on AMD platforms
  * ACPICA: Update to version 20190108
  * dmi: dmicheck: remove redundant new lines
  * lib: fwts_ac_adapter: fix readdir(ac_power_dir) failing
  * lib: fwts_ac_adapter: fix failing to find AC directory
  * Update copyright year to 2019
  * mtrr: fix incorrect mask on amd_sys_conf
  * sbbr: fadt: clean up major/minor version checking
  * acpi/madt: clean up indentation issue, remove tab
  * lib: fw_pm_method: move the sleep t_start time out of
    logind_on_signal (LP: #1809096)
- Changes for version 18.12.00:
  * ACPICA: Update to version 20181213
  * mtrr: allow uncached type for PCI prefetchable memory
  * lib: disable /dev/mem access on aarch64
  * dmicheck: drop unaligned memcpy
  * lib: drop fwts_memcpy_unaligned
  * dmicheck: use dmi_load_file in preference to fwts_mmap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 19.02.00:
  * klog.json: add an "IOAPIC .. not in IVRS" message
  * utilities: kernelscan: add AMD iommu for IVRS errors
  * acpi/method: check levels on full power and battery power
  * acpi: add address space types according to mantis 1965 (ACPI 6.2b)
  * acpi/pptt: check flags by revision (mantis 1870 for ACPI 6.2b)
  * acpi: pdtt: update flags defintion according to mantis 1867 (ACPI 6.3)
  * acpi/nfit: update memory mapping attributes (mantis 1873 for ACPI 6.3)
  * acpi/hmat: update for hmat revision 2 (mantis 1914 for ACPI 6.3)
  * acpi/madt: remove two reserved bytes (mantis 1934 for ACPI 6.3)
  * acpi/madt: update for Local APIC Flags (mantis 1948 for ACPI 6.3)
  * acpi/hmat: update System Locality Latency (mantis 1959 for ACPI 6.3)
  * acpi/method: add tests for NVDIMM control methods for ACPI 6.3
  * acpiinfo: update ACPI and ACPICA versions
  * acpi/srat: add test for Generic Initiator (mantis 1904 for ACPI 6.3)
  * ACPICA: Update to version 20190215
  * acpi: fix a typo in comment
  * fwts: fix up a handful of spelling mistakes
  * efi_runtime: fix access_ok build issues on 5.0 kernels
  * Makefiles: workaround address-of-packed-member warnings with gcc-9
  * acpica: utdecode: fix missing comma in array declaration AcpiGbl_GenericNotify</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
</package>
<package pkgid="99933907b2489324e7daca4cac304a0e084abeae1fa924dfe6d49fce32c4455a" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.02.00" rel="lp152.3.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 19.02.00:
  * klog.json: add an "IOAPIC .. not in IVRS" message
  * utilities: kernelscan: add AMD iommu for IVRS errors
  * acpi/method: check levels on full power and battery power
  * acpi: add address space types according to mantis 1965 (ACPI 6.2b)
  * acpi/pptt: check flags by revision (mantis 1870 for ACPI 6.2b)
  * acpi: pdtt: update flags defintion according to mantis 1867 (ACPI 6.3)
  * acpi/nfit: update memory mapping attributes (mantis 1873 for ACPI 6.3)
  * acpi/hmat: update for hmat revision 2 (mantis 1914 for ACPI 6.3)
  * acpi/madt: remove two reserved bytes (mantis 1934 for ACPI 6.3)
  * acpi/madt: update for Local APIC Flags (mantis 1948 for ACPI 6.3)
  * acpi/hmat: update System Locality Latency (mantis 1959 for ACPI 6.3)
  * acpi/method: add tests for NVDIMM control methods for ACPI 6.3
  * acpiinfo: update ACPI and ACPICA versions
  * acpi/srat: add test for Generic Initiator (mantis 1904 for ACPI 6.3)
  * ACPICA: Update to version 20190215
  * acpi: fix a typo in comment
  * fwts: fix up a handful of spelling mistakes
  * efi_runtime: fix access_ok build issues on 5.0 kernels
  * Makefiles: workaround address-of-packed-member warnings with gcc-9
  * acpica: utdecode: fix missing comma in array declaration AcpiGbl_GenericNotify</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
</package>
<package pkgid="38b5d7db4302d51d203f5498118d7e849c9c04ea11db27dcca9cb8deac7fee99" name="fwts-debuginfo" arch="x86_64">
  <version epoch="0" ver="21.03.00" rel="lp152.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
</package>
<package pkgid="017774c928352f09dbec8359c79539c160190129394f5a870643ae55f4865683" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="20.12.00" rel="lp152.3.3.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1542283200">- Update to version 18.11.00 (boo#1116172):
  * dmicheck: checks (Extended) Maximum Capacity for type 16
  * snapcraft: add libbsd-dev to build-packages
  * efi_runtime: re-enable the resetsystem runtime interface
  * olog:olog.json: Update OPAL skiboot errors to check on olog scan
  * acpi: button: check fixed hardware &amp; control method power buttons
  * kernelscan: add -k option to specify klog json filename
  * src/lib: add module probing helper functions
  * lib: fwts_efi_module: use the new module loading helper functions
  * lib/fwts_cpu: use new use the new module loading helper functions</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1550145600">- Update to version 19.01.00:
  * mtrr: check memory type above 4GB on AMD platforms
  * ACPICA: Update to version 20190108
  * dmi: dmicheck: remove redundant new lines
  * lib: fwts_ac_adapter: fix readdir(ac_power_dir) failing
  * lib: fwts_ac_adapter: fix failing to find AC directory
  * Update copyright year to 2019
  * mtrr: fix incorrect mask on amd_sys_conf
  * sbbr: fadt: clean up major/minor version checking
  * acpi/madt: clean up indentation issue, remove tab
  * lib: fw_pm_method: move the sleep t_start time out of
    logind_on_signal (LP: #1809096)
- Changes for version 18.12.00:
  * ACPICA: Update to version 20181213
  * mtrr: allow uncached type for PCI prefetchable memory
  * lib: disable /dev/mem access on aarch64
  * dmicheck: drop unaligned memcpy
  * lib: drop fwts_memcpy_unaligned
  * dmicheck: use dmi_load_file in preference to fwts_mmap</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 19.02.00:
  * klog.json: add an "IOAPIC .. not in IVRS" message
  * utilities: kernelscan: add AMD iommu for IVRS errors
  * acpi/method: check levels on full power and battery power
  * acpi: add address space types according to mantis 1965 (ACPI 6.2b)
  * acpi/pptt: check flags by revision (mantis 1870 for ACPI 6.2b)
  * acpi: pdtt: update flags defintion according to mantis 1867 (ACPI 6.3)
  * acpi/nfit: update memory mapping attributes (mantis 1873 for ACPI 6.3)
  * acpi/hmat: update for hmat revision 2 (mantis 1914 for ACPI 6.3)
  * acpi/madt: remove two reserved bytes (mantis 1934 for ACPI 6.3)
  * acpi/madt: update for Local APIC Flags (mantis 1948 for ACPI 6.3)
  * acpi/hmat: update System Locality Latency (mantis 1959 for ACPI 6.3)
  * acpi/method: add tests for NVDIMM control methods for ACPI 6.3
  * acpiinfo: update ACPI and ACPICA versions
  * acpi/srat: add test for Generic Initiator (mantis 1904 for ACPI 6.3)
  * ACPICA: Update to version 20190215
  * acpi: fix a typo in comment
  * fwts: fix up a handful of spelling mistakes
  * efi_runtime: fix access_ok build issues on 5.0 kernels
  * Makefiles: workaround address-of-packed-member warnings with gcc-9
  * acpica: utdecode: fix missing comma in array declaration AcpiGbl_GenericNotify</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
</package>
<package pkgid="8311bb50fb1831aead6961817745e53a3e90174b626c8a7cb9b0f6530e68496a" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="21.02.00" rel="lp152.3.6.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1551787200">- Update to version 19.02.00:
  * klog.json: add an "IOAPIC .. not in IVRS" message
  * utilities: kernelscan: add AMD iommu for IVRS errors
  * acpi/method: check levels on full power and battery power
  * acpi: add address space types according to mantis 1965 (ACPI 6.2b)
  * acpi/pptt: check flags by revision (mantis 1870 for ACPI 6.2b)
  * acpi: pdtt: update flags defintion according to mantis 1867 (ACPI 6.3)
  * acpi/nfit: update memory mapping attributes (mantis 1873 for ACPI 6.3)
  * acpi/hmat: update for hmat revision 2 (mantis 1914 for ACPI 6.3)
  * acpi/madt: remove two reserved bytes (mantis 1934 for ACPI 6.3)
  * acpi/madt: update for Local APIC Flags (mantis 1948 for ACPI 6.3)
  * acpi/hmat: update System Locality Latency (mantis 1959 for ACPI 6.3)
  * acpi/method: add tests for NVDIMM control methods for ACPI 6.3
  * acpiinfo: update ACPI and ACPICA versions
  * acpi/srat: add test for Generic Initiator (mantis 1904 for ACPI 6.3)
  * ACPICA: Update to version 20190215
  * acpi: fix a typo in comment
  * fwts: fix up a handful of spelling mistakes
  * efi_runtime: fix access_ok build issues on 5.0 kernels
  * Makefiles: workaround address-of-packed-member warnings with gcc-9
  * acpica: utdecode: fix missing comma in array declaration AcpiGbl_GenericNotify</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
</package>
<package pkgid="a2462ee3ab5c2bf716d544e3ce0bcf3103f0826896769d977ad2fc12ab71798c" name="fwts-debugsource" arch="x86_64">
  <version epoch="0" ver="21.03.00" rel="lp152.3.9.1"/>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1559131200">- Update to version 19.05.00:
  * ACPICA: Update to version 20190509
  * Add support for Hygon Dhyana CPU
  * dmicheck: update supported SMBIOS version
  * acpi/method: check full and battery power if acpi_video0 exists
  * dmicheck: checks type length vs. SMBIOS versions
  * dmicheck: add Type 1's Field 25 &amp; 26 as used by kernel
  * apic: apicedge: fix typo in error messages
  * cpufreq: change from abort to skip when cpufreq cannot run
  * kernel:version: change ACPI version to ACPICA version
  * pci:crs: fix an indentation error
  * acpi: s3: check sleep type for output messages
  * snapcraft: update to core18
  * acpica: re-work fwts / iasl interface to work with latest ACPICA
  * fwts-test: refresh syntaxcheck test output
  * fwts-test/syntaxcheck: refresh syntaxcheck test output
  * fwts_acpica: don't add in RSDP or null table entries to XSDT or RSDT (LP: #1829167)
- Changes for version 19.03.00:
  * acpi: madt: Add support for ACPI 6.3
  * lib: fwts_acpi_tables: add a new function to check reserved values
  * lib: fwts_acpi_tables: rename fwts_acpi_subtable_length_check
  * srat: replace structure length checks by fwts_acpi_structure_length_check
  * acpi: refactor all table length checks to fwts_acpi_table_length_check
  * README: update installing fwts by "sudo make install"
  * acpi/fadt: reject 5.0 tables with ARM specific attributes set
  * acpi/iort: permit SMMU model values of 4 and 5
  * acpi/iort: fix error in SMMU node length check
  * ACPICA: fix IASL building issues with gcc-9 and --as-needed linker option</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1563883200">- Update to version 19.06.00:
  * acpi/fadt: update latest FADT revision to 6.3
  * uefitime: add checking the EFI_UNSUPPORTED return code
  * uefirtvariable: add checking the EFI_UNSUPPORTED return code
  * uefirtmisc: add checking the EFI_UNSUPPORTED return code</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1565697600">-  Update to version 19.07.00:
  * cpu/msr: add 3 more CPU IDs for IA32_silvermont_MSRs
  * cpu/msr: check SGX &amp; LMCE in IA32_FEATURE_CONTROL (3ah)
  * cpu/msr: move TSC_ADJUST (3bh) to IA32_MSRs
  * cpu/msr: add SMM_MONITOR_CTL (9bh) to IA32_MSRs
  * cpu/msr: add MC*_CTL2 MSR registers
  * cpu/msr: add VMX_VMFUNC MSR register
  * cpu/msr: add MISC_ENABLE MSR to IA32_atom_MSRs
  * cpu/msr: add MSR_PMG_IO_CAPTURE_BASE to IA32_silvermont_MSRs
  * cpu/msr: add MSR_FEATURE_CONFIG to IA32_silvermont_MSRs
  * cpu/msr: add MSR_TEMPERATURE_TARGET to IA32_silvermont_MSRs
  * cpu/msr: add MSR_BBL_CR_CTL3 to IA32_silvermont_MSRs
  * ACPICA: Update to version 20190703</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1570104000">- Update to version 19.09.00:
  * acpi/boot: skip ACPI BOOT test on UEFI systems.
  * acpi: s3: fix typo from 6b94bb6a4b13e
  * opal: add more bounds checking and zero pstates array
  * fwtstest: boot-0001: sync with boot table check on efi firmware
- Changes for version 19.08.00:
  * ACPICA: Update to version 20190816
  * auto-packager: mkpackage.sh: remove cosmic
  * efi_runtime: enable KBUILD_MODPOST_WARN=y to workaround build failures
  * ACPICA: Update to version 20190816
  * fwtstest: syntaxcheck-0001: update to keep in sync with ACPICA features
  * README: Add package dependency notes for ARM64</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 19.12.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1580731200">- Update to version 20.01.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1585828800">- Update to version 20.03.00:
  * Plenty of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589371200">- Update to version 20.03.01:
  * Small fixes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1590494400">- Update to version 20.05.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1595332800">- Update to version 20.06.01:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1597233600">- Update to version 20.07.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1600776000">- Update to version 20.09.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606478400">- Update to version 20.11.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="ro@suse.de" date="1606737600">- add patch fwts-fix-non-acpi.patch
  fix build on non-acpi platforms like ppc64le and s390x</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1606824000">- Fix broken source url and prepare done in previous changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1608292800">- Update to version 20.12.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610971200">- Add patch fixing bsc#1178442 bsc#1177992
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1611316800">- Update to version 21.01.00:
  * See provided changelog for detailed list of changes
- Drop upstreamed patch:
  * acpi-pmtt-fix-infinite-loops-when-length-is-incorrectly-zero.diff</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1614254400">- Update to version 21.02.00:
  * See provided changelog for detailed list of changes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1618488000">- Update to version 21.03.00:
  * See provided changelog for detailed list of changes</changelog>
</package>
<package pkgid="7541cfa6597369ebb264783f20787eacfe0af207495b71c120e9a7142f905d74" name="fwupd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="b37fde8b642346e81c9a42c06f38c8ee5a5c1f834b2f53577462649a1dfe0d2b" name="fwupd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
</package>
<package pkgid="6d960eaa98b54346fb5b66b2b1ff172dc9eedb4645439ecf91d5140e863e2b7f" name="fwupd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Update to version 1.2.14: (jsc#SLE-16809, bsc#1182057)
  * Release fwupd 1.2.14
  * Fix using a very new libxmlb with a very old fwupd daemon
  * uefi-capsule: Specify the section flags for .sbat
  * uefi-capsule: Ensure SBAT metadata is added correctly
  * uefi-capsule: Set the component generation to 1
  * uefi-capsule: Include all the sections when using objcopy
  * Allow building without SBAT metadata
  * uefi-capsule: Fix objcopy failing to add a .sbat section on
    aarch64
  * uefi-capsule: Add SBAT metadata to the fwupd EFI binary
  * uefi: add configuration option for objcopy utility.
  * uefi: Make generate_binary.sh more robust
  * efi: use a wildcard section copy for final EFI generation
  * Fix the DeviceID set by GetDetails
  * synaptics-prometheus: Force the minor version from 0x02 to 0x01
    to make sure the devices can be updated back to 0x01.
  * Validate that gpgme_op_verify_result() returned at least one
    signature (boo#1172643 CVE-2020-10759)
  * trivial: uefi: fix dell TPM updates
  * prevent updates to occur via synaptics-mst plugin
  * upower: Decrease minimum battery requirement to 10%
  * src: fu-engine: check version was updated by checking version
  * Correctly import PKCS-7 remote metadata
  * Disable the battery percentage checks if UPower is unavailable
  * efi: use a wildcard section copy for final EFI generation
  * fu-engine: Read all releases and convert versions when
    comparing
  * Do not do semver conversion in fu_common_vercmp()
  * unifying: use the correct timeout for IO channel writes
  * Only check the vendor ID if the device has one set
  * wacom-raw: Correct HWID support
  * modem-manager: increase re-enumeration delay to 20000ms
  * modem-manager: add counterpart GUID for the DW5821e/eSIM
  * usb: make loading vendor/product/serial strings non-fatal
  * Strip trailing whitespace from USB descriptors
  * udev-device: fix offset of vendor id of hidraw devices
  * thunderbolt-power: avoid checking for bolt support
  * modem-manager: Fix a tiny memory leak when starting the daemon
  * Fix usage of incorrect type for return value
  * fu-common: Use environment variables for systemd managed
    directories
  * Use more systemd directives for directories
- Specify the SBAT metadata (bsc#1182057)
- Drop upstreamed patch: CVE-2020-10759.patch</changelog>
</package>
<package pkgid="3c1e61d3def086ab3b6c1fe1ba3e2043b637d4f639b77759ca73994caf51a1ff" name="fwupd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Update to version 0.9.7:
  + 10 months worth of bugfixing, integrating more vendor specific
    Firmware update paths.</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
</package>
<package pkgid="6a1baf3ef20f6e4563b7c3e2dd091d2c33a2f4936edd5d1253a82f0a29ca5571" name="fwupd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp152.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 0.9.8:
  * Add a command 'clear-offline' to fwupdmgr
  * Do not fail to load the daemon if cached metadata is invalid
  * Fix a crash when using fu_plugin_device_add_delay()
  * Fix the libdfu self test failure on s390 and ppc64
  * Format the BCD USB revision numbers correctly
  * Never fallback to an offline update from client code
  * Prevent fwupd from mounting filesystems
  * dfu: Allow flashing when the target does not specify an
    alt-name
  * dfu: Do not try to verify the element write if upload is
    unsupported
  * dfu: Fix uploading large firmware files
  * dfu: Include the reset timeout as wValue to fix some hardware
  * dfu: Set the vendor ID to the runtime USB VID
  * dfu: Use 0x0101 as an alias for 0x0110
  * thunderbolt: move test for mock environment
    (gh#hughsie/fwupd#280)
  * udev: Do not match USB devices, even with a GUID set
  * uefi: Do not set the release version
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support</changelog>
  <changelog author="dimstar@opensuse.org" date="1509105601">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
</package>
<package pkgid="d0fcff3ed904df3de73b8a0e7e298fcf660011c515e3fcba44c82018fd9a73ed" name="fwupd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.14" rel="lp152.3.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1509105600">- Update to version 1.0.0:
  * Add the plugin documentation to the main gtk-doc
  * Add a waiting-for-auth daemon state
  * Add fwupd_remote_get_checksum() to use in client programs
  * Generate the LD script from the GObject Introspection data
  * Prevent fwupd from mounting filesystems
  * uefi: Do not use system-specific infomation for PCI devices
  * uefi: Support uploading the firmware splash image
  * dell: only set coldplug delay when we know we need it
  * dell: only run SMI to toggle host MST GPIO on systems with host MST
  * dell: add functionality to blacklist HW with problems
  * dell: only run on intended chassis
  * thunderbolt-power: always run after thunderbolt plugin
  * Allow plugins to depend on each other
  * Add support for SMBIOSv3
  * dell: prefer to use hwids to get DMI keys and DE table
  * debian: remove /etc/fwupd.conf on upgrade
  * unifying: Use fu_plugin_check_supported()
  * Add fu_plugin_check_supported()
  * unifying: Use a device whitelist to avoid breaking devices
  * Fix various printing issues with the progressbar
  * dell: Fix a trivial whitespace issue
  * Do not fail to load the daemon if cached metadata is invalid
  * Do not store the newest release as part of the FuDevice object
  * Add a method to return a list of upgrades for a specific device
  * Move the downgrade calculation to the daemon
  * Make FuDevice derive from FwupdDevice rather than FwupdResult
  * Add a command 'clear-offline' to fwupdmgr
  * Merge releases where multiple remotes provide the same firmware
  * Remove the UniqueID property
  * uefi: Do not set the release version
  * udev: Do not match USB devices, even with a GUID set
  * Use the intel-wmi-thunderbolt kernel module to force power
  * dell: drop thunderbolt force power code
  * unifying: Add hardcoded summaries for peripheral kinds
  * Create CODE_OF_CONDUCT.md
  * Ensure more devices set the device summary
  * Add an 'Summary' property to each device
  * Add a human-readable title for each remote
  * unifying: Disable if the kernel has no CONFIG_HIDRAW support
  * Move deprecated symbols to a new header
  * Introduce an s390x cross compile target to CI
  * Add ModifyRemote as an easy way to enable and disable remotes like the LVFS
  * Do not auto-open all USB devices at startup
  * dfu: Use FuDeviceLocker
  * unifying: Use FuDeviceLocker
  * colorhug: Use FuDeviceLocker
  * ebitdo: Use FuDeviceLocker
  * altos: Use FuDeviceLocker
  * steelseries: Use FuDeviceLocker
  * usb: Use FuDeviceLocker
  * Add FuDeviceLocker to simplify device open/close lifecycles
  * dfu: Remove DEVO support
  * dfu: Remove the now-unused symtab support
  * Remove the ELF support from libdfu and move the code to the altos plugin
  * Use -Werror when building in Travis CI
  * Do not install the libdfu helper library
  * Parse the SMBIOS DMI table directly
  * usb: Disable the fallback USB plugin
  * Test for missing language translations at build time
  * Fix the libdfu self test failure on s390 and ppc64</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513252800">- Fix dependencies and build options for non-x86 architectures. At
  least FW updates for USB are arch independent, and EFI FW updates
  can also be applied on Aarch64.</changelog>
  <changelog author="fcrozat@suse.com" date="1513684800">- Update to version 1.0.2:
  + Add a plugin for the Nitrokey Storage device
  + Add support for the original AVR DFU protocol
  + Allow different plugins to claim the same device
  + Allow quirks to set common USB properties
  + Move a common plugin functionality out to a new shared object
  + Optionally delay the device removal for better replugging
  + Set environment variables to allow easy per-plugin debugging
  + Use a SHA1 hash for the internal DeviceID
  + Add quirk for AT32UC3B1256 as used in the RubberDucky
  + Disable the dell plugin if libsmbios fails
  + Don't register for USB UDev events to later ignore them
  + Fix a possible buffer overflow when debugging ebitdo devices
  + Fix critical warning when more than one remote fails to load
  + Fix DFU attaching AVR32 devices like the XMEGA
  + Ignore useless Thunderbolt device types
  + Refactor ColorHug into a much more modern plugin
  + Release the Steelseries interface if getting the version failed
  + Remove autoconf-isms from the meson configure options
  + Show a nicer error message if the requirement fails
  + Sort the output of GetUpgrades correctly
- Changes from version 1.0.1:
  + Add support for HWID requirements
  + Add support for programming various AVR32 and XMEGA parts using DFU
  + Add the various DFU quirks for the Jabra Speak devices
  + Allow specifying the output file type for 'dfu-tool read'
  + Move the database of supported devices out into runtime loaded files
  + Support the IHEX record type 0x05
  + Use help2man to generate the man page at build time
  + Use the new quirk infrastructure for version numbers
  + Catch invalid Dell dock component requests
  + Correctly output Intel HEX files with &gt; 16bit offset addresses
  + Do not try to verify the element write if upload is unsupported
  + Fix a double-unref when updating any 8Bitdo device
  + Fix crash when enumerating with Dell dock connected but with no UEFI
  + Fix uploading large firmware files over DFU
  + Format the BCD USB revision numbers correctly
  + Guess the DFU transfer size if it is not specified
  + Include the reset timeout as wValue to fix some DFU bootloaders
  + Make the error message clearer when sans fonts are missing
  + Support devices with truncated DFU interface data
  + Use the correct remote-specified username and passord when using fwupdmgr
  + Use the correct wDetachTimeOut when writing DFU firmware
  + Verify devices with legacy VIDs are actually 8Bitdo controllers
- Add help2man as BuildRequires.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513857600">- Unbreak compilation on non-x86, upstream renamed options to disable
  plugins.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 1.0.3:
  + New Features:
  - Add a new plugin to add support for CSR "Driverless DFU".
  - Add initial SF30/SN30 Pro support.
  - Support AppStream metadata with relative &lt;location&gt; URLs.
  + Bugfixes:
  - Add more metadata to the user-agent string.
  - Block owned Dell TPM updates.
  - Choose the correct component from provides matches using
    requirements.
  - Do not try to parse huge compressed archive files.
  - Fix a double-free bug in the Udev code.
  - Handle Thunderbolt "native" mode.
  - Use the new functionality in libgcab &gt;= 1.0 to avoid writing
    temp files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Update to version 1.0.4:
  + New Features:
  - Add D-Bus methods to get and modify the history information.
  - Allow the user to share firmware update success or failure.
  - Ask the user to refresh metadata when it is very old.
  - Store firmware update success and failure to a local
    database.
  + Bugfixes:
  - Add a device name for locked UEFI devices.
  - Allow each plugin to opt-in to the recoldplug action.
  - Fix firmware downloading using gnome-software.
  - Fix UX capsule reference to the one specified in efivar.
  - Never add two devices to the daemon with the same ID.
  - Rescan supported flags when refreshing metadata.
- Add pkgconfig(json-glib-1.0) BuildRequires: new dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 1.0.5:
  + New Features:
  - Offer to reboot when processing an offline update.
  - Report the efivar, libsmbios and fwupdate library versions.
  - Report Thunderbolt safe mode and SecureBoot status.
  - Show the user a URL when they report a known problem.
  - Support split cabinet archives as produced by Windows Update.
  + Bugfixes:
  - Be more careful deleting and modifying device history.
  - Clarify which devices don't have upgrades.
  - Ensure the Thunderbolt version is xx.yy.
  - Fix a daemon warning when using fwupdmgr get-results.
  - Fix crasher with MST flashing.
  - Fix DFU detach with newer releases of libusb.
  - Include the device VID and PID when generating the device-id.
  - Set the RemoteId when using GetDetails.
  - Stop matching 8bitdo DS4 controller VID/PID.
  - Use help2man for dfu-tool and drop docbook dependencies.
  - Use ngettext for any strings with plurals.
  - Use the default value if ArchiveSizeMax is unspecified.</changelog>
  <changelog author="fcrozat@suse.com" date="1521115200">- Ensure library package has a dependency on main package,
  otherwise it won't be usable.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1521806400">- Update to version 1.0.6:
  + New Features:
  - Add bash completion for fwupdmgr.
  - Add support for newest Thunderbolt chips.
  - Allow all functions that take device arguments to be
    prompted.
  - Allow devices to use the runtime version when in bootloader
    mode.
  - Allow overriding ESP mount point via conf file.
  - Delete any old fwupdate capsules and efivars when launching
    fwupd.
  - Generate Vala bindings.
  + Bugfixes:
  - Allow ctrl-d out of the prompt for devices.
  - Allow to create package out of provided binary.
  - Correct handling of unknown Thunderbolt devices.
  - Correctly detect new remotes that are manually copied.
  - Fix a crash related to when passing device to downgrade in
    CLI.
  - Fix running the self tests when no fwupd is installed.
  - Fix Unifying signature writing and parsing for Texas
    bootloader.
  - Only send success and failure reports to the server.
  - Use a CNAME to redirect to the correct CDN for metadata.
  - Use a longer timeout when powering back the Thunderbolt
    device.
- Add pkgconfig(bash-completion) BuildRequires: new dependency.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update url
- Small packaging cleanup with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1522843200">- Update hasbang in installed files from /usr/bin/env python3 to
  /usr/bin/python3.</changelog>
  <changelog author="oliver@getspam.de" date="1531310400">- Update to version 1.0.8:
  + New Features (including version 1.0.7):
  - Add an plugin to update some future Wacom tablets
  - Add 'fwupdmgr get-topology' to show logical device tree
  - Add support for creating a flatpak
  - Add support for creating a snap
  - Add support for Motorola S-record files
  - Add the Linux Foundation public GPG keys for firmware and metadata
  - Show a translated warning when the server is limiting downloads
  - Add enable-remote and disable-remote commands to fwupdmgr
  - Add fu_plugin_add_compile_version() for libraries to use
  - Allow requiring specific versions of libraries for firmware updates
  - If no remotes are enabled try to enable the LVFS
  - Show a warning with interactive prompt when enabling a remote
  + Bugfixes (including version 1.0.7):
  - Add a firmware diagnostic tool called fwupdtool
  - Adjust all licensing to LGPL 2.1+
  - Allow installing more than one firmware using 'fwupdmgr install'
  - Allow specifying hwids with OR relationships
  - Do not call fu_plugin_init() on blacklisted plugins
  - Do not require libcolorhug to build
  - Fix a crash in libfwupd where no device ID is set
  - Fix a potential DoS in libdfu by limiting holes to 1MiB
  - Fix a segfault that sometimes occurs during cleanup of USB plugins
  - Fix Hardware-ID{0,1,2,12} compatibility with Microsoft
  - Hide devices that aren't updatable by default in fwupdmgr
  - Search all UEFI GUIDs when matching hardware
  - Stop matching Nintendo Switch Pro in the 8bitdo plugin
  - Check that EFI system partition is mounted before update
  - Disable synapticsmst remote control on failure
  - Don't recoldplug thunderbolt to fix a flashing failure
  - Fix SQL error when running 'fwupdmgr clear-offline'
  - Improve the update report message
  - Only enumerate Dell Docks if the type is known
  - Only run certtool if a new enough gnutls is present
  - Prevent a client crash if the daemon somehow sends invalid data
  - Reboot after scheduling using logind not systemd
  - Use the right encoding for the label in make-images
- Added/backported enable_pkcs7_when_testing_only.patch:
  + needed to disable pkcs7 test during build (can be removed for
    fwupd &gt;= 1.0.9)</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Run %udev_rules_update in post as package install udev rules</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Use noun phrase for summary. Trim request for comments from
  description.</changelog>
  <changelog author="fezhang@suse.com" date="1537531200">- Update to version 1.0.9 (FATE#326702):
  + New Features:
  - Add support for more Wacom tablets.
  - Add support for the Synaptics Panamera chip.
  - Add validation for Titan Ridge Thunderbolt devices.
  - Use boltd force power API if available.
  + Bugfixes:
  - Allow flashing Unifying devices in recovery mode.
  - Allow updating just one specific device from the commandline.
  - Do not hold hidraw devices open forever.
  - Do not use 8bitdo bootloader commands after a successful
    flash.
  - Don't crash when the Dell alternate device has not been set.
  - Don't potentially expose user passwords for remotes.
  - Fix a potential buffer overflow when applying a DFU patch.
  - Fix a potential segfault in smbios data processing.
  - Fix downgrading older releases to devices.
  - Fix failure to detach Unifying devices when using a slow host
    controller.
  - Fix flashing devices that require a manual replug.
  - Handle -EAGAIN from the kernel better when reading NVM.
- Drop enable_pkcs7_when_testing_only.patch: fixed upstream.</changelog>
  <changelog author="glin@suse.com" date="1573732800">- Update to version 1.2.11 (jsc#SLE-10751):
  * synapticsmst: Use a more suitable icon for the device
  * thunderbolt: Fix logic to work properly with ICL thunderbolt
    controller
  * Do not ask the user to upload a report if ReportURI is not set
  * Do not crash when starting tpm2-abrmd
  * fu-history: Update device_modified in sql database during
    updates
  * synaptics-prometheus: Fix tiny memory leak when using
    FuSynapromConfig
  * Remove replug flag after the device comes back from reboot
  * uefi: add support for tpm2-tools 4.X
  * fu-engine/fu-config: Reload metadata store when configuration
    changes
  * unifying: update Solaar url
  * synapticsmst: Add a SynapticsMSTBoardID for another Lenovo dock
  * synapticsmst: Add a SynapticsMSTBoardID for a Lenovo dock
  * synapticsmst: Display the board ID in non-hex form in the error
    message
  * Be more accepting when trying to recover a failed database
    migration
  * modem-manager: add counterpart GUID for the DW5821e
  * fu-tool: Port ability to update a single device from fwupdmgr
  * uefi: Actually write the new device path if different than
    before
  * Fix a crash when stopping the fwupd service
  * Relax the certificate time checks in the self tests for the
    legacy certificate
  * Never show AppStream markup on the console
  * Do not segfault when trying to quit the downgrade selection
  * Allow specifying &lt;firmware&gt;GUID&lt;/firmware&gt; to check any version
    exists
- Add fwupd-bsc1130056-change-shim-path.patch to set the default
  shim binary for openSUSE/SLE (bsc#1130056)
- Add fwupd-bsc1143905-hash-the-source-files.patch to hash the
  source files instead of libfwupdprivate.a to avoid the checksum
  change due to the random naming LTO profile sections
  (bsc#1143905)
- Mark fwupdate as obsolete
  + fwupdate has been merged into fwupd since fwupd 1.1.0.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Ensure /var/cache/fwupd is created and owned by package,
  required when StateDirectory is not set for systemd service.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591704000">- Add CVE-2020-10759.patch: check for a valid gpg signature
  (boo#1172643 CVE-2020-10759).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1599480000">- Add fwupd-jscSLE-11766-close-efidir-leap-gap.patch: Set SLE and
  openSUSE esp os dir at runtime (jsc#SLE-11766)
- Drop build option -Defi_os_dir="%{efidir}": with the above patch
  fwupd can detect esp os dir dynamically
- Update the efidir related %post and %postun scripts in spec file</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Update to version 1.2.14: (jsc#SLE-16809, bsc#1182057)
  * Release fwupd 1.2.14
  * Fix using a very new libxmlb with a very old fwupd daemon
  * uefi-capsule: Specify the section flags for .sbat
  * uefi-capsule: Ensure SBAT metadata is added correctly
  * uefi-capsule: Set the component generation to 1
  * uefi-capsule: Include all the sections when using objcopy
  * Allow building without SBAT metadata
  * uefi-capsule: Fix objcopy failing to add a .sbat section on
    aarch64
  * uefi-capsule: Add SBAT metadata to the fwupd EFI binary
  * uefi: add configuration option for objcopy utility.
  * uefi: Make generate_binary.sh more robust
  * efi: use a wildcard section copy for final EFI generation
  * Fix the DeviceID set by GetDetails
  * synaptics-prometheus: Force the minor version from 0x02 to 0x01
    to make sure the devices can be updated back to 0x01.
  * Validate that gpgme_op_verify_result() returned at least one
    signature (boo#1172643 CVE-2020-10759)
  * trivial: uefi: fix dell TPM updates
  * prevent updates to occur via synaptics-mst plugin
  * upower: Decrease minimum battery requirement to 10%
  * src: fu-engine: check version was updated by checking version
  * Correctly import PKCS-7 remote metadata
  * Disable the battery percentage checks if UPower is unavailable
  * efi: use a wildcard section copy for final EFI generation
  * fu-engine: Read all releases and convert versions when
    comparing
  * Do not do semver conversion in fu_common_vercmp()
  * unifying: use the correct timeout for IO channel writes
  * Only check the vendor ID if the device has one set
  * wacom-raw: Correct HWID support
  * modem-manager: increase re-enumeration delay to 20000ms
  * modem-manager: add counterpart GUID for the DW5821e/eSIM
  * usb: make loading vendor/product/serial strings non-fatal
  * Strip trailing whitespace from USB descriptors
  * udev-device: fix offset of vendor id of hidraw devices
  * thunderbolt-power: avoid checking for bolt support
  * modem-manager: Fix a tiny memory leak when starting the daemon
  * Fix usage of incorrect type for return value
  * fu-common: Use environment variables for systemd managed
    directories
  * Use more systemd directives for directories
- Specify the SBAT metadata (bsc#1182057)
- Drop upstreamed patch: CVE-2020-10759.patch</changelog>
</package>
<package pkgid="92eefad541d39346d3e9367473fefdd141b311b1c873e4101e980974a7ea3509" name="fwupdate-debuginfo" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="b532fef69659d02a54b4db27cff5b52768cf5c4f0f86b66601ed090262fef5e6" name="fwupdate-debuginfo" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.6.1"/>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
</package>
<package pkgid="9171745b0530405afeedb880b5cadf8516fb7d83c09b32ff08c84abec05d58c5" name="fwupdate-debugsource" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="b6f7e54121e76af1811ed97d052db1f9601fd8df7de39201988d2fe2b953e7b8" name="fwupdate-debugsource" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.6.1"/>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
</package>
<package pkgid="4bd02834c3c666d81fae4658959980a6ef3134400c63afab2a1b484736d4ac5e" name="fwupdate-efi-debuginfo" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.3.1"/>
  <changelog author="glin@suse.com" date="1467892800">- Correct the EFI dir for SLE-12-SP2 (FATE#319345)
- Install fwup*.efi to the EFI system partition (FATE#319345)
- Add fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch to
  fix the file mode (bsc#988000)</changelog>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
</package>
<package pkgid="497fc5abde6f2d5a775a095d4bb8b283b3e2e7cb04210dc215025b9e6b637f08" name="fwupdate-efi-debuginfo" arch="x86_64">
  <version epoch="0" ver="12" rel="lp152.6.6.1"/>
  <changelog author="glin@suse.com" date="1468584000">- Add fwupdate-fix-efivar-0.24-api.patch to fix the compilation
  errors due to the change of efivar APIs
- Bump BuildRequires of efivar-devel to 0.24
- Add fwupdate-unset-immutable-flag.patch to unset the immutable
  flag before clean the EFI variables (bsc#964726)
- Amend fwupdate-suse-build.patch (FATE#319345)
  + omit the build-id and package fwudpate-efi-debuginfo in a less
    hacky way.
  + Use the RPM_OPT_FLAGS for the user space programs
- Add fwupdate-bsc988886-add-leading-space.patch to add the leading
  space to the load option (bsc#988886)</changelog>
  <changelog author="glin@suse.com" date="1469102400">- Amend the spec file to detect SLE/openSUSE (bsc#990228)</changelog>
  <changelog author="glin@suse.com" date="1469707200">- Relax the requirement of efivar-devel and disable the efivar API
  patch for openSUSE Leap 42.x and SLE</changelog>
  <changelog author="rw@suse.com" date="1489060800">- Enable efivar API patch based on pkg-config data and require
  at least gnu-efi-3.0.2.  (ramification of FATE#322108)</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Remove the debug source and info of the EFI files when disabling
  the debug build (bsc#1031554)
  + Also remove the efi-debuginfo subpackage since the debug file
    is packaged correctly now.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Update to 9+git21.gcd8f7d7 (FATE#322805)
- Add the new BuildRequires: libsmbios-devel
- Update the so version of libfwup
- Refresh fwupdate-suse-build.patch
- Remove the upstream patches
  + fwupdate-fix-efivar-0.24-api.patch
  + fwupdate-bsc988000-set-a-mode-with-efi_set_variable.patch
  + fwupdate-unset-immutable-flag.patch
- Drop fwupdate-bsc988886-add-leading-space.patch (Need shim &gt;= 11)
- Add fwupdate-list-firmware-types.patch to list the supported
  firmware types</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Add back fwupdate-bsc988886-add-leading-space.patch due to the
  long pending shim signature request. Also drop the shim version
  requirement.</changelog>
  <changelog author="mls@suse.de" date="1513252800">- disable _unique_debug_names fow now
  fwupdate wants to install it's own debug files, but doesn't know
  about this option yet</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513339200">- EFI updates through fwupdate are also possible on Aarch64.
  smbios support is only relevant for some Dell machines, i.e.
  x86 only.</changelog>
  <changelog author="mls@suse.de" date="1513598400">- bring back accidental removed needssslcertforbuild</changelog>
  <changelog author="glin@suse.com" date="1518177600">- Remove fwupdate-bsc988886-add-leading-space.patch and bump the
  shim version requirement since we got the new signature for shim
  (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1523275200">- Require shim only for x86_64 (bsc#1088434)</changelog>
  <changelog author="oliver@getspam.de" date="1529496000">- Update to version 11
  + lots of fixes from cov-scan and clang analyzer
  + support for Lenovo machines
  + experimental support for UI Capsules
  + Dell WMI support
  + lots of bugfixes
  + configurable EFI ESP location by setting ESPMOUNTPOINT or the git
    config property fwupdate.espmountdir during the build.
  + Lots of coverity work
  + ABI compatibility checking during the release process
  + Make subdirectory builds work
- removed fwupdate-list-firmware-types.patch</changelog>
  <changelog author="glin@suse.com" date="1530187200">- Correct the requirement of efivar-devel version</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532001600">- Update to version 12 (FATE#326702)
  + Better CI.
  + Limit how large our WMI buffer can be.
  + Add fwup_version() because fwupd wants it.
  + Fix linking on (some) platforms that need libgcc_eh.a.
  + abicheck improvements.
  + Default to creating a UX capsule, whatever it may actually do.
- Refresh fwupdate-suse-build.patch with quilt.
- Use url for source tarball and license tag for COPYING.</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1540296000">- Amend the spec file to avoid fwup*.efi from being removed
  mistakenly (bsc#1112832)</changelog>
  <changelog author="rw@suse.com" date="1547726400">- Move 'efi'-executables to '/usr/share/efi'  (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1548676800">- Fix the destination of 'efi'-executables for i586 (FATE#326960)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1571227200">- Add fwupdate-bsc1152928-update-aarch64-linker-script.patch to
  update the linker script for AArch64 to match the one in
  gnu-efi (bsc#1152928)</changelog>
  <changelog author="Gary Ching-Pang Lin &lt;glin@suse.com&gt;" date="1617105600">- Add fwupdate-bsc1182057-add-sbat-support.patch to add SBAT
  section to EFI images (bsc#1182057)
  + Also specify the vendor SBAT</changelog>
</package>
<package pkgid="220fc7671c02797ce2cf912e257019b0915bb4812c332cce436a2c384972e91c" name="gcc10-ada-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="d395a11ac8f2b99c8a739b78bf8f94a8be89d2841f6114a9465ae73667095eef" name="gcc10-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="11ed789dcbb26c0c15200b0dc456654bf90fccff00358321e4100602a65b132e" name="gcc10-d-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="b8c3df8a5c61faa667e82b9fcbf43101140bb64c9dba79da99e83dbf8eca45ea" name="gcc10-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="2565b63d99eea1a93d1e5620275bdc27ef01bab3b3c835f1e1ea48d601c40db8" name="gcc10-debugsource" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="099dc6b8b016438916afde929eb91770afc470fa149fce65f62746908dd5f1f5" name="gcc10-fortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="1875d834a7d78c734142ee1e9e887d75c43b593fe77b9b9ac190fb8e973d99fe" name="gcc10-go-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="25492ff4e7f4f7f4fcf4d43c5ca1b9a6039484c939ba7883a4a0d38bf16aa387" name="gcc10-obj-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6e89ba3f8801b0e7390ae8586032ae7ce9919092f7522ba3a5a941eef4f14ceb" name="gcc10-objc-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.2.1+git583" rel="lp152.2.2"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584705600">- Update to master head (7d4549b2cd209eb621453ce13be7f), git175366.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585051200">- Update to master head (75c24a08d697d6442fe6c26142f05), git175422.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1585310400">- Update to master head (038769535a8cbdd3dd3e100bde314), git175499.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to master head (c72a1b6f8b26de37d1a922a8af143), git175641.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586347200">- Update to master head (13e41d8b9d3d7598c72c38acc86a3), git175688.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586952000">- Update to master head (2dc9294c3c7c81a6d5e1d4dedf58f), git175805.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587038400">- Update to master head (effcb4181e143bc390286a489ff84), git175831.
- Package arm_cde.h and arm_mve_types.h for arm.
- Alter _constraints to also constrain jobs.
- Add libzstd-devel BuildRequires to cross compiler specs.
- Switch to release checking builds.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587124800">- Update to master head (b835645c7a51b7e99092abe61d677), git175845.
- Drop to 4 jobs as constraint for s390x.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1587729600">- Update to master head (3685c5adf5c0b30268cb8f95c89e4), git176017.
- Add gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588420800">- Update to gcc-10 branch head (2aaa1dc3c87372fd55c1c33aa7a), git5.
  * Includes first release candidate for GCC 10.1.
  * Includes gcc10-pr94734.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1588852800">- Update to gcc-10 branch head (dd38686d9c810cecbaa80bb82e), git40.
  * Includes GCC 10.1 release.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1589544000">- Update to gcc-10 branch head (b0461f44076c26ced5526e4fd6), git68.
- Add gcc10-foffload-default.patch to make offloading ignore
  offload targets that have not been installed both at compile
  and runtime (for the libgomp plugin part).</changelog>
  <changelog author="Matwey Kornilov &lt;matwey.kornilov@gmail.com&gt;" date="1591876800">- Enable c++ for arm-none-eabi</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1593086400">- Update to gcc-10 branch head (c91e43e9363bd119a695d6450), git290.
  * Includes fix for PR95719, fixing LibreOffice.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1593777600">- Enable nvptx support for aarch64</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1594123200">- Update to gcc-10 branch head (12e1a54b06777db74ce375496), git355.
  * Includes fix for non-reproducible builds with LTO [bsc#1172846].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1595937600">- Update to gcc-10 branch head (c0438ced53bcf57e4ebb1c38c), git465.
  * Includes GCC 10.2 release.  [bsc#1173972] [jsc#ECO-2373]
  * Picks up fixes for C++20 coroutines support.  [jsc#SLE-12297]
  * Picks up fix for a recent chromium build fail.
- Build x86 CET enabled runtime for Factory.
- Disable GCN offloading for SLE12 and SLE15 GA.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1596628800">- Update to gcc-10 branch head (dda1e9d08434def88ed86557d0), git501.
  * Includes fix for AARCH64 kernel build failure.  [bsc#1174817]
  * Includes aarch64 SLS mitigation changes.  [bsc#1172798, CVE-2020-13844]
- Add gcc10-streamer-backports1.patch and gcc10-streamer-backports2.patch.
- Enable x86 CET runtime for SLES15 and Leap15 also.
- Do not enable the now deprecated HSA offloading capability.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598270400">- Update to gcc-10 branch head (d523b5201cce1796717a8ca669), git580.
  * Includes gcc10-streamer-backports1.patch and
    gcc10-streamer-backports2.patch.
  * Includes fixes for LTO ICE [bsc#1175168] and aarc64 128bit
    CAS miscompilation [bsc#1174753].</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1598356800">- Update to gcc-10 branch head (c0746a1beb1ba073c7981eb09f), git583.
  * Fixes ABI breakage for as-base CDTORs of final classes.  [gcc#95428]</changelog>
</package>
<package pkgid="6b5cac12979ad7f58400b43919195af0b86eb48df1bf85da3487e8673030539e" name="gcc7-ada-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="dbf77307b9ea10b28e00636f09c00af7e509d176f9070386a3ba691704da9da7" name="gcc7-ada-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="82ee89ab28d7a3479adde9632fea40d8544bb9aac0d8ac81c9e9f6a78469fe21" name="gcc7-ada-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="9f3ac996b81c96d64b7f6f3a46e29fc99d1ef2256d90969f7c4a1c6f6dec6c42" name="gcc7-ada-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="d4f6fb67ede3b1f33aa9ba70f5f32df833cc599ff767cfb0c74bc9647407073b" name="gcc7-ada-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="b1464c3eb22ebba0c1d36fc18a23500b96cf9992182fa86212a4aca8dd298c4e" name="gcc7-ada-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="51125e5c851874f4c966f2b4c16e731d994667e8bb09f5a58487a6df2a9c9f4f" name="gcc7-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="8568790f9a0e6f4677c189dda43d78e9bf9c516eb579595da393154130d5312a" name="gcc7-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="8d29317eb4ddc33566e93a933a8c4f860dfd8a53031a2a3a62de5b4ec10f83ab" name="gcc7-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="46e5825551440f99006ca0e83a6c61db9e1a51a4c2a22711292654a36fe583b3" name="gcc7-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="6f59f93cdac815a1afc54f66576069fa357b19cb0e8c2c66f1646a0fb75b3afe" name="gcc7-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="7f47dcdf145502ae7215ad1b928ffc9d04fc5224036f1d3c489e75442ac80e86" name="gcc7-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="500c386e17604df2cc857d666a0410bb7f5529b99336c008e764db4d3d32ef0b" name="gcc7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="cd771759a6b01d7680b06ea7c35debd8f7b3a28b7c895b1bfda265769c31e181" name="gcc7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="c14b7204f6daaf1d4bd0271eedf803d826b33ecac39aee1ec42940aa171a6bc1" name="gcc7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="7a6776272bc60f95304a27f1ec4711cb34d737c49d7311ed370d21e911d1b556" name="gcc7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="6f9a076b88fec29fc8adc1bad46b72cffbdc97264b415617690c780644072ecb" name="gcc7-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="5007f7463746dd5e9c3ddc72357b9648c79b1f0283bda79c9e5c71d279fd53dd" name="gcc7-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="ae7addcd159778bf62d02d53ec34ba9b720a843d79cbf178492fbde1f62a7067" name="gcc7-debugsource" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="6a3f2d836e39947d35fabb385fb15708c2be88180629356bbfa36ff5bd8d9281" name="gcc7-debugsource" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="c0746961b09ca38ee5cbea5868befc29b66f1ad393972657609b6b46329f71dc" name="gcc7-debugsource" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="4a68ea1adc14f0fe6f0cddbca81a49fe1be606949992d326f517f98cb538fd4e" name="gcc7-debugsource" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="cb395b078d9d48257b0e72912c12cfdf844d36c9867a14acd896227227b6cc5c" name="gcc7-debugsource" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="567ec2459762b550da5f18df0f2b7f0d03a65df3acaba8769d130d66f99929bf" name="gcc7-debugsource" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="835302f192933eea181656c1975bbbb548085910bbe981cc61245924d3229a35" name="gcc7-fortran-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="272feae454cb10d0c3e9aa0879c23d145193e550c31afc64e3ef89e1f5780ef7" name="gcc7-fortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="03e805da969c843af6697d1a781117a423074f3b810fc2ca1a809647d7e06868" name="gcc7-fortran-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="11b535f48d8deddf73dc37c85d2120928a0ad6f4c30005b03d2c875012c875ce" name="gcc7-fortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="4d57523480fed4328817f9f83423902861908a81f6b39cdd23d626e5f70bba15" name="gcc7-fortran-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="4c0dfd73ae530fd6f6ca47aa43078e51028bf6d07ab04340450c63bb73618ff9" name="gcc7-fortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="f983b241b03759d820af4c1e476ad30a4693a902789e53ddf821ef834abed148" name="gcc7-go-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="8a46f9d00203431101c7fc1287fb1c5883779f3b4e3ffffefc58151996d6c68a" name="gcc7-go-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="591d3d5c59f4a721d4213f3035e17c55373f9c3257f8ef8e50c41d8c59febf93" name="gcc7-go-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="317b1b835b9b89ea6b67721f4535926932136bbed708b73538727f05c0ca16a9" name="gcc7-go-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="e3256bbb934452156990eb1f5867f083b4b4e7397d734eb3390e9e818d677093" name="gcc7-go-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="ba9178fc7d07aa0b6632477803c6fc4d9d589299f094757c2d5394d3f58045a2" name="gcc7-go-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="2dce470fef727408fac75b27c5150630609a58ba6ffaad8191bf6a153f90d0ae" name="gcc7-obj-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="02a6dcaccfb1bff2a35f14fda30789de88de036ef6e9ed0418701aa6645f7768" name="gcc7-obj-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="4b82af844d344a88f63731c114609bcf5fb4f2fb6ef8a978f2bdcbaa8aae0da6" name="gcc7-obj-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="4cc448a12bcee2ca4d4b076f0af8461e54eb03672be68d3339aef41174f1e835" name="gcc7-obj-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="a706e28c8ef9c656995dd7a53898d51b47058e31b6b8cc1bd3c6111d65b63873" name="gcc7-obj-c++-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="d580a8705ae8a2a37900b11324fdae61b7508354698549ef5c9b20d98c59debd" name="gcc7-obj-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="9f0074dc6d348eee324c24ed3e31293c69bc75525f0f9af21c846396224e392c" name="gcc7-objc-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="7715b25cd6766f9ac4993b4ec12db757df25b914ae9b747d594e6befdadea610" name="gcc7-objc-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.3.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]
- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
</package>
<package pkgid="2215646d8845b7096bccf7ae48a160d2867bc294ff4a4bcb093d0d43f8a4ce2a" name="gcc7-objc-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="f1d7aa1079e411df9a6222cf074cd138c4ed317aaa36363fb7e3bc92cefeca84" name="gcc7-objc-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.6.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570017600">- Add gcc7-bsc1146475.patch to fix debug info created for array
  definitions that complete an earlier declaration.  [bsc#1146475]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1573732800">- Update to GCC 7.5.0 release.
- Add gcc7-pr85887.patch to fix miscompilation with thread-safe local
  static initialization.  [gcc#85887]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
</package>
<package pkgid="b315f4bb0614b537c5061d130da43295727d998909b4bbc6a6805b5e0d4cc427" name="gcc7-objc-debuginfo" arch="i586">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="7df8162c5eda98ae334ae3c90e0902e406d7096b3928e81636bb6cbfdb03f566" name="gcc7-objc-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.5.0+r278197" rel="lp152.3.9.1"/>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578398400">- Add gcc7-bsc1160086.patch to fix miscompilation in vectorized code
  for s390x.  [bsc#1160086] [gcc#92950]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- gcc7-pr92154.patch: Backport PR sanitizer/92154</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1579521600">- Add gcc7-pr93246.patch: Backport PR middle-end/93246</changelog>
  <changelog author="matz@suse.com" date="1579694400">- Add gcc7-pr92692.patch: Backport PR target/92692 to fix
  miscompilation of some atomic code on aarch64. [bsc#1150164]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580299200">- Add gcc48-bsc1161913.patch to fix register allocation issue with
  exception handling code on s390x.  [bsc#1161913]</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1582891200">- Add gcc7-pr93965.patch in order to fix binutils release
  date detection issue.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583323200">- Add gcc7-pr93888.patch to fix debug information issue with
  inlined functions and passed by reference arguments.  [gcc#93888]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1584360000">- Add gcc7-pr94148.patch to fix corruption of pass private -&gt;aux
  via DF.  [gcc#94148]</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1600430400">- Remove -mbranch-protection=standard (aarch64 flag) when gcc7 is
  used to build gcc7 (ie when ada is enabled)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009600">- Add gcc7-pr97774.patch to fix debug line info for try/catch.
  [bsc#1178614]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605009601">- Add gcc7-pr97535.patch to fix memcpy miscompilation on aarch64.
  [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605182400">- Fix 32bit libgnat.so link.  [bsc#1178675]
- Quote %{cross_arch} consistently when comparing expansion
  against string in RPM %if condition.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605528000">- Revert gcc7-pr97774.patch as it causes gdb to crash.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1605787200">- Add gcc7-aarch64-moutline-atomics.patch to backport the aarch64
  - moutline-atomics feature and accumulated fixes but not its
  default enabling.  [jsc#SLE-12209, bsc#1167939]
- Order gcc7-pr92692.patch after gcc7-aarch64-moutline-atomics.patch
  and refresh.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392000">- Add gcc7-pr88522.patch to avoid assembler errors with AVX512
  gather and scatter instructions when using -masm=intel.
- Amend gcc7-remove-Wexpansion-to-defined-from-Wextra.patch to
  reflect changes in option handling in the testsuite.
- Add gcc7-testsuite-fixes.patch to fix PR98001 and PR98002 which
  are broken testcases showing with malloc debugging enabled.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1606392001">- Enable fortran for the nvptx offload compiler.
- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers</changelog>
  <changelog author="Michael Matz &lt;matz@suse.com&gt;" date="1606392002">- Add gcc7-aarch64-sls-miti-1.patch, gcc7-aarch64-sls-miti-2.patch,
  gcc7-aarch64-sls-miti-3.patch to backport aarch64 Straight Line
  Speculation mitigation [bsc#1172798, CVE-2020-13844]
- Add gcc7-fix-retrieval-of-testnames.patch to support usage in
  testcases added by the above.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1609761600">- Amend gcc7-aarch64-moutline-atomics.patch for glibc namespace
  violation with getauxval.  [bsc#1167939]</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1612094400">- add gcc7-pr81942.patch [bsc#1181618]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
</package>
<package pkgid="b44953b4e153c3cd80ceda0e48c8ef001f6c0f43361fd6156e75bdab5f7347f3" name="gcc9-ada-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="56831aaaa3260b6f326321944de1ce112fba59860934c222a475f656d7ca081f" name="gcc9-ada-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="3f02a95514518ad3d7bb0b268d9fede68976ea4e3e7d326d2b5f1b3e3701b06a" name="gcc9-c++-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="09b06e2cb3f710b8210bbef73644a138205cf389ad0325a81669ff90eea0ac46" name="gcc9-c++-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="16e5b72abdd74ae2b4c93f5aff6ca0434381f4462a62b44dbbfa3e52423ec107" name="gcc9-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="22b23cfdb4b91dc24c48a0f7c0e6234d8ebdb24c99d00ab03ec33291116da7b5" name="gcc9-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="4e7797875da05f401493bcbcf8c3daf4b10ca920b1ab6b37bef796edcc7d4734" name="gcc9-debugsource" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="9d8521496b6e0e26743e191503d36026e688e209ba8272e54d00bbe9257d8598" name="gcc9-debugsource" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="6149f1513ec5624144dfd336e03bc7f546609b8301421b3f7456974a0d2a99be" name="gcc9-fortran-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="cc3e6d6f36bbba7db26c94bc9584c2074e9c99f3315bce5a4d26bf1b4e26ad84" name="gcc9-fortran-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="8d7c1caf9c6d8179e3971a25a968c124f645ccede7a1e69322785b8537c25715" name="gcc9-go-debuginfo" arch="i586">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="a80943306f93b0b7a7451650e3dfe94c01d11a7d494b3fac3875abdfe9dfaf8b" name="gcc9-go-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.3.1+git1296" rel="lp152.2.3.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Add gcc9-add-flto=auto.patch in order to support -flto=auto.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1565611201">- Update to gcc-9-branch head (r274311).
  * Includes GCC 9.2 release.  [jsc#SLE-6536, jsc#SLE-6533, jsc#ECO-368]
- Update nvptx-newlib.tar.xz to official newlib-3.1.0.tar.xz
  since nvptx support is now upstream.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566302400">- Update to gcc-9-branch head (r274709).
- Add gcc9-pr91307.patch to make symbols for aggregated global
  constructor names stable when using LTO.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1566561600">- Update gcc9-add-flto=auto.patch by adding backport
  of upstream revision r274849.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1566907200">- Replace old $RPM_* shell vars by macros (where possible).
- Drop defattr and BuildRoot.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1566993600">- Rework shared spec file parts to allow custom Summary and
  Description for cross compilers.  Clarify their Summary
  and Description.  [bsc#1148517]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1567512000">- Update to gcc-9-branch head (r275327).
  * Pulls fix for POWER9 DARN miscompilation.
    (bsc#1149145, CVE-2019-15847)</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568030400">- Reorder things in cross.spec.in so the Version define comes before
  the first use of %version.
- Revert removal of defattr, it breaks building on SLES12.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568203200">- Add gcc9-autodetect-g-at-lto-link.patch.  [bsc#1149995]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1568808000">- Add gcc9-pr91772.patch and gcc9-pr91763.patch to fix fallout
  of gcc9-autodetect-g-at-lto-link.patch.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1570190400">- Make cross-arm-gcc a gcc_icecream cross.  Remove the disabling
  of debuginfo stripping.  [bsc#1152590]</changelog>
  <changelog author="matz@suse.com" date="1570449600">- Refresh gcc48-remove-mpfr-2.4.0-requirement.patch to apply
  again.
- Use new license and header also in gcc.spec.in to reduce churn
  with format_spec_file.
- Use BuildRoot tag again for old distros (SLE-11).</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1575892800">- Update to gcc-9-branch head (r279103).
  * Includes gcc9-pr91772.patch</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1578571200">- Update to gcc-9-branch head (r280037).
  * Includes fix for [gcc#92154]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1580212800">- Update to releases/gcc-9 head (83f65674e78d97d27537361de1a9d74067ff228d).
  * Includes fix for [gcc#92692]</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581508800">- Install go tool buildid for bootstrapping go</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1582632000">- Add libstdc++6-pp provides and conflicts to avoid file conflicts
  with same minor version of libstdc++6-pp from gcc10.</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583150400">- Update to releases/gcc-9 head (eaaee438bf836c2c1ed3424ecbf85de3ed941e87).
  * Includes fix for binutils version parsing [gcc#93965]</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1583496000">- Update to releases/gcc-9 head (c5edde44f5b17b4891f17a63517f355b).
  * Includes GCC 9.3.0 RC1</changelog>
  <changelog author="Richard Biener &lt;rguenther@suse.com&gt;" date="1586174400">- Update to releases/gcc-9 head (6db837a5288ee3ca5ec504fbd5a76581).
  * Includes GCC 9.3 release
  * Includes fix for [bsc#1167898, gcc#93597]</changelog>
</package>
<package pkgid="415df0bdedbd2c11cb3201f70a534849330cb13f879c1ace6207137af0a69f69" name="gdb-debuginfo" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="642612dec32c6ff20620e794d2f244d3fc5e52078dcca21e119dbc6496a21249" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="a92eb0db26138f2cb6eb5c3b4a87d6a59277b289b6049218d2579d329c98cff0" name="gdb-debuginfo" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="88a4653e2e72d7e5ed835605523c4e316cb772d16f6ec08d71397fde31a1c630" name="gdb-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="7bed6e4447bc7cb1bf8d2d7540d6130ac619a7635c8527b7a4ff45805a6e9e11" name="gdb-debugsource" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="ff371a40990a792fbaaab63a9201b6fa339f137f97132e45f6da685055396c37" name="gdb-debugsource" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="ad0123254437a3790bb7dcaf624ce39b78663e3fd39ad1968a7821eaf6d00192" name="gdb-debugsource" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="f67bff211fa61cabfbc8a84131f588df84ab92638d4358bdb363b8155b3b9ea3" name="gdb-debugsource" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="ba17efe1af83c01408d220c95821ff5975f7119d6363da9e140febf286628f9d" name="gdbserver-debuginfo" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="12da4ca452e23cd6193699f90e0aa708035ffa1836204969dc5e28d3e4a80bf9" name="gdbserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.3.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596542400">- Add BuildRequire babeltrace-devel.  On Factory this adds bdeps
  babeltrace-devel, libuuid-devel, babeltrace, libglib-2_0-0, and
  libgmodule-2_0-0.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Add testsuite BuildRequire systemtap-sdt-devel.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801601">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
</package>
<package pkgid="f099cfa9d0df258882695f136a0645f542080e89781f470f2038ef2345b2d0f7" name="gdbserver-debuginfo" arch="i586">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="eba94bcc1623c03ec605882724180ff9d555378daed847c5a7479c8fe8ff1921" name="gdbserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.1" rel="lp152.7.6.1"/>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1596801600">- Don't BuildRequire systemtap-sdt-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1597147200">- Restore License/Group.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1599480000">- Enable CTF support also for riscv64</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605009600">- Rebase to 10.1 release (as in fedora 33 @ 6c8ccd6).
  * Debuginfod support.
  * Multi-target debugging support.
  * Multithreaded symbol loading enabled by default.
  * New command set exec-file-mismatch.
  * New command tui new-layout.
  * Alias command can now specify default args for an alias.
- Update libipt to v2.0.2.
- Fedora-specific patches dropped:
  * gdb-6.8-bz466901-backtrace-full-prelinked.patch
- Broken/obsolete fedora patches dropped:
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-6.5-BEA-testsuite.patch
  * gdb-6.7-charsign-test.patch
- Obsoleted fedora patches dropped:
  * gdb-6.3-attach-see-vdso-test.patch
  * gdb-6.3-inferior-notification-20050721.patch
  * gdb-6.5-gcore-buffer-limit-test.patch
  * gdb-6.5-missed-trap-on-step-test.patch
  * gdb-rhbz1818011-bfd-gcc10-error.patch
- Fedora patches updated:
  * gdb-6.3-gstack-20050411.patch
  * gdb-6.3-test-self-20050110.patch
  * gdb-6.5-bz185337-resolve-tls-without-debuginfo-v2.patch
  * gdb-6.5-bz218379-solib-trampoline-lookup-lock-fix.patch
  * gdb-6.6-buildid-locate-core-as-arg.patch
  * gdb-6.6-buildid-locate-rpm-librpm-workaround.patch
  * gdb-6.6-buildid-locate-rpm-scl.patch
  * gdb-6.6-buildid-locate-rpm.patch
  * gdb-6.6-buildid-locate-solib-missing-ids.patch
  * gdb-6.6-buildid-locate.patch
  * gdb-6.7-testsuite-stable-results.patch
  * gdb-6.8-quit-never-aborts.patch
  * gdb-archer-pie-addons-keep-disabled.patch
  * gdb-archer-pie-addons.patch
  * gdb-archer-vla-tests.patch
  * gdb-attach-fail-reasons-5of5.patch
  * gdb-bz1219747-attach-kills.patch
  * gdb-bz533176-fortran-omp-step.patch
  * gdb-container-rh-pkg.patch
  * gdb-fedora-libncursesw.patch
  * gdb-gnat-dwarf-crash-3of3.patch
  * gdb-jit-reader-multilib.patch
  * gdb-linux_perf-bundle.patch
  * gdb-moribund-utrace-workaround.patch
  * gdb-runtest-pie-override.patch
  * gdb-vla-intel-fix-print-char-array.patch
  * gdb-vla-intel-fortran-strides.patch
  * gdb-vla-intel-fortran-vla-strings.patch
  * gdb-vla-intel-stringbt-fix.patch
  * gdb-vla-intel-tests.patch
- Fedora patches added:
  * gdb-config.patch
- Obsoleted patched dropped:
  * gdb-testsuite-avoid-pagination-in-attach-32.exp.patch
  * gdb-fix-toplevel-types-with-fdebug-types-section.patch
  * gdb-fix-range-loop-index-in-find_method.patch
  * gdb-fix-python3.9-related-runtime-problems.patch
  * gdb-fix-unused-function-error.patch
  * gdb-fix-the-thread-pool.c-compilation.patch
  * gdb-aarch64-fix-erroneous-use-of-spu-architecture-bfd.patch
  * gdb-fix-debug-agent-odr-bool-int.patch
  * gdbserver-fix-build-with-make-3.81.patch
  * gdb-threads-fix-hang-in-stop_all_threads-after-killing-inferior.patch
- Fedora patch fixups added:
  * fixup-gdb-6.3-test-pie-20050107.patch
  * fixup-gdb-6.5-sharedlibrary-path.patch
  * fixup-gdb-6.6-buildid-locate.patch
  * fixup-gdb-6.8-bz442765-threaded-exec-test.patch
  * fixup-gdb-archer-vla-tests.patch
  * fixup-gdb-base-gnu-ifunc-strstr-workaround-exp.patch
  * fixup-gdb-btrobust.patch
  * fixup-gdb-bz634108-solib_address.patch
  * fixup-gdb-dts-rhel6-python-compat.patch
  * fixup-gdb-gnat-dwarf-crash-3of3.patch
  * fixup-gdb-vla-intel-fortran-vla-strings.patch
  * fixup-gdb-vla-intel-tests.patch
  * fixup-gdb-6.3-threaded-watchpoints2-20050225.patch
- Patches renamed:
  * gdb-testsuite-fix-perror-in-gdb.opt-fortran-string.exp.patch
    to fixup-2-gdb-archer-vla-tests.patch
- Patches updated:
  * gdb-testsuite-ada-pie.patch
- Backport from master:
  * gdb-testsuite-prevent-pagination-in-gdb-internalflags.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605096000">- Enable gdbserver for riscv64.
- Restrict BuildRequires libdebuginfod to Factory and supporting
  archs.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182400">- Disable xz-devel and binutils-gold for SLE-10.
- More enabling of gdbserver for riscv64.
- Backport from master:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch
  * gdb-testsuite-catch-condition-evaluation-errors-in-gdb-assert.patch
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch
  * gdb-testsuite-fix-gdb-dlang-watch-loc-exp-on-ppc64.patch
- Patch to be upstreamed:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182401">- Fix patch application on SLE-11:
  * gdb-testsuite-detect-gdb-prompt-after-monitor-exit.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182402">- Add missing patch command for:
  * gdb-fortran-fix-print-dynamic-array.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1605182403">- BuildRequire curl for debuginfod test-case.
- Patch to be upstreamed:
  * gdb-don-t-return-non-existing-path-in-debuginfod-source-query.patch
  * gdb-fix-assert-in-process-event-stop-test.patch
  * gdb-fix-filename-in-not-in-executable-format-error.patch
  * gdb-handle-no-upper-bound-in-value-subscript.patch
  * gdb-fortran-handle-dw-at-string-length-with-loclistptr.patch
- Testsuite patch:
  * gdb-testsuite-fix-gdb-server-ext-run-exp-for-obs.patch
- Fedora patch fixups added:
  * fixup-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups updated:
  * fixup-gdb-btrobust.patch
  * fixup-2-gdb-archer-vla-tests.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt; - 10.1" date="1605700800">- Fedora patch fixups updated:
  * fixup-2-gdb-archer-vla-tests.patch
- Fedora patch fixups added:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Testsuite patch:
  * gdb-testsuite-disable-selftests-for-factory.patch
- Backport from master:
  * gdb-symtab-read-cu-base-address-for-enqueued-cu.patch
  * gdb-symtab-use-early-continue-in-find_pc_sect_compunit.patch
  * gdb-fix-section-matching-in-find_pc_sect_compunit.patch
  * gdb-symtab-fix-language-of-frame-without-debug-info.patch
- Patch to be upstreamed:
  * gdb-symtab-set-default-dwarf-max-cache-age-1000.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606219200">- Patch to be upstreamed:
  * gdb-testsuite-gdb-base-morestack-exp-no-clang.patch
  * gdb-testsuite-handle-sigill-in-gdb-reverse-insn-reverse-exp.patch
  * gdb-testsuite-fix-gdb-reverse-insn-reverse-x86-c-for-m32.patch
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch
  * gdb-tui-enable-work-around-libncurses-segfault.patch
- Backport from master dropped:
  * gdb-testsuite-fix-unbalanced-braces-in-gdb-tui-new-layout-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606305600">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392000">- Patch updated:
  * gdb-testsuite-gdb-tui-new-layout-exp-partly-require-tcl86.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606392001">- Backport from master:
  * gdb-testsuite-fix-failure-in-gdb-base-step-over-no-symbols-exp.patch
- Patch to be upstreamed:
  * gdb-testsuite-fix-control-flow-in-gdb-reverse-insn-reverse-exp.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606478400">- Fedora patch fixups update:
  * fixup-2-gdb-rhbz1156192-recursive-dlopen-test.patch
- Fedora patch fixups added:
  * fixup-gdb-test-ivy-bridge.patch
- Add xz to BuildRequires for testsuite flavour.
- Add note on mpfr-devel for SLE-11.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1606737600">- Mention fedora patch fixups added:
  * fixup-3-gdb-archer-vla-tests.patch
- Mention patch to be upstreamed added:
  * gdb-fix-selftest-fails-with-gdb-build-with-O2-flto.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607342400">- Backport from master [jsc#13656]:
  * gdb-powerpc-remove-512-bytes-region-limit-if-2nd-dawr-is-avaliable.patch</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1607428800">- Require 8GB diskspace for x86_64.</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616068800">- Replace tentative fix with upstreamed fix [swo#26881]:
  Remove:
  * gdb-fix-assert-in-process-event-stop-test.patch
  Add:
  * gdb-fix-internal-error-in-process_event_stop_test.patch
  * gdb-breakpoints-handle-glibc-with-debuginfo-in-create_exception_master_breakpoint.patch
- Fix license [bsc#1180786].</changelog>
  <changelog author="Tom de Vries &lt;tdevries@suse.com&gt;" date="1616155200">- Backport fix for heap-use-after-free in
  remote_async_inferior_event_handler [swo#26614]:
  * gdb-remote-fix-invalid-pointer-in-remote-async-serial-handler.patch</changelog>
</package>
<package pkgid="e0b6e50c15bcc470de85d735d331bc5204284c142e4eb6f16ecd219db29bdba3" name="gdk-pixbuf-debugsource" arch="i586">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="c5e6aa526bc76d4e7cd67b43935f1bbde7ef04f59ffa175d13201f7092f87227" name="gdk-pixbuf-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="278ae640ab9861786b6171de84495a05c9e08b1314b376295244f4420fb4f3a6" name="gdk-pixbuf-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="8445a30563eec0bbe5c43fa12640f9099356ffdfa153d078b865cfa0a497db2f" name="gdk-pixbuf-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="0444a1530866799ec8e76d4386cb654001de5448a9f7b15ef557f9e060ca56e2" name="gdk-pixbuf-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="9778137da8af77ee36a664419dbd31049fd2543b2d0511637e3df2d7329d75ad" name="gdk-pixbuf-loader-rsvg-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.46.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 2.44.13:
  + Updated compilation docs for Debian.
  + Fix glgo#GNOME/librsvg#415: Register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557835200">- Update to version 2.44.14:
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.44.15:
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#462: Fix usage of std::f64::EPSILON for
    Rust 1.28.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#426: Detect files vs. URIs in
    rsvg_handle_new_from_file() on Windows.
  + Fix a memory leak in the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425601">- Update to version 2.45.3:
  + Big news! All the real work in the library is now implemented
    in Rust. The public API is implemented in C, but most it calls
    immediately into the Rust code.
  + rsvg_handle_set_base_uri() now really assumes that it is passed
    a URI. Previously it would try to differentiate between real
    URIs, and absolute or relative file paths. If this breaks your
    code (i.e. you are passing a filename, not a URI), please tell
    us so we can restore the old behavior!
  + Fix glgo#GNOME/librsvg#395: Don't panic in feMorphology if it
    ends up with a negative scaling transformation.
  + Fix glgo#GNOME/librsvg#398: Detect circular references in
    gradients.
  + Match the Firefox/Chrome behavior on gradients and patterns
    with circular references for fallbacks.
  + Fixes for Rust 1.30 and below.
  + Lots and lots of refactoring.
- Changes from version 2.45.2:
  + rsvg_cleaup() is now deprecated. This was only meant to be
    called from code to be checked by Valgrind. Leak checkers may
    show reachable memory from libxml2; real memory leaks should
    still be reported, of course.
  + As an experimental change, librsvg no longer calls
    xmlInitParser() from libxml2. Please tell us if this causes
    problems for multithreaded programs.
  + Added g_warning()s to ensure the API is called in the correct
    sequence.
  + The text handling code has been completely refactored and
    simplified. This will allow us to implement the x/y/dx/dy
    properties for multiple glyphs in the future. Please report any
    problems you experience in text rendering.
  + Fix glgo#GNOME/librsvg#385: Don't crash if there is no
    rsvg_handle_write() before rsvg_handle_close().
  + Fix glgo#GNOME/librsvg#391: Avoid undefined behavior when
    casting opaque pointers.
  + Fix crash when a linear RGB filter is followed by an SRGB
    filter.
  + Fix glgo#GNOME/librsvg#393: Stack overflow when freeing
    thousands of sibling elements.
  + Fix positioning of adjacent &lt;tspan&gt; elements.
  + All the toplevel loading and drawing code is implemented in
    Rust now.
  + Pixbuf conversion code is in Rust now.
  + Cleanups in the code for XML processing, markers, attributes.
  + Many build/link fixes.
  + Cleanups in the code that calls libxml2.
- Changes from version 2.45.1:
  + New public API, rsvg_handle_get_geometry_sub(), to get the
    exact geometry of an element. The functions
    rsvg_handle_get_position_sub() and
    rsvg_handle_get_dimensions_sub() are deprecated now; these
    returned incomplete data with integer coordinates.
  + rsvg_handle_write() and rsvg_handle_close() are now deprecated
    in favor of the functions which use a GInputStream. The former
    need to buffer the entire SVG data first; the latter don't need
    buffering.
  + Librsvg no longer tries to load XML entities which reference
    external resources, either parameter or general entities,
    declared in the DTD. This never worked properly, and it is
    better to do so via the xi:include mechanism. Also, unparsed
    external entities with a notation are not really supported in
    SVG; it has its own &lt;image&gt; element and similar for that
    purpose. Only internal general entities are supported now, for
    example:
  - &lt;!ENTITY foo "&lt;some xml here&gt;"&gt;.
  - &lt;!ENTITY bar "some text here"&gt;.
  + Started support for localized error messages.
  + Ported to Rust: loading code, XML processing code, data: URL
    parsing.
  + Many code cleanups and refactorings.
  + Fix undefined behavior in casts.
  + Cairo/Rust API updates.
  + configure.ac cleanups.
- Add lang_package macro/subpackage, librsvg now have translations.
- Add a librsvg_sover define and set it to 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425602">- Update to version 2.45.4:
  + Fix glgo#GNOME/librsvg#402: Fix the library's soname.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425603">- Update to version 2.45.5:
  + At build time, you can now pass $CARGO and $RUSTC environment
    variables if you need to override the default Rust toolchain.
    Please see COMPILING.md for details.
  + Fix glgo#GNOME/librsvg#405: In the gdk-pixbuf loader, don't
    crash if the write() function doesn't receive a GError.
  + Fix glgo#GNOME/librsvg#268: Remove the comp-op property; it's
    not in SVG 1.1 nor SVG 2.
  + Fix glgo#GNOME/librsvg#415: register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.
  + All of the library's non-GObject functionality is implemented
    in Rust now.
  + Update the cairo crate.
  + Clean up the loading code paths.
  + Updated compilation docs for Debian.
  + Updated parts of the reference documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425604">- Update to version 2.45.6:
  + Librsvg now requires Rust 1.30.0 or later.
  + Librsvg now requires Cairo 1.16.0 or later.
  + This version introduces librsvg_crate, an idiomatic Rust crate
    for using librsvg from Rust programs directly, without using
    GObject machinery. This API is subject to change, but you can
    start using it now in an experimental fashion.
  + All of the librsvg internals are now in Rust! The C code is
    just a thin wrapper over Rust functions.
  + The internals library has been converted to Rust 2018.
  + Within librsvg_crate, there is a new infrastructure for doing
    reftests in Rust, that does not depend on PNG reference files.
    See librsvg_crate/tests for details.
  + This release introduces the following new APIs:
  - rsvg_handle_get_intrinsic_dimensions(),
  - rsvg_handle_get_geometry_for_element().
  + Parsing of the "style" attribute, which has a plain list of CSS
    property declarations, is now done with rust-cssparser.
  + CSS selector matching should be marginally faster than before.
  + Fix Visual Studio builds.
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#295: Ensure the initial viewport fits
    into temporary surfaces for compositing.
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425605">- Update to version 2.45.8:
  + This version requires at least Rust 1.34.
  + Fix build on Rust earlier than 1.36.
  + Update gtk-rs and dependent crates.
- Changes from version 2.45.7:
  + Don't panic if an SVG has character data outside the first
    element.
  + Don't panic when there's an xi:include fallback with no parent
    element.
  + Fix blurry semi-opaque objects when rendering with a scaled
    transformation.
  + Don't ignore the first x/y/dx/dy in text/tspan elements if
    there is more than one position specified.
  + In librsvg_crate, SvgHandle now has a ::has_element_with_id()
    method.
  + rsvg-convert now catches the case where the SVG has no
    dimensions.
  + This version no longer contains the rsvg-view program, so
    librsvg no longer depends on GTK.
  + The poly element no longer supports "verts" as an alias for the
    "points" attribute. The "verts" name was only used in SVG
    pre-1.0, and we had been cargo-culting that name ever since.
  + We now use more machinery from Mozilla Servo, in this case the
    markup5ever and rust-selectors crates. This is in line with
    gradually replacing libcroco with a Rust-only CSS machinery.
  + Lots and lots of refactoring and cleanups: use the rctree crate
    instead of our own tree representation; remove interior
    mutability in element structs; make the gradients and patterns
    code less repetitive.
  + Update some dependencies.
  + Fix static linking and Windows builds.
- Drop rsvg-view subpackage and pkgconfig(gtk+-3.0) BuildRequires
  and obsolete it from main library following upstream changes.
- Add new rsvg-convert subpackage for the convert tool previously
  packaged in rsvg-view.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425606">- Update to version 2.45.90:
  + New API functions:
  - rsvg_handle_render_document().
  - rsvg_handle_render_layer().
  - rsvg_handle_render_element().
  - rsvg_handle_get_geometry_for_layer().
  - rsvg_handle_get_geometry_for_element().
  + CairoRenderer in the librsvg_crate has corresponding functions
    as well.
  + Fix builds with gettext ? 0.20.
  + If the C API is called out of order, downgrade hard panics to
    g_critical() to cope with incorrect/old applications that
    called rsvg_handle_get_dimensions() before
    rsvg_handle_close().
  + API reference documentation is much improved.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425607">- Update to version 2.45.92:
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#500: Added additional SVG blend-modes
    for the feBlend filter primitive.
  + Some changes in the build structure to allow for faster builds.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.46.0:
  + All of librsvg.so is now implemented in Rust! That is, except
    for a very thin wrapper over the public API functions.
    Hopefully we can remove this wrapper when Cargo gets some more
    features around controlling the linking step. This release
    requires at least Rust 1.34.
  + Librsvg now comes with a Rust crate that can be used from Rust
    applications. See librsvg_crate/examples. This Rust API is
    designed to be idiomatic; if you want a Rust binding to the
    shared library instead, please use the "rsvg-rs" crate from
    crates.io.
  + The following API functions are new in the C library:
  - rsvg_handle_get_intrinsic_dimensions()
  - rsvg_handle_render_document()
  - rsvg_handle_render_layer()
  - rsvg_handle_render_element()
  - rsvg_handle_get_geometry_for_layer()
  - rsvg_handle_get_geometry_for_element()
  - Correspondingly, there is a new chapter in the documentation,
    called "Recommendations for Applications". These new APIs
    conform better with the web platform's idea of how SVG
    sizing/positioning should work. Applications should now find
    it easier to scale and render SVGs in a single call, instead
    of having to obtain image dimensions first.
  + A bunch of functions have been deprecated but are still
    available:
  - rsvg_handle_write()/close() are deprecated in favor of the
    stream functions. Unfortunately the write()/close() pair
    require buffering the entire document, in case it is a .svgz
    compressed file; the streaming functions do not have this
    problem.
  - Functions that return RsvgDimensionData and RsvgPositionData
    are deprecated, since they just use integers instead of
    floating point numbers. They are replaced with the
    _get_geometry_*() functions above.
  + The library is a lot more strict now in terms of detecting that
    the API functions are called in the correct order. For example,
    calling rsvg_handle_get_dimensions() before rsvg_handle_close()
    will now emit a critical warning.
  + Librsvg is gradually moving towards using code from Mozilla's
    Servo. We haven't quite gotten rid of libcroco and libxml2 yet,
    but this is in progress.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 2.46.1:
  + Fix empty patterns which reference a fallback pattern with
    children.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571054400">- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 2.46.3:
  + glgo#GNOME/librsvg#516: Fix inadvertent bump in the minimum
    Rust version required. The string_cache crate is now pinned to
    a version that still works on Rust 1.34.
  + glgo#GNOME/librsvg#521: Compute geometries correctly if there
    is a viewBox attribute.
  + glgo#GNOME/librsvg#308: Fix stack exhaustion with circular
    references in &lt;use&gt; elements.
  + Consistently use the LGPL 2.1 wherever it is mentioned.
- Drop COPYING, everything is covered by COPYING.LIB now.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573041600">- Remove BuildRequires rust-std. The replacement rust-std-static
  is already required by rust.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1573128000">- Add patches to fix coloring of symbolic icons (glgo#GNOME/librsvg#525):
  * 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  * 0002-Compute-the-specificity-of-CSS-selectors.patch
  * 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1573560000">- Fix incorrect obsoletes for rsvg-view.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573646400">- Add explicit conflicts between rsvg-convert and rsvg-view &lt;=2.45.7.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 2.46.4:
  + Panic when reading an invalid stylesheet URL in an XML
    processing instruction.
  + Consider specificity when applying CSS selector matches.
  + Provide an usage example in the librsvg crate docs.
- Drop patches fixed upstream:
  + 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  + 0002-Compute-the-specificity-of-CSS-selectors.patch
  + 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1619179200">- Update to version 2.46.5:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
</package>
<package pkgid="4bda6fd476e47e42d1a53d37aadebf7493d983be48b6094a1b5c953fd6f32a96" name="gdk-pixbuf-loader-rsvg-debuginfo" arch="i586">
  <version epoch="0" ver="2.46.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 2.44.13:
  + Updated compilation docs for Debian.
  + Fix glgo#GNOME/librsvg#415: Register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557835200">- Update to version 2.44.14:
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.44.15:
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#462: Fix usage of std::f64::EPSILON for
    Rust 1.28.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#426: Detect files vs. URIs in
    rsvg_handle_new_from_file() on Windows.
  + Fix a memory leak in the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425601">- Update to version 2.45.3:
  + Big news! All the real work in the library is now implemented
    in Rust. The public API is implemented in C, but most it calls
    immediately into the Rust code.
  + rsvg_handle_set_base_uri() now really assumes that it is passed
    a URI. Previously it would try to differentiate between real
    URIs, and absolute or relative file paths. If this breaks your
    code (i.e. you are passing a filename, not a URI), please tell
    us so we can restore the old behavior!
  + Fix glgo#GNOME/librsvg#395: Don't panic in feMorphology if it
    ends up with a negative scaling transformation.
  + Fix glgo#GNOME/librsvg#398: Detect circular references in
    gradients.
  + Match the Firefox/Chrome behavior on gradients and patterns
    with circular references for fallbacks.
  + Fixes for Rust 1.30 and below.
  + Lots and lots of refactoring.
- Changes from version 2.45.2:
  + rsvg_cleaup() is now deprecated. This was only meant to be
    called from code to be checked by Valgrind. Leak checkers may
    show reachable memory from libxml2; real memory leaks should
    still be reported, of course.
  + As an experimental change, librsvg no longer calls
    xmlInitParser() from libxml2. Please tell us if this causes
    problems for multithreaded programs.
  + Added g_warning()s to ensure the API is called in the correct
    sequence.
  + The text handling code has been completely refactored and
    simplified. This will allow us to implement the x/y/dx/dy
    properties for multiple glyphs in the future. Please report any
    problems you experience in text rendering.
  + Fix glgo#GNOME/librsvg#385: Don't crash if there is no
    rsvg_handle_write() before rsvg_handle_close().
  + Fix glgo#GNOME/librsvg#391: Avoid undefined behavior when
    casting opaque pointers.
  + Fix crash when a linear RGB filter is followed by an SRGB
    filter.
  + Fix glgo#GNOME/librsvg#393: Stack overflow when freeing
    thousands of sibling elements.
  + Fix positioning of adjacent &lt;tspan&gt; elements.
  + All the toplevel loading and drawing code is implemented in
    Rust now.
  + Pixbuf conversion code is in Rust now.
  + Cleanups in the code for XML processing, markers, attributes.
  + Many build/link fixes.
  + Cleanups in the code that calls libxml2.
- Changes from version 2.45.1:
  + New public API, rsvg_handle_get_geometry_sub(), to get the
    exact geometry of an element. The functions
    rsvg_handle_get_position_sub() and
    rsvg_handle_get_dimensions_sub() are deprecated now; these
    returned incomplete data with integer coordinates.
  + rsvg_handle_write() and rsvg_handle_close() are now deprecated
    in favor of the functions which use a GInputStream. The former
    need to buffer the entire SVG data first; the latter don't need
    buffering.
  + Librsvg no longer tries to load XML entities which reference
    external resources, either parameter or general entities,
    declared in the DTD. This never worked properly, and it is
    better to do so via the xi:include mechanism. Also, unparsed
    external entities with a notation are not really supported in
    SVG; it has its own &lt;image&gt; element and similar for that
    purpose. Only internal general entities are supported now, for
    example:
  - &lt;!ENTITY foo "&lt;some xml here&gt;"&gt;.
  - &lt;!ENTITY bar "some text here"&gt;.
  + Started support for localized error messages.
  + Ported to Rust: loading code, XML processing code, data: URL
    parsing.
  + Many code cleanups and refactorings.
  + Fix undefined behavior in casts.
  + Cairo/Rust API updates.
  + configure.ac cleanups.
- Add lang_package macro/subpackage, librsvg now have translations.
- Add a librsvg_sover define and set it to 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425602">- Update to version 2.45.4:
  + Fix glgo#GNOME/librsvg#402: Fix the library's soname.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425603">- Update to version 2.45.5:
  + At build time, you can now pass $CARGO and $RUSTC environment
    variables if you need to override the default Rust toolchain.
    Please see COMPILING.md for details.
  + Fix glgo#GNOME/librsvg#405: In the gdk-pixbuf loader, don't
    crash if the write() function doesn't receive a GError.
  + Fix glgo#GNOME/librsvg#268: Remove the comp-op property; it's
    not in SVG 1.1 nor SVG 2.
  + Fix glgo#GNOME/librsvg#415: register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.
  + All of the library's non-GObject functionality is implemented
    in Rust now.
  + Update the cairo crate.
  + Clean up the loading code paths.
  + Updated compilation docs for Debian.
  + Updated parts of the reference documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425604">- Update to version 2.45.6:
  + Librsvg now requires Rust 1.30.0 or later.
  + Librsvg now requires Cairo 1.16.0 or later.
  + This version introduces librsvg_crate, an idiomatic Rust crate
    for using librsvg from Rust programs directly, without using
    GObject machinery. This API is subject to change, but you can
    start using it now in an experimental fashion.
  + All of the librsvg internals are now in Rust! The C code is
    just a thin wrapper over Rust functions.
  + The internals library has been converted to Rust 2018.
  + Within librsvg_crate, there is a new infrastructure for doing
    reftests in Rust, that does not depend on PNG reference files.
    See librsvg_crate/tests for details.
  + This release introduces the following new APIs:
  - rsvg_handle_get_intrinsic_dimensions(),
  - rsvg_handle_get_geometry_for_element().
  + Parsing of the "style" attribute, which has a plain list of CSS
    property declarations, is now done with rust-cssparser.
  + CSS selector matching should be marginally faster than before.
  + Fix Visual Studio builds.
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#295: Ensure the initial viewport fits
    into temporary surfaces for compositing.
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425605">- Update to version 2.45.8:
  + This version requires at least Rust 1.34.
  + Fix build on Rust earlier than 1.36.
  + Update gtk-rs and dependent crates.
- Changes from version 2.45.7:
  + Don't panic if an SVG has character data outside the first
    element.
  + Don't panic when there's an xi:include fallback with no parent
    element.
  + Fix blurry semi-opaque objects when rendering with a scaled
    transformation.
  + Don't ignore the first x/y/dx/dy in text/tspan elements if
    there is more than one position specified.
  + In librsvg_crate, SvgHandle now has a ::has_element_with_id()
    method.
  + rsvg-convert now catches the case where the SVG has no
    dimensions.
  + This version no longer contains the rsvg-view program, so
    librsvg no longer depends on GTK.
  + The poly element no longer supports "verts" as an alias for the
    "points" attribute. The "verts" name was only used in SVG
    pre-1.0, and we had been cargo-culting that name ever since.
  + We now use more machinery from Mozilla Servo, in this case the
    markup5ever and rust-selectors crates. This is in line with
    gradually replacing libcroco with a Rust-only CSS machinery.
  + Lots and lots of refactoring and cleanups: use the rctree crate
    instead of our own tree representation; remove interior
    mutability in element structs; make the gradients and patterns
    code less repetitive.
  + Update some dependencies.
  + Fix static linking and Windows builds.
- Drop rsvg-view subpackage and pkgconfig(gtk+-3.0) BuildRequires
  and obsolete it from main library following upstream changes.
- Add new rsvg-convert subpackage for the convert tool previously
  packaged in rsvg-view.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425606">- Update to version 2.45.90:
  + New API functions:
  - rsvg_handle_render_document().
  - rsvg_handle_render_layer().
  - rsvg_handle_render_element().
  - rsvg_handle_get_geometry_for_layer().
  - rsvg_handle_get_geometry_for_element().
  + CairoRenderer in the librsvg_crate has corresponding functions
    as well.
  + Fix builds with gettext ? 0.20.
  + If the C API is called out of order, downgrade hard panics to
    g_critical() to cope with incorrect/old applications that
    called rsvg_handle_get_dimensions() before
    rsvg_handle_close().
  + API reference documentation is much improved.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425607">- Update to version 2.45.92:
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#500: Added additional SVG blend-modes
    for the feBlend filter primitive.
  + Some changes in the build structure to allow for faster builds.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.46.0:
  + All of librsvg.so is now implemented in Rust! That is, except
    for a very thin wrapper over the public API functions.
    Hopefully we can remove this wrapper when Cargo gets some more
    features around controlling the linking step. This release
    requires at least Rust 1.34.
  + Librsvg now comes with a Rust crate that can be used from Rust
    applications. See librsvg_crate/examples. This Rust API is
    designed to be idiomatic; if you want a Rust binding to the
    shared library instead, please use the "rsvg-rs" crate from
    crates.io.
  + The following API functions are new in the C library:
  - rsvg_handle_get_intrinsic_dimensions()
  - rsvg_handle_render_document()
  - rsvg_handle_render_layer()
  - rsvg_handle_render_element()
  - rsvg_handle_get_geometry_for_layer()
  - rsvg_handle_get_geometry_for_element()
  - Correspondingly, there is a new chapter in the documentation,
    called "Recommendations for Applications". These new APIs
    conform better with the web platform's idea of how SVG
    sizing/positioning should work. Applications should now find
    it easier to scale and render SVGs in a single call, instead
    of having to obtain image dimensions first.
  + A bunch of functions have been deprecated but are still
    available:
  - rsvg_handle_write()/close() are deprecated in favor of the
    stream functions. Unfortunately the write()/close() pair
    require buffering the entire document, in case it is a .svgz
    compressed file; the streaming functions do not have this
    problem.
  - Functions that return RsvgDimensionData and RsvgPositionData
    are deprecated, since they just use integers instead of
    floating point numbers. They are replaced with the
    _get_geometry_*() functions above.
  + The library is a lot more strict now in terms of detecting that
    the API functions are called in the correct order. For example,
    calling rsvg_handle_get_dimensions() before rsvg_handle_close()
    will now emit a critical warning.
  + Librsvg is gradually moving towards using code from Mozilla's
    Servo. We haven't quite gotten rid of libcroco and libxml2 yet,
    but this is in progress.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 2.46.1:
  + Fix empty patterns which reference a fallback pattern with
    children.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571054400">- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 2.46.3:
  + glgo#GNOME/librsvg#516: Fix inadvertent bump in the minimum
    Rust version required. The string_cache crate is now pinned to
    a version that still works on Rust 1.34.
  + glgo#GNOME/librsvg#521: Compute geometries correctly if there
    is a viewBox attribute.
  + glgo#GNOME/librsvg#308: Fix stack exhaustion with circular
    references in &lt;use&gt; elements.
  + Consistently use the LGPL 2.1 wherever it is mentioned.
- Drop COPYING, everything is covered by COPYING.LIB now.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573041600">- Remove BuildRequires rust-std. The replacement rust-std-static
  is already required by rust.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1573128000">- Add patches to fix coloring of symbolic icons (glgo#GNOME/librsvg#525):
  * 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  * 0002-Compute-the-specificity-of-CSS-selectors.patch
  * 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1573560000">- Fix incorrect obsoletes for rsvg-view.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573646400">- Add explicit conflicts between rsvg-convert and rsvg-view &lt;=2.45.7.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 2.46.4:
  + Panic when reading an invalid stylesheet URL in an XML
    processing instruction.
  + Consider specificity when applying CSS selector matches.
  + Provide an usage example in the librsvg crate docs.
- Drop patches fixed upstream:
  + 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  + 0002-Compute-the-specificity-of-CSS-selectors.patch
  + 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1619179200">- Update to version 2.46.5:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
</package>
<package pkgid="07e002e92962fdcb9eb23866e81fd8b1b53e345c325d6e30b650212d7681f5f7" name="gdk-pixbuf-loader-rsvg-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.46.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1550318400">- Update to version 2.44.13:
  + Updated compilation docs for Debian.
  + Fix glgo#GNOME/librsvg#415: Register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557835200">- Update to version 2.44.14:
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.44.15:
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#462: Fix usage of std::f64::EPSILON for
    Rust 1.28.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#426: Detect files vs. URIs in
    rsvg_handle_new_from_file() on Windows.
  + Fix a memory leak in the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425601">- Update to version 2.45.3:
  + Big news! All the real work in the library is now implemented
    in Rust. The public API is implemented in C, but most it calls
    immediately into the Rust code.
  + rsvg_handle_set_base_uri() now really assumes that it is passed
    a URI. Previously it would try to differentiate between real
    URIs, and absolute or relative file paths. If this breaks your
    code (i.e. you are passing a filename, not a URI), please tell
    us so we can restore the old behavior!
  + Fix glgo#GNOME/librsvg#395: Don't panic in feMorphology if it
    ends up with a negative scaling transformation.
  + Fix glgo#GNOME/librsvg#398: Detect circular references in
    gradients.
  + Match the Firefox/Chrome behavior on gradients and patterns
    with circular references for fallbacks.
  + Fixes for Rust 1.30 and below.
  + Lots and lots of refactoring.
- Changes from version 2.45.2:
  + rsvg_cleaup() is now deprecated. This was only meant to be
    called from code to be checked by Valgrind. Leak checkers may
    show reachable memory from libxml2; real memory leaks should
    still be reported, of course.
  + As an experimental change, librsvg no longer calls
    xmlInitParser() from libxml2. Please tell us if this causes
    problems for multithreaded programs.
  + Added g_warning()s to ensure the API is called in the correct
    sequence.
  + The text handling code has been completely refactored and
    simplified. This will allow us to implement the x/y/dx/dy
    properties for multiple glyphs in the future. Please report any
    problems you experience in text rendering.
  + Fix glgo#GNOME/librsvg#385: Don't crash if there is no
    rsvg_handle_write() before rsvg_handle_close().
  + Fix glgo#GNOME/librsvg#391: Avoid undefined behavior when
    casting opaque pointers.
  + Fix crash when a linear RGB filter is followed by an SRGB
    filter.
  + Fix glgo#GNOME/librsvg#393: Stack overflow when freeing
    thousands of sibling elements.
  + Fix positioning of adjacent &lt;tspan&gt; elements.
  + All the toplevel loading and drawing code is implemented in
    Rust now.
  + Pixbuf conversion code is in Rust now.
  + Cleanups in the code for XML processing, markers, attributes.
  + Many build/link fixes.
  + Cleanups in the code that calls libxml2.
- Changes from version 2.45.1:
  + New public API, rsvg_handle_get_geometry_sub(), to get the
    exact geometry of an element. The functions
    rsvg_handle_get_position_sub() and
    rsvg_handle_get_dimensions_sub() are deprecated now; these
    returned incomplete data with integer coordinates.
  + rsvg_handle_write() and rsvg_handle_close() are now deprecated
    in favor of the functions which use a GInputStream. The former
    need to buffer the entire SVG data first; the latter don't need
    buffering.
  + Librsvg no longer tries to load XML entities which reference
    external resources, either parameter or general entities,
    declared in the DTD. This never worked properly, and it is
    better to do so via the xi:include mechanism. Also, unparsed
    external entities with a notation are not really supported in
    SVG; it has its own &lt;image&gt; element and similar for that
    purpose. Only internal general entities are supported now, for
    example:
  - &lt;!ENTITY foo "&lt;some xml here&gt;"&gt;.
  - &lt;!ENTITY bar "some text here"&gt;.
  + Started support for localized error messages.
  + Ported to Rust: loading code, XML processing code, data: URL
    parsing.
  + Many code cleanups and refactorings.
  + Fix undefined behavior in casts.
  + Cairo/Rust API updates.
  + configure.ac cleanups.
- Add lang_package macro/subpackage, librsvg now have translations.
- Add a librsvg_sover define and set it to 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425602">- Update to version 2.45.4:
  + Fix glgo#GNOME/librsvg#402: Fix the library's soname.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425603">- Update to version 2.45.5:
  + At build time, you can now pass $CARGO and $RUSTC environment
    variables if you need to override the default Rust toolchain.
    Please see COMPILING.md for details.
  + Fix glgo#GNOME/librsvg#405: In the gdk-pixbuf loader, don't
    crash if the write() function doesn't receive a GError.
  + Fix glgo#GNOME/librsvg#268: Remove the comp-op property; it's
    not in SVG 1.1 nor SVG 2.
  + Fix glgo#GNOME/librsvg#415: register RsvgHandleFlags and the
    RsvgError enum values in a thread-safe fashion.
  + All of the library's non-GObject functionality is implemented
    in Rust now.
  + Update the cairo crate.
  + Clean up the loading code paths.
  + Updated compilation docs for Debian.
  + Updated parts of the reference documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425604">- Update to version 2.45.6:
  + Librsvg now requires Rust 1.30.0 or later.
  + Librsvg now requires Cairo 1.16.0 or later.
  + This version introduces librsvg_crate, an idiomatic Rust crate
    for using librsvg from Rust programs directly, without using
    GObject machinery. This API is subject to change, but you can
    start using it now in an experimental fashion.
  + All of the librsvg internals are now in Rust! The C code is
    just a thin wrapper over Rust functions.
  + The internals library has been converted to Rust 2018.
  + Within librsvg_crate, there is a new infrastructure for doing
    reftests in Rust, that does not depend on PNG reference files.
    See librsvg_crate/tests for details.
  + This release introduces the following new APIs:
  - rsvg_handle_get_intrinsic_dimensions(),
  - rsvg_handle_get_geometry_for_element().
  + Parsing of the "style" attribute, which has a plain list of CSS
    property declarations, is now done with rust-cssparser.
  + CSS selector matching should be marginally faster than before.
  + Fix Visual Studio builds.
  + Fix glgo#GNOME/librsvg#11: Respect the "direction" property for
    bidirectional text.
  + Fix glgo#GNOME/librsvg#295: Ensure the initial viewport fits
    into temporary surfaces for compositing.
  + Fix glgo#GNOME/librsvg#425: Don't fail parsing if the system's
    locale is broken.
  + Fix glgo#GNOME/librsvg#438, glgo#GNOME/librsvg#443: Don't
    create intermediate raster surfaces unless absolutely needed.
    This was causing blurred output for SVGs from Inkscape and
    Illustrator, since they include an "enable-background" property
    even when there are no filters in use.
  + Fix glgo#GNOME/librsvg#443: Fix blurry output when
    enable-background is used without filters.
  + Fix glgo#GNOME/librsvg#455: Fix rounding error on i386.
  + Check for Cairo errors when constructing paths.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425605">- Update to version 2.45.8:
  + This version requires at least Rust 1.34.
  + Fix build on Rust earlier than 1.36.
  + Update gtk-rs and dependent crates.
- Changes from version 2.45.7:
  + Don't panic if an SVG has character data outside the first
    element.
  + Don't panic when there's an xi:include fallback with no parent
    element.
  + Fix blurry semi-opaque objects when rendering with a scaled
    transformation.
  + Don't ignore the first x/y/dx/dy in text/tspan elements if
    there is more than one position specified.
  + In librsvg_crate, SvgHandle now has a ::has_element_with_id()
    method.
  + rsvg-convert now catches the case where the SVG has no
    dimensions.
  + This version no longer contains the rsvg-view program, so
    librsvg no longer depends on GTK.
  + The poly element no longer supports "verts" as an alias for the
    "points" attribute. The "verts" name was only used in SVG
    pre-1.0, and we had been cargo-culting that name ever since.
  + We now use more machinery from Mozilla Servo, in this case the
    markup5ever and rust-selectors crates. This is in line with
    gradually replacing libcroco with a Rust-only CSS machinery.
  + Lots and lots of refactoring and cleanups: use the rctree crate
    instead of our own tree representation; remove interior
    mutability in element structs; make the gradients and patterns
    code less repetitive.
  + Update some dependencies.
  + Fix static linking and Windows builds.
- Drop rsvg-view subpackage and pkgconfig(gtk+-3.0) BuildRequires
  and obsolete it from main library following upstream changes.
- Add new rsvg-convert subpackage for the convert tool previously
  packaged in rsvg-view.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425606">- Update to version 2.45.90:
  + New API functions:
  - rsvg_handle_render_document().
  - rsvg_handle_render_layer().
  - rsvg_handle_render_element().
  - rsvg_handle_get_geometry_for_layer().
  - rsvg_handle_get_geometry_for_element().
  + CairoRenderer in the librsvg_crate has corresponding functions
    as well.
  + Fix builds with gettext ? 0.20.
  + If the C API is called out of order, downgrade hard panics to
    g_critical() to cope with incorrect/old applications that
    called rsvg_handle_get_dimensions() before
    rsvg_handle_close().
  + API reference documentation is much improved.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425607">- Update to version 2.45.92:
  + Fix glgo#GNOME/librsvg#496: Ensure all lengths and angles parse
    as finite numbers.
  + Fix glgo#GNOME/librsvg#497: Don't panic on paths with
    all-invalid commands.
  + Fix glgo#GNOME/librsvg#500: Added additional SVG blend-modes
    for the feBlend filter primitive.
  + Some changes in the build structure to allow for faster builds.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.46.0:
  + All of librsvg.so is now implemented in Rust! That is, except
    for a very thin wrapper over the public API functions.
    Hopefully we can remove this wrapper when Cargo gets some more
    features around controlling the linking step. This release
    requires at least Rust 1.34.
  + Librsvg now comes with a Rust crate that can be used from Rust
    applications. See librsvg_crate/examples. This Rust API is
    designed to be idiomatic; if you want a Rust binding to the
    shared library instead, please use the "rsvg-rs" crate from
    crates.io.
  + The following API functions are new in the C library:
  - rsvg_handle_get_intrinsic_dimensions()
  - rsvg_handle_render_document()
  - rsvg_handle_render_layer()
  - rsvg_handle_render_element()
  - rsvg_handle_get_geometry_for_layer()
  - rsvg_handle_get_geometry_for_element()
  - Correspondingly, there is a new chapter in the documentation,
    called "Recommendations for Applications". These new APIs
    conform better with the web platform's idea of how SVG
    sizing/positioning should work. Applications should now find
    it easier to scale and render SVGs in a single call, instead
    of having to obtain image dimensions first.
  + A bunch of functions have been deprecated but are still
    available:
  - rsvg_handle_write()/close() are deprecated in favor of the
    stream functions. Unfortunately the write()/close() pair
    require buffering the entire document, in case it is a .svgz
    compressed file; the streaming functions do not have this
    problem.
  - Functions that return RsvgDimensionData and RsvgPositionData
    are deprecated, since they just use integers instead of
    floating point numbers. They are replaced with the
    _get_geometry_*() functions above.
  + The library is a lot more strict now in terms of detecting that
    the API functions are called in the correct order. For example,
    calling rsvg_handle_get_dimensions() before rsvg_handle_close()
    will now emit a critical warning.
  + Librsvg is gradually moving towards using code from Mozilla's
    Servo. We haven't quite gotten rid of libcroco and libxml2 yet,
    but this is in progress.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 2.46.1:
  + Fix empty patterns which reference a fallback pattern with
    children.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571054400">- Update to version 2.46.2:
  + Patterns and gradients reused across more than one element will
    only get resolved once now; this should make things marginally
    faster for patterns or gradients with fallbacks.
  + glgo#GNOME/librsvg#515: Librsvg now has limits on the number of
    loaded XML elements, and the number of referenced elements
    within an SVG document. This is to mitigate malicious SVGs
    which try to consume all memory, and those which try to consume
    an exponential amount of CPU time.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571832000">- Update to version 2.46.3:
  + glgo#GNOME/librsvg#516: Fix inadvertent bump in the minimum
    Rust version required. The string_cache crate is now pinned to
    a version that still works on Rust 1.34.
  + glgo#GNOME/librsvg#521: Compute geometries correctly if there
    is a viewBox attribute.
  + glgo#GNOME/librsvg#308: Fix stack exhaustion with circular
    references in &lt;use&gt; elements.
  + Consistently use the LGPL 2.1 wherever it is mentioned.
- Drop COPYING, everything is covered by COPYING.LIB now.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573041600">- Remove BuildRequires rust-std. The replacement rust-std-static
  is already required by rust.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1573128000">- Add patches to fix coloring of symbolic icons (glgo#GNOME/librsvg#525):
  * 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  * 0002-Compute-the-specificity-of-CSS-selectors.patch
  * 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1573560000">- Fix incorrect obsoletes for rsvg-view.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573646400">- Add explicit conflicts between rsvg-convert and rsvg-view &lt;=2.45.7.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 2.46.4:
  + Panic when reading an invalid stylesheet URL in an XML
    processing instruction.
  + Consider specificity when applying CSS selector matches.
  + Provide an usage example in the librsvg crate docs.
- Drop patches fixed upstream:
  + 0001-croco.rs-Add-struct-definition-for-CRSimpleSel.patch
  + 0002-Compute-the-specificity-of-CSS-selectors.patch
  + 0003-525-Consider-specificity-when-applying-CSS-selector-.patch</changelog>
  <changelog author="Federico Mena Quintero &lt;federico@suse.com&gt;" date="1619179200">- Update to version 2.46.5:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
</package>
<package pkgid="f8eccae8a6d9ec03f57df60b258c40b17af5a07b016825dab420385e5cbb2f0b" name="gdk-pixbuf-query-loaders-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="abb64f8e858fd72e7f480e673d38dec58e03718f77387a7d7e36ff7266303aef" name="gdk-pixbuf-query-loaders-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="d5811668442a288a11946c551a1038856db5e5698e066f33a72cc990d25496f4" name="gdk-pixbuf-query-loaders-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="0e0627358d9a1551bdde76acf86a957bec4891640d93521db7333ac1667522a0" name="gdk-pixbuf-thumbnailer-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="4780c81c725bfdb335cd896599cff6caecfb994e848b38b2f170eeac5e68f7bc" name="gdk-pixbuf-thumbnailer-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.0" rel="lp152.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries and RPM categories.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Update to version 2.36.10:
  + build: meson build improvements.
  + build: win32 build fixes.
  + tests: show error before failing (bgo#786259).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1507032000">- Update to version 2.36.11:
  + Build:
  - Fix tiff loader build (bgo#786342).
  - Prefer newer libpng (bgo#786035).
  + Use a free reference images for tests (bgo#787050).
  + gif: fail quickly if image dimensions are too big (bgo#785973).
  + xlib: Avoid an out-of-bounds error on bigendian (bgo#775896).
  + Updated translations.
- Drop u_contrib-gdk-pixbuf-xlib-Fix-rgb888amsb.patch: fixed
  upstream.
- Add gdk-pixbuf-rpmlintrc: filter gdk-pixbuf-devel.*: W:
  non-conffile-in-etc /etc/rpm/macros.gdk-pixbuf.</changelog>
  <changelog author="mgorse@suse.com" date="1515153600">- Add gdk-pixbuf-bgo779012-ico-overflow.patch: fix a potential
  integer overflow (boo#1027026 CVE-2017-6312).
- Add gdk-pixbuf-gif-negative-array-indexes.patch and
  gdk-pixbuf-gif-uninitialized-variable.patch: protect against
  access to negative array indexes (BGO#778584).
- Add gdk-pixbuf-tiff-overflow.patch: avoid overflow during size
  computation (bgo#779020).
- Add gdk-pixbuf-icns-handle-short-blocklen.patch: protect against
  short block length when reading icns (boo#1027024
  CVE-2017-6313).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1523361600">- Update to version 2.36.12:
  + gif, ico, jpeg, tiff, icns: various fixes (bgo#778584,
    bgo#779012, bgo#753605, bgo#779020, bgo#779016).
  + Implement async loading without threads.
  + Updated translations.
- Rename with_docs meson option to docs, following usptream change.
- Drop fixed upstream patches:
  gdk-pixbuf-bgo779012-ico-overflow.patch,
  gdk-pixbuf-gif-negative-array-indexes.patch,
  gdk-pixbuf-gif-uninitialized-variable.patch,
  gdk-pixbuf-tiff-overflow.patch and
  gdk-pixbuf-icns-handle-short-blocklen.patch.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1529496000">- Update to version 2.37.0:
  + Plug a memory leak when using GBytes (bgo#787626).
  + Fix introspection annotations (bgo#789935).
  + Fix OOB error when dithering (bgo#748211).
  + Drop the MMX assembly optimizations for pixops.
  + Improve compatibility for the post-install script (bgo#795705).
  + Expose the dimensions of the original image from
    GdkPixbufLoader (bgo#778517).
  + Improve thumbnailer implementation (bgo#778517).
  + Generate separate introspection data for GdkPixdata API
    (glgo#GNOME/gdk-pixbuf#72).
  + Deprecate GDK_INTERP_HYPER (glgo#GNOME/gdk-pixbuf#3).
- Pass installed_tests as false to meson to make sure we don't ship
  unnecessary tests.
- Add typelib-1_0-GdkPixdata GI subpackage and require it on the
  devel package, following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531051200">- Pass all options to meson, ensure we build gdk-pixbuf with the
  features we want.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534939200">- Update to version 2.37.92:
  + Ensure that GdkPixbuf's storage is safely handled.
  + Add test case for buffer overflow in pixdata loader.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536494400">- Update to version 2.38.0:
  + Stable release.
  + Documentation fixes.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551355200">- Update to version 2.38.1:
  + Fix OOM in JPEG2000 loader.
  + Fix thumbnailing of animated GIFs.
  + Multiple improvements to the GIF loader.
  + Fix introspection generation.
  + Fix error handling in PNG loader.
  + Improve reproducibility of the build.
  + Speed up saving PNG files.
  + Add variables in the pkg-config files for binary utilities.
  + Build fixes.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568030400">- Update to version 2.38.2:
  + build: Remove unnecessary argument.
  + gif: Suppress last deprecation warning.
  + tests:
  - Disable deprecation warnings for GTimeVal.
  - Add test for issue 95.
  - Add test image for invalid XPM data.
  + Disable deprecation warnings for GTimeVal.
  + Use the monotonic clock instead of wall one.
  + xpm:
  - Fail when XPM file doesn't contain enough data.
  - Simplify error path.
  - Sanity check XPM file dimensions.</changelog>
  <changelog author="mgorse@suse.com" date="1568030401">- Update to version 2.39.2:
  + Add gdk_pixbuf_init_modules() for applications with GdkPixbuf
    loader modules in a separate directory.
  + Add subproject fallback for dependencies.
  + Handle large XPM without crashing.
  + Use the appropriate gdk-pixbuf-query-loaders on install.
  + Disable deprecation warnings introduced by GLib 2.62.
  + Escape GIF version in error messages.
  + Render GIF frames on demand.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 2.40.0:
  + Allow creating a GdkPixbuf instance without any property.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1580385600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1582545600">- A file tests/test-images/gif-test-suite/max-width.gif from the
  test suite is correctly identified by clamav to be a malicious
  BC.Gif.Exploit.Agent-1425366.Agent. This is an intentional part
  of the test suite to ensure it has no negative side effects.
  On SLE, the package is built with clamav scanning, which then
  prevents a successful build. This change repacks the source
  package to a password-protected zip to bypass the clamav scanning
  for SLE (bsc#1159337), with following update:
  + Download upstream tarball through source service
  + Add pre_checkin.sh to convert tarball to zip file
  + Update spec-file to use the zip file as main source</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1595851200">- Add gdk-pixbuf-boo1174307-io-gif-overflow.patch: Avoid overflows
  by checking the memset length argument (boo#1174307).
- Raise dependency glib-2.0 version.</changelog>
  <changelog author="Jia Zhaocong &lt;zcjia@suse.com&gt;" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
</package>
<package pkgid="10c67df88c2d07c5977408c6a22568e397952f000b553f93dc9e49d55224f9f5" name="gdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.12.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1609761600">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Fix switching user issue(bsc#1179968, bsc#1174533).</changelog>
</package>
<package pkgid="bf214a0fe5e82c6667ee910266fbb953609397cdec5f2cb82790e7b56c88fe84" name="gdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.15.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1609761600">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Fix switching user issue(bsc#1179968, bsc#1174533).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1610971200">- Add gdm-fix-crash-when-using-Xvfb.patch: For some reason gdm
  fails to get display and does not set it to NULL when using
  with Xvfb, and it leads into a crash, this patch sets display
  to NULL by default. (bsc#1178292, glgo#GNOME/gdm!118)</changelog>
</package>
<package pkgid="6f8ee20c4e37a5adeef77e40927bb0d93d37b254736bcd1d318e2f9bb3a6de61" name="gdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.3.1"/>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557403200">- New solution for auto login problem(bsc#1116011)
  + Drop gdm-revert-commit-39fb4ff.patch
  + Add reserveVT.conf file.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch (bsc#1120307)</changelog>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
</package>
<package pkgid="925073713a684adb0493e3c6c25f4457c3ebe107eae0c42adfa6f8a855628a38" name="gdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.6.1"/>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch (bsc#1120307)</changelog>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
</package>
<package pkgid="ac204260e66ae4bf75fa052637e7a0e950328aeb04eba7132b66852c18271db8" name="gdm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.9.1"/>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
</package>
<package pkgid="e3216d0b5efa313dca4a80e67e53ff446039abf0ff0d10b6c2c0f9d9b8c61f17" name="gdm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.12.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1609761600">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Fix switching user issue(bsc#1179968, bsc#1174533).</changelog>
</package>
<package pkgid="3441f62d813422d6e0e868bc35fd5ef8275319dcfdb0a7a37418d990645717f5" name="gdm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.15.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1609761600">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  Fix switching user issue(bsc#1179968, bsc#1174533).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1610971200">- Add gdm-fix-crash-when-using-Xvfb.patch: For some reason gdm
  fails to get display and does not set it to NULL when using
  with Xvfb, and it leads into a crash, this patch sets display
  to NULL by default. (bsc#1178292, glgo#GNOME/gdm!118)</changelog>
</package>
<package pkgid="d3827442187725d7003b80c811f102259e928b949117ba1b4350bb090dae7b21" name="gdm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.3.1"/>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557403200">- New solution for auto login problem(bsc#1116011)
  + Drop gdm-revert-commit-39fb4ff.patch
  + Add reserveVT.conf file.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch (bsc#1120307)</changelog>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
</package>
<package pkgid="b2aad1d3a33056a8e2a29939306cf1efda07059d67f07bf5e206f91a47c1e422" name="gdm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.6.1"/>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1557921600">- Update gdm-switch-to-tty1.patch (bsc#1120307)</changelog>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
</package>
<package pkgid="94d0ef152dfe94406d2b05f507ae3662bd336f7de8bf62d9c28cfa6def638adb" name="gdm-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.1" rel="lp152.6.9.1"/>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Make systemd service file optional instead of outright deleting it.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Fixup gdm.tmpfiles (boo#1135272).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+2:
  + Remove erroneous NULL from session search directories.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.
- Refresh patches with quilt.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1567339200">- Update to version 3.33.90:
  + Update for changes to gnome-settings-daemon.
  + initial-setup permissions fix.
  + allow users to set PATH from ~/.config/environment.
  + support systemd user sessions.
  + misc warning fixes.
  + leak fix in libgdm.
  + vt changing fix.
  + drop some deprecations.
  + drop unused icons.
  + Translation updates.
  + Changes in version 3.33.4:
  + Fix session search directories.
  + Kill user sessions when stopping gdm.
  + Add way for sessions to register when they successfully started
  + Translation updates.
- Rebased gdm-xauthlocalhostname.patch and
    gdm-disable-gnome-initial-setup.patch.
- Drop gdm-fails-to-restart-gnome-shell.patch,
  gdm-kill-user-session.patch, and
  gdm-remove-duplicate-sessions.patch: fixed upstream.
- Drop icons and pixmaps from files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Fix typo in debug message
  + Revert vt changing fix, because it exposes logind bug and it
    wasn't quite right anyway
  + Ensure login screen gets reaped when user switching
  + Translation updates</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1568808000">- Update gdm-switch-to-tty1.patch: switch tty after plymouth
  terminates.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + De-duplicate sessions on pure Xorg too.
  + Fix fast user switching by assuming the login screen VT is
    always the initial one.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1570536000">- Add gdm-initial-setup-hardening.patch: Introduce a persistent
  state file to prevent gnome-initial-setup from running if any
  regular users has previously logged into the system, replacing
  the current runtime state file that pervents initial-setup from
  running more than once per boot, so as to reduce the security
  attack surface.
  Make this fix openSUSE only for now as upstream discussion is
  heading another way involving more complicated mechanisms
  (boo#1140851, glgo#GNOME/gnome-initial-setup#76).
- Rebase gdm-disable-gnome-initial-setup.patch.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1573214400">- Add gdm-switch-user-tty7.patch: Switch to tty7 when switch user
  (bsc#1155408 glgo#GNOME#gdm#532).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1574164800">- Drop gdm-disable-wayland-for-proprietary-nvidia-machines.patch:
  fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Add --enable-systemd-journal for both SLE and Tumbleweed
  (jsc#SLE-10383).</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh SLE patch gdm-s390-not-require-g-s-d_wacom.patch.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583323200">- Add gdm-disable-wayland-on-mgag200-chipsets.patch: disable wayland
  on mgag200 chipsets, this patch used to be part of
  gdm-disable-wayland-on-unsupported-chipsets.patch which was dropped,
  however the mgag200 part is still not fixed by upstream. So we should
  keep this part to make sure GNOME works properly on mgag200 chipsets
  (bsc#1162888, glgo#GNOME/mutter#57).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586520000">- Add gdm-look-for-session-based-on-pid-first.patch: Look for
  session based on pid first, then fall back to the uid based
  approach (bsc#1159950, glgo#GNOME/gdm#526).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1587556800">- Disable gnome-initial-setup under gdm mode in Leap and SLE
  (jsc#SLE-11856).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1590494400">- Update gdm-add-runtime-option-to-disable-starting-X-server-as-u.patch:
  When user session reuses tty7 same as greeter session, gdm
  doesn't bring up the greeter session after switching from other
  tty to tty7 (bsc#1171290).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1598356800">- Add gdm-enable-Wayland-on-Cirrus.patch: Update udev rules to
  enable Wayland on Cirrus (bsc#1168515, glgo#GNOME/gdm#586).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1605268800">- Add gdm-display-Exit-with-failure-if-loading-existing-users-fails.patch:
  Exit with failure if loading existing users fails
  (bsc#1178150 glgo#GNOME/gdm!117 CVE-2020-16125).
- Update gdm-disable-gnome-initial-setup.patch</changelog>
</package>
<package pkgid="92c9af106b3130ff95924da922ef2dc3a3690fefb9381e2c83fdf2bc835df938" name="gettext-runtime-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="c163b720de1202f390531984bc053db873bd5dfc4606f62cf65827311184a650" name="gettext-runtime-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="89374406c1ed4ec8e15bdee9cfc2dcb36176c38ebf314c51b531eea1cdae3119" name="gettext-runtime-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="d149cd433139c15bf241b5c3f062a829b1d2ff8b946962516eb39829b93acc97" name="gettext-runtime-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="c205eed7a53fa174a82ab4f086985d6e2a98d54ffe8d09633af411bd35b37507" name="gettext-runtime-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="1a767cbd6c9d6464f56549ef55d6cf7d51e380f24b26b89a77d8f48d9c3644e7" name="gettext-runtime-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="922b19ac0f7f58c8920cc79b431dc0d990467ebb53cb42876d38a7bed3a794ea" name="gettext-runtime-debugsource" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="cf1a5840fc1470fd68129de4e00d490f2a165aa24615be6620575b67f6f5aadc" name="gettext-runtime-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="5aa8bb5bbf0283b0d8716f0961241e68e2423039d6dd5007bf9f131e7b6702a6" name="gettext-runtime-debugsource" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="b20b46b2e5a59f947e6adabe446add6427b7e804d4c40f5746090f57d2868679" name="gettext-runtime-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="b6f80416e211304a34b7f16d365df6236a6360f3642d137e782241a7ca05addf" name="gettext-runtime-mini-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="497c1473a2e781ba3dfeb0346ca0dd82e9cb5cd42cb41b48f185ddd38e3adb4a" name="gettext-runtime-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="9e56b3eba92eaf8451b512f6e916d33c3d7dc30b961e7e81a288d89d620987a9" name="gettext-runtime-mini-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="de95ffee238542d8b8d352ba229f97500cb4cdb2a6035b6dc155c391d7f84614" name="gettext-runtime-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="1be48493a0e0d6e42c495f0bb1f2cec179cd471f7aded28083b02275fcde3506" name="gettext-runtime-mini-debugsource" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="e0b05d4e287de7fa8602f81bc2d47e68227df28487f7da7e6f2f2735af66ef64" name="gettext-runtime-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="a1a96bfdc1bf83365d3f88688e9d005591b92c4c15d526f76886fb9ed358bf29" name="gettext-runtime-mini-debugsource" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="79eca1994bbbb44091d1d60e43dec604f15cbde9f929a835cf5a2ce236619e03" name="gettext-runtime-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="75cd40264f45e91c5cc42726ef52d991e8988b5a57b3ace68c63866e82bdcc56" name="gettext-tools-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="03625329294e75ed051beec258a037bfb43b3d3fec0ee73c017dca7932bb4c15" name="gettext-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="2c909fa3be4c2aefbc7eec789c5e1073aaf442c51cfdc988163036172c0fb6d6" name="gettext-tools-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="90a835aaebf02f044536006d5d7562e5f03e2e7701b4a226b541af736039bb79" name="gettext-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="409f8a5abe01980cd6010a1eee768814eb89be8539673838beb2aa3e4ffefa8b" name="gettext-tools-mini-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="2196d5a464b19dc28e3392de87bfac2737d4ed3b874b07aeee076fff84d3f9a8" name="gettext-tools-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1419768000">- fix 'echo -e' in cvs.sh script that may be unsupported in some
  POSIX-complete shells
- add patches:
  * gettext-0.19.3-fix-bashisms.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
</package>
<package pkgid="a915d6234de5caa7f1b25015fb89afd4893dff68419751680e3d341de6ce0ccd" name="gettext-tools-mini-debuginfo" arch="i586">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="54355fe90ca180426f582e3d2769a70c2da3105da3e5b990ce7156579080f46d" name="gettext-tools-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.8.1" rel="lp152.6.6.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1422360000">- GNU gettext 0.19.4:
  * The --keyword option of xgettext now accepts same argument
    number for both singular and plural forms.
  * Programming languages support:
  - C#: xgettext now properly handles Unicode characters encoded
    with surrogate pairs.
  - C/C++: xgettext now recognizes ISO/IEC 9899:2011 string
    literals prefixed by R, u8, u8R, u, uR, U, UR, L, or LR.
  - Shell: xgettext now properly recognizes Bash ANSI-C quoting
    ($'...').
  * Bug fixes:
  - Fix integer overflow when reading certain MO files with
    msgunfmt.
  - Avoid invalid memory access in various cases.  In particular,
    when the same argument number is specified for singular/
    plural arguments, and when checking Lisp and Scheme format
    strings.</changelog>
  <changelog author="mlin@suse.com" date="1425988800">- Add gettext-check-allocated-size-for-static-segment.patch from upstream
  * Check if the embedded segment size is valid, before adding it to
    the string length. Please see
    http://lists.gnu.org/archive/html/bug-gettext/2015-03/msg00005.html</changelog>
  <changelog author="astieger@suse.com" date="1436529600">- GNU gettext 0.19.5:
  * xgettext: feature to perform syntax checks on msgid, via
  - -check option or "xgettext: " commentgs
  * msgfilter, msgexec: new option --newline
  * The base Unicode standard is now updated to 8.0.0.
  * msginit is now capable of generating "Plural-Forms:" from
    Unicode CLDR. Via  GETTEXTCLDRDIR environment variable.
  * Improved Programming languages support
  * drop gettext-check-allocated-size-for-static-segment.patch,
    is upstream</changelog>
  <changelog author="astieger@suse.com" date="1437048000">- GNU gettext 0.19.5.1:
  * fix build on old platforms where stpcpy and stpncpy is missing</changelog>
  <changelog author="mlin@suse.com" date="1437480000">- Add gettext-0.19.5.1-gettextize.diff
  * workaround gettextize in gettext 0.19.5.1, see
    http://lists.gnu.org/archive/html/bug-gettext/2015-07/msg00027.html</changelog>
  <changelog author="i@marguerite.su" date="1440417600">- add patch: boo941629-unnessary-rpath-on-standard-path.patch
  * config.rpath from gettext-tools will set rpath for ELF binaries
    not in /usr/lib, even if it's the standard path the linker
    would search anyway.</changelog>
  <changelog author="astieger@suse.com" date="1441972800">- GNU gettext 0.19.6:
  * Support AppData file format
  * New macro AM_GNU_GETTEXT_REQUIRE_VERSION
  * po/Makefile.in.in can now insert the file $(DOMAIN).pot-header
    to $(DOMAIN).pot, instead of the standard header comments.
  * Fix mishandling of gettext version numbers for minor releases, in
    po-mode.el and gettextize.
  * Fix build with --enable-relocatable.
- remove no longer required gettext-0.19.5.1-gettextize.diff</changelog>
  <changelog author="sbrabec@suse.com" date="1449576000">- Recommend  bison-lang by gettext-tools, as it is used by them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1460462400">- Add gettext-runtime-grep-2.24.patch: Fix test suite with
  grep 2.24 (https://savannah.gnu.org/bugs/index.php?47674).</changelog>
  <changelog author="astieger@suse.com" date="1460894400">- GNU gettext 0.19.7:
  * can now load custom string extraction rules in XML
    Internationalization Tag Set (ITS) standard
  * the existing XML-based language scanners (Glade, GSettings, and
    AppData) rewritten using ITS
  * Add msgfmt --xml option to merge translations back to the
    original XML document.</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- drop gettext-runtime-grep-2.24.patch, no longer required for 2.25</changelog>
  <changelog author="astieger@suse.com" date="1465646400">- GNU gettext 0.19.8:
  * msgfmt now produces little-endian .mo files by default.
  * xml: xgettext and msgfmt now look for .its files in directories
    supplied through the GETTEXTDATADIRS or XDG_DATA_DIRS
    environment variable.
  * JavaScript: xgettext and msgfmt now recognize numbered
    arguments in format strings.</changelog>
  <changelog author="astieger@suse.com" date="1466337600">- GNU gettext 0.19.8.1:
  * Fix unintentional soname bump</changelog>
  <changelog author="bwiedemann@suse.com" date="1493985600">- Add msgfmt-remove-pot-creation-date.patch
  to enable reproducible builds of packages using gettext-runtime
  such as dfc, e2fsprogs and acl</changelog>
  <changelog author="dimstar@opensuse.org" date="1498910400">- Explicitly call autoreconf, as we have patches touching the build
  system. Implicit calling automake/autoconf works only as long as
  the version on the system is the same as was used to bootstrap
  originally.</changelog>
  <changelog author="dimstar@opensuse.org" date="1500292800">- Ignore rpm-build's dependency on gettext-tools while building
  the -mini variant: before gettext-runtime-mini is built, there is
  no provider of this symbol in a bootstrap cycle.</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1537358400">- Add patch msgfmt-reset-msg-length-after-remove.patch
  which does reset the length of message string after a line
  has been removed (boo#1106843)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1564401600">- Added msgfmt-double-free.patch to fix a double free error
  (CVE-2018-18751 bsc#1113719)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1594209600">- Fix boo941629-unnessary-rpath-on-standard-path.patch (boo#941629)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1599739200">- Added gettext-0.19.8.1-fix-uninitialized-free.patch (boo#1176142)</changelog>
</package>
<package pkgid="99ed601eced00a9dbda283fa4165a720444977e309cb208103c8803a5ff2da29" name="gfio-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.23" rel="lp152.6.3.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Correct bash location in genfio</changelog>
  <changelog author="mpluskal@suse.com" date="1515412800">- Update to version 3.3:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.3.shortlog.txt</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to version 3.4:
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.4.shortlog.txt
- simplify build and install</changelog>
  <changelog author="lmb@suse.com" date="1520424000">- Enable building of the rbd support on aarch64 for SLE (bsc#1083445)</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Rework conditionals
- Update spec file with spec-clener</changelog>
  <changelog author="jeffm@suse.com" date="1522324800">- Allow to build on SLE11 again:
  - %licence -&gt; %doc on old rpm
  - No dependencies on libnuma (i386), librbd, and libpmem.</changelog>
  <changelog author="jeffm@suse.com" date="1522324801">- Update license tag to read "GPL-2.0"</changelog>
  <changelog author="olaf@aepfle.de" date="1524657600">- Replace hardcoded dependency to python2.7, which does not exist
  in SLE_11, with python2 via fio.python2.patch</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536321600">- Update to version 3.9
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.9.shortlog.txt</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1536926400">- Update to version 3.10
  * For detailed list of changes see:
    http://brick.kernel.dk/snaps/fio-3.10.shortlog.txt
- Switch to building with openssl</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1537358400">- Remove duplication from build macros
- Disable building for native host to avoid illegal instruction crashes</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1537531200">- Do not use libressl</changelog>
  <changelog author="jkohoutek@suse.com" date="1542196800">- Update to version 3.12:
  * no upstream changelog available</changelog>
  <changelog author="Lars Marowsky-Bree &lt;lmb@suse.com&gt;" date="1550836800">- Update to version 3.13:
  * Shortlog: http://brick.kernel.dk/snaps/fio-3.13.shortlog.txt</changelog>
  <changelog author="terekhov &lt;termim@gmail.com&gt;" date="1562155200">- Update to version 3.14:
  * no upstream changelog available</changelog>
  <changelog author="dsterba@suse.cz" date="1570536000">- Update to version 3.16:
  * new: NBD support
  * new: ZBD support
  * for the rest see http://brick.kernel.dk/snaps/fio-3.16.shortlog.txt
- Added patches:
  * 0001-Fix-compilation-error-with-gfio.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1590062400">- Update to 3.19 (no changelog)
- Remove 0001-Fix-compilation-error-with-gfio.patch
- Remove fio.python2.patch</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Update to version 3.20:
  * No changelog available
- Add fio-gfio_main_ui.patch</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1595592000">- Update to 3.21 (no changelog)
- Remove fio-gfio_main_ui.patch</changelog>
  <changelog author="dsterba@suse.cz" date="1600084800">- Update to 3.23 (no changelog)</changelog>
</package>
<package pkgid="ef0dfdc77f31f2178d32e6ddd02cbe051933ff98efec6a5eb748a7a2db7fb215" name="gfs2-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="e45f83a6ec229528a7e1dc24051d87c1abf4819a9faadcf37d6c20b36878b83b" name="gfs2-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="3c2b9e74b5b09b220ae1e2fb3f41eabc08af43b23b9707df311a08876a0ee941" name="gfs2-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="20763c6cca30bec84442627211914ea58ebb95c629e50779f8031aa82e3ab756" name="gfs2-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="93e9b5b71653b233d42f56990e506f6713c1fec889bfbdc975e55a27d4c90d86" name="ghostscript-debuginfo" arch="i586">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="eef33064c078215f578c00bc12be29a2127ef8007c50d727e34e10a4c8626d3e" name="ghostscript-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="3a0404a8c24febd0ef37ea6a7519343d7b52d15a15b067dbaec92ef27f227c80" name="ghostscript-debugsource" arch="i586">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="02a68331880325e10a531b7a695a8d69ee18a2b7cceddf8ff2baa61535b9f32f" name="ghostscript-debugsource" arch="x86_64">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="536f936381722f803080d220dadff992868e23cc2e677754e223e181dec5a930" name="ghostscript-mini-debuginfo" arch="i586">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="371ec7bf04314422f659f0a1290be9f4e60891033ad90e98ec1b1bb34242c856" name="ghostscript-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="20a42a92ddc0cd3708178d0e29d27084023748f7d1059fecfc298883abbce3a6" name="ghostscript-mini-debugsource" arch="i586">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="beaabda9441ff068cd64cb32f5912e0ac05abe6926edd0c3b44153002adbcc83" name="ghostscript-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="3ec47cb97f6314f0e3599937a8611837efd067e1abc3defe18ea274f104a8f07" name="ghostscript-x11-debuginfo" arch="i586">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="55ddd7d443ce8615a7547da5eb916efabcabe1dfb32a10acb182cf13e4b15cc7" name="ghostscript-x11-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.52" rel="lp152.2.4.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
  <changelog author="jsmeix@suse.de" date="1536840000">- Version upgrade to 9.24
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised)
    real and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * As well as Ghostscript itself, jbig2dec has had a significant
    amount of work improving its robustness in the face of
    out specification files.
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS. LCMS2 is not thread safe, and cannot
    be made thread safe without breaking the ABI. Our fork
    will be thread safe, and include performance enhancements
    (these changes have all be been offered and rejected upstream).
    We will maintain compatibility between Ghostscript and LCMS2
    for a time, but not in perpetuity. Our fork will be available
    as its own package separately from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.24/News.htm
  For details see the News.htm and History9.htm files.
- fix_ln_docdir_gsdatadir.patch is no longer needed
  because the issue is fixed in the upstream sources.
- CVE-2018-10194.patch is no longer needed
  because the issue is fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1536840001">- Version upgrade to 9.25rc1 (first release candidate for 9.25).
  Highlights in this release include:
  * This release fixes problems with argument handling, some
    unintended results of the security fixes to the SAFER file
    access restrictions (specifically accessing ICC profile files),
    and some additional security issues over the 9.24 release.
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real
    and potential exploits.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * Avoid that ps2epsi fails with
    'Error: /undefined in --setpagedevice--'
    Recent changes required to harden SAFER mode mean that
    it is no longer possible to run ps2epsi in SAFER mode,
    because it relies upon unsafe Ghostscript non-standard
    extension operators.
    Removing SAFER and DELAYSAFER, and the code to reset SAFER,
    allow ps2epsi to run as well as it ever did (ie badly).
    This program (i.e. ps2epsi) should now be considered unsafe,
    you should not use it on untrusted PostScript programs.
    Likely we (i.e. Ghostscript upstream) will deprecate and
    remove this program in future.
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1536926400">- Version upgrade to 9.25
  For the highlights in this release see the highlights in the
  9.25rc1 first release candidate for 9.25 entry below.
  PLEASE NOTE:
  We (i.e. Ghostscript upstream) strongly urge users to upgrade
  to this latest release to avoid these issues.
  For a release summary see:
  http://www.ghostscript.com/doc/9.25/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.25 release should fix (see below)
  in particular those security issues:
  * CVE-2018-15909: shading_param incomplete type checking
    https://bugs.ghostscript.com/show_bug.cgi?id=699660
    https://bugzilla.suse.com/show_bug.cgi?id=1106172 bsc#1106172
  * CVE-2018-15908: .tempfile file permission issues
    https://bugs.ghostscript.com/show_bug.cgi?id=699657
    https://bugzilla.suse.com/show_bug.cgi?id=1106171 bsc#1106171
  * CVE-2018-15910: LockDistillerParams type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=699656
    https://bugzilla.suse.com/show_bug.cgi?id=1106173 bsc#1106173
  * CVE-2018-15911: uninitialized memory access in the aesdecode
    https://bugs.ghostscript.com/show_bug.cgi?id=699665
    https://bugzilla.suse.com/show_bug.cgi?id=1106195 bsc#1106195
  * CVE-2018-16513: setcolor missing type check
    https://bugs.ghostscript.com/show_bug.cgi?id=699655
    https://bugzilla.suse.com/show_bug.cgi?id=1107412 bsc#1107412
  * CVE-2018-16509: /invalidaccess bypass after failed restore
    https://bugs.ghostscript.com/show_bug.cgi?id=699654
    https://bugzilla.suse.com/show_bug.cgi?id=1107410 bsc#1107410
  * CVE-2018-16510: Incorrect exec stack handling in the "CS"
    and "SC" PDF primitives
    https://bugs.ghostscript.com/show_bug.cgi?id=699671
    https://bugzilla.suse.com/show_bug.cgi?id=1107411 bsc#1107411
  * CVE-2018-16542: .definemodifiedfont memory corruption
    if /typecheck is handled
    https://bugs.ghostscript.com/show_bug.cgi?id=699668
    https://bugzilla.suse.com/show_bug.cgi?id=1107413 bsc#1107413
  * CVE-2018-16541 incorrect free logic in pagedevice replacement
    https://bugs.ghostscript.com/show_bug.cgi?id=699664
    https://bugzilla.suse.com/show_bug.cgi?id=1107421 bsc#1107421
  * CVE-2018-16540 use-after-free in copydevice handling
    https://bugs.ghostscript.com/show_bug.cgi?id=699661
    https://bugzilla.suse.com/show_bug.cgi?id=1107420 bsc#1107420
  * CVE-2018-16539: incorrect access checking in temp file
    handling to disclose contents of files
    https://bugs.ghostscript.com/show_bug.cgi?id=699658
    https://bugzilla.suse.com/show_bug.cgi?id=1107422 bsc#1107422
  * CVE-2018-16543: gssetresolution and gsgetresolution allow
    for unspecified impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699670
    https://bugzilla.suse.com/show_bug.cgi?id=1107423 bsc#1107423
  * CVE-2018-16511: type confusion in "ztype" could be used by
    remote attackers able to supply crafted PostScript to crash
    the interpreter or possibly have unspecified other impact
    https://bugs.ghostscript.com/show_bug.cgi?id=699659
    https://bugzilla.suse.com/show_bug.cgi?id=1107426 bsc#1107426
  * CVE-2018-16585 .setdistillerkeys PostScript command is
    accepted even though it is not intended for use
    https://bugzilla.suse.com/show_bug.cgi?id=1107581 bsc#1107581
  * CVE-2018-16802: Incorrect"restoration of privilege" checking
    when running out of stack during exceptionhandling could be
    used by attackers able to supply crafted PostScript to execute
    code using the "pipe" instruction. This is due to an incomplete
    fix for CVE-2018-16509
    https://bugs.ghostscript.com/show_bug.cgi?id=699714
    https://bugs.ghostscript.com/show_bug.cgi?id=699718
    https://bugzilla.suse.com/show_bug.cgi?id=1108027 bnc#1108027
  Regarding what the above "should fix" means:
  PostScript is a general purpose Turing-complete programming
  language (cf. https://en.wikipedia.org/wiki/PostScript)
  that supports in particular file access on the system disk.
  When Ghostscript processes PostScript it runs a PostScript
  program as the user who runs Ghostscript.
  When Ghostscript processes an arbitrary PostScript file,
  the user who runs Ghostscript runs an arbitrary program
  which can do anything on the system where Ghostscript runs
  that this user is allowed to do on that system.
  To make it safer when Ghostscript runs a PostScript program
  the Ghostscript command line option '-dSAFER' disables
  certain file access functionality, for details see
  /usr/share/doc/ghostscript/9.25/Use.htm
  Its name 'SAFER' says everything: It makes it 'safer'
  to let Ghostscript run a PostScript program,
  but it does not make it completely safe.
  In theory software is safe against misuse (i.e. has no bugs).
  In practice there is an endless sequence of various kind of
  security issues (i.e. software can be misused to do more than
  what is intended) that get fixed issue by issue ad infinitum.
  In the end all that means:
  In practice the user who runs Ghostscript must not let it
  process arbitrary PostScript files from untrusted origin.
  In particular Ghostscript is usually run when printing
  documents (with the '-dSAFER' option set), see the part about
  "It is crucial to limit access to CUPS to trusted users" in
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.de" date="1541764800">- Version upgrade to 9.26rc1 (first release candidate for 9.26).
  Highlights in this release include:
  * Purely security and a few bug fixes, there are no new features,
    and no API changes to report.</changelog>
  <changelog author="jsmeix@suse.de" date="1543579200">- Version upgrade to 9.26
  Highlights in this release include:
  * Security issues have been the primary focus of this release,
    including solving several (well publicised) real and potential
    exploits.
    Thanks to Man Yue Mo of Semmle Security Research Team,
    Jens Mueller of Ruhr-Universitaet Bochum and
    Tavis Ormandy of Google's Project Zero
    for their help to identify specific security issues.
    PLEASE NOTE:
    We (i.e. Ghostscript upstream) strongly urge users to upgrade
    to this latest release to avoid these issues.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  http://www.ghostscript.com/doc/9.26/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.26 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues (bsc#1117331)
  * CVE-2018-19475: psi/zdevice2.c allows attackers to bypass
    intended access restrictions
    https://bugs.ghostscript.com/show_bug.cgi?id=700153
    https://bugzilla.suse.com/show_bug.cgi?id=1117327 bsc#1117327
  * CVE-2018-19476: psi/zicc.c allows attackers to bypass
    intended access restrictions because of a setcolorspace
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700169
    https://bugzilla.suse.com/show_bug.cgi?id=1117313 bsc#1117313
  * CVE-2018-19477: psi/zfjbig2.c allows attackers to bypass
    intended access restrictions because of a JBIG2Decode
    type confusion
    https://bugs.ghostscript.com/show_bug.cgi?id=700168
    https://bugzilla.suse.com/show_bug.cgi?id=1117274 bsc#1117274
  * CVE-2018-19409: LockSafetyParams is not checked correctly
    if another device is used
    https://bugs.ghostscript.com/show_bug.cgi?id=700176
    https://bugzilla.suse.com/show_bug.cgi?id=1117022 bsc#1117022
  and those security issues
  * CVE-2018-18284: 1Policy operator gives access to .forceput
    https://bugs.ghostscript.com/show_bug.cgi?id=69963
    https://bugzilla.suse.com/show_bug.cgi?id=1112229 bsc#1112229
  * CVE-2018-18073: saved execution stacks can leak operator arrays
    https://bugs.ghostscript.com/show_bug.cgi?id=699927
    https://bugzilla.suse.com/show_bug.cgi?id=1111480 bsc#1111480
  * CVE-2018-17961: bypassing executeonly to escape -dSAFER sandbox
    https://bugs.ghostscript.com/show_bug.cgi?id=699816
    https://bugzilla.suse.com/show_bug.cgi?id=1111479 bsc#1111479
  * CVE-2018-17183: remote attackers could be able to supply
    crafted PostScript to potentially overwrite or replace
    error handlers to inject code
    https://bugs.ghostscript.com/show_bug.cgi?id=699708
    https://bugzilla.suse.com/show_bug.cgi?id=1109105 bsc#1109105</changelog>
  <changelog author="jsmeix@suse.de" date="1547726400">- Version upgrade to 9.26a
  The version 9.26a is a special security bugfix version to fix
  * CVE-2019-6116: subroutines within pseudo-operators
    must themselves be pseudo-operators
    https://bugs.ghostscript.com/show_bug.cgi?id=700317
    https://bugzilla.suse.com/show_bug.cgi?id=1122319 bsc#1122319</changelog>
  <changelog author="jsmeix@suse.de" date="1552996800">- CVE-2019-3838.patch fixes CVE-2019-3838
  forceput in DefineResource is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
  https://bugs.ghostscript.com/show_bug.cgi?id=700576</changelog>
  <changelog author="jsmeix@suse.de" date="1554379200">- Version upgrade to 9.27
  Highlights in this release include:
  * We (i.e. Ghostscript upstream) have extensively cleaned up
    the Postscript name space: removing access to internal and/or
    undocumented Postscript operators, procedures and data.
    This has benefits for security and maintainability.
    Incompatible changes:
    The process of "tidying" the Postscript name space should
    have removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or
    utilities that rely on those non-standard and undocumented
    operators may stop working, or may change behaviour.
    If you encounter such a case, please contact us (i.e.
    Ghostscript upstream) - (either the #ghostscript IRC channel,
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution.
  * Fontmap can now reference invidual fonts in a TrueType
    Collection for font subsitution. Previously, a Fontmap entry
    could only reference a TrueType collection and use the default
    (first) font.
    Now, the Fontmap syntax allows for specifying a specific index
    in a TTC. See the comments at the top of (the default)
    Fontmap.GS for details.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  IMPORTANT: It is our intention, within the next 12 months
    (ideally sooner, in time for the next release) to make SAFER
    the default mode of operation. For many users this will have
    no effect, since they use SAFER explicitly, but some niche
    uses which rely on SAFER being disabled may need to start
    explicitly adding the "-dNOSAFER" option.
  IMPORTANT: We (i.e. Ghostscript upstream) are in the process of
    forking LittleCMS. LCMS2 is not thread safe, and cannot be made
    thread safe without breaking the ABI. Our fork will be thread
    safe, and include performance enhancements (these changes have
    all be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time, but not
    in perpetuity. Our fork will be available as its own package
    separately from Ghostscript (and MuPDF).
  For a release summary see:
  http://www.ghostscript.com/doc/9.27/News.htm
  For details see the News.htm and History9.htm files.
  The Ghostscript 9.27 release should fix (cf. the entry below
  dated 'Fri Sep 14 10:47:33 CEST 2018' what "should fix" means)
  in particular those security issues:
  * CVE-2019-3838 forceput in DefineResource is still accessible
    https://bugzilla.suse.com/show_bug.cgi?id=1129186 bsc#1129186
    https://bugs.ghostscript.com/show_bug.cgi?id=700576
  * CVE-2019-3835: superexec operator is available
    https://bugzilla.suse.com/show_bug.cgi?id=1129180 bsc#1129180
    https://bugs.ghostscript.com/show_bug.cgi?id=700585</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1565611200">- CVE-2019-10216.patch fixes CVE-2019-10216
  forceput/superexec in .buildfont1 is still accessible
  https://bugzilla.suse.com/show_bug.cgi?id=1144621 bsc#1144621
  https://bugs.ghostscript.com/show_bug.cgi?id=701394</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568376000">- Add patch openjpeg4gs-CVE-2018-6616-8ee33522.patch
  to fix bsc#1140359 for CVE-2019-12973</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635200">- Add patch gs-CVE-2019-14811-885444fc.patch to fix bsc#1146882
  for CVE-2019-14811,CVE-2019-14812,CVE-2019-14813
- Add patch gs-CVE-2019-14817-cd1b1cac.patch to fix bsc#1146884
  for CVE-2019-14817</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1568635201">- Port latest ghostscript 9.27 from factory including latest
  security patches to SLES15/SLES12
  * Port patch CVE-2019-10216.patch to 9.27 which is the orignal
    upstream commit now
  * Drop patch CVE-2019-3838.patch as now part of 9.27</changelog>
  <changelog author="jsmeix@suse.de" date="1573473600">- CVE-2019-14869.patch contains commit from Ghostscript upstream
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=485904772c5f
  to fix CVE-2019-14869 "-dSAFER escape in .charkeys"
  (bsc#1156275)</changelog>
  <changelog author="jsmeix@suse.de" date="1588075200">- The version upgrade to 9.52 fixes in particular
  CVE-2020-12268: jbic2dec: heap-based buffer overflow
  in jbig2_image_compose (bsc#1170603)
- Version upgrade to 9.52
  Highlights in this release include:
  * The 9.52 release replaces the 9.51 release after a problem
    was reported with 9.51 which warranted the quick turnaround.
    Thus, like 9.51, 9.52 is primarily a maintenance release,
    consolidating the changes we introduced in 9.50.
  * IMPORTANT: We have forked LittleCMS2 into LittleCMS2mt
    (the "mt" indicating "multi-thread").
    LCMS2 is not thread-safe, and cannot be made thread-safe
    without breaking the ABI. Our fork will be thread-safe and
    include performance enhancements (these changes have all
    been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. If there is sufficient interest,
    our fork will be available as its own package separately
    from Ghostscript (and MuPDF).
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * New option -dALLOWPSTRANSPARENCY: The transparency compositor
    (and related features), whilst we are improving it, remains
    sensitive to being driven correctly, and incorrect use
    can have unexpected/undefined results. Hence, as part of
    improving security, we limited access to these operators,
    originally using the -dSAFER feature. As we made "SAFER"
    the default mode, that became unacceptable, hence the
    new option -dALLOWPSTRANSPARENCY which enables access
    to the operators, cf.
    https://www.ghostscript.com/doc/9.52/Use.htm#ALLOWPSTRANSPARENCY
  For a release summary see:
  https://www.ghostscript.com/doc/9.52/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.51
  Highlights in this release include:
  * 9.51 is primarily a maintainance release, consolidating
    the changes we introduced in 9.50.
  * We have continued our work on code hygiene for this release,
    with a focus on the static analysis tool Coverity
    (from Synopsys, Inc) and we are now maintaining a policy of
    zero Coverity issues in the Ghostscript/GhostPDL source base.
  * IMPORTANT: In consultation with a representative of
    OpenPrinting (http://www.openprinting.org/) it is our
    intention to deprecate and, in the not distant future,
    remove the OpenPrinting Vector/Raster Printer Drivers
    (that is, the opvp and oprp devices).
    If you rely on either of these devices, please get in touch
    with us (i.e. Ghostscript upstream), so we can discuss your
    use case, and revise our plans accordingly.
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  For a release summary see:
  https://www.ghostscript.com/doc/9.51/News.htm
  For details see the News.htm and History9.htm files.
- Version upgrade to 9.50
  Highlights in this release include:
  * The change to version 9.50 follows recognition
    of the extent and importance of the file access control
    redesign/reimplementation outlined below.
  * The file access control capability (enable with -dSAFER)
    has been completely rewritten, with a ground-up rethink
    of the design. For more details, see: "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * It is important to note that -dSAFER now only enables the
    file access controls, and no longer applies restrictions
    to standard Postscript functionality (specifically,
    restrictions on setpagedevice). If your application relies
    on these Postscript restrictions, see "OLDSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#OldSafer
    and please get in touch, as we do plan to remove those
    Postscript restrictions unless we have reason not to.
  IMPORTANT: File access controls are now enabled by default.
    In order to run Ghostscript without these controls,
    see "NOSAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#NoSafer
  * We (i.e. Ghostscript upstream) are in the process of forking
    LittleCMS, cf. the other release notes entries below.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * There are a couple of subtle incompatibilities between the old
    and new SAFER implementations. Firstly, as mentioned above,
    SAFER now leaves standard Postcript functionality unchanged
    (except for the file access limitations). Secondly, the
    interaction with save/restore operations, see "SAFER" at
    https://www.ghostscript.com/doc/9.50/Use.htm#Safer
  * The following is not strictly speaking new to 9.50,
    as not much has changed since 9.27 in this area,
    but for those who don't upgrade with every release:
    The process of "tidying" the Postscript name space should have
    removed only non-standard and undocumented operators.
    Nevertheless, it is possible that any integrations or utilities
    that rely on those non-standard and undocumented operators
    may stop working, or may change behaviour.
    If you encounter such a case, please contact us
    (i.e. Ghostscript upstream, either the #ghostscript IRC channel
    or the gs-devel mailing list would be best), and we'll work
    with you to either find an alternative solution or return the
    previous functionality, if there is genuinely no other option.
    One case we know this has occurred is GSView 5 (and earlier).
    GSView 5 support for PDF files relied upon internal use only
    features which are no longer available. GSView 5 will still
    work as previously for Postscript files. For PDF files,
    users are encouraged to look at MuPDF https://www.mupdf.com/
  For a release summary see:
  https://www.ghostscript.com/doc/9.50/News.htm
  For details see the News.htm and History9.htm files.
- CVE-2019-10216.patch CVE-2019-14869.patch
  gs-CVE-2019-14811-885444fc.patch
  gs-CVE-2019-14817-cd1b1cac.patch
  openjpeg4gs-CVE-2018-6616-8ee33522.patch
  are fixed in the version 9.52 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1595851200">- CVE-2020-15900.patch fixes CVE-2020-15900
  Memory Corruption (SAFER Sandbox Breakout)
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582
  (bsc#1174415)</changelog>
</package>
<package pkgid="3fd18541db8341c766ea8a990c5a92e7801c580fbfc7ccf7fd405387e5a82378" name="giflib-debugsource" arch="i586">
  <version epoch="0" ver="5.1.4" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1619006400">- Enable Position Independent Code and inherit CFLAGS from the build system.
  * Added giflib-PIE.patch (bsc#1184123).</changelog>
</package>
<package pkgid="7c6bfef7403bd4b10482c22652c752bf95cc6c26622ffc6914264cd9a29f8f87" name="giflib-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1619006400">- Enable Position Independent Code and inherit CFLAGS from the build system.
  * Added giflib-PIE.patch (bsc#1184123).</changelog>
</package>
<package pkgid="81326500476d95cdcd406427dabbb867939c0b3589ce5b28b6ba018a1dc78e58" name="giflib-progs-debuginfo" arch="i586">
  <version epoch="0" ver="5.1.4" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1619006400">- Enable Position Independent Code and inherit CFLAGS from the build system.
  * Added giflib-PIE.patch (bsc#1184123).</changelog>
</package>
<package pkgid="a2c2a7794928666b1f8485dbcc7d9cffdc1441c11cc1c5ca1730c8efb7f4ebe9" name="giflib-progs-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="lp152.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1619006400">- Enable Position Independent Code and inherit CFLAGS from the build system.
  * Added giflib-PIE.patch (bsc#1184123).</changelog>
</package>
<package pkgid="1b62f2bc33a4c62ff1c6f3a38ef54e5a79f3e9b831842b063596eebfa863bc88" name="gimp-debuginfo" arch="i586">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="32c03eba6d543bcea82fb33aec44da51bbbf6e9a38566135c0b18538a4ee7b6d" name="gimp-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="13b71de7e76a85071fa4e24acfde04ab0b43ca9912be57e0b9da00559b990d05" name="gimp-debugsource" arch="i586">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="49787e49adc4542167d9fd69685b295364b2249cd02be07a3f40b7af9ffba44f" name="gimp-debugsource" arch="x86_64">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="93bc871e9faae8de1d6b6c80705ccedd6b07b83d84111792489e1eb829d65165" name="gimp-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="7b4d8bd11f548475caf62aacd72460a134736727dad0fa9cbc07c16cda71ea08" name="gimp-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="b461f9c6727c5b48a5e4880bf28db65a6b826b44d358c75d9d17fa0124b950cd" name="gimp-plugin-aa-debuginfo" arch="i586">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="f63a14668cd6dd058489f21ab61f215ce214b35b4ac37b2f65f9fe0fcb340905" name="gimp-plugin-aa-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="b1ef1ea4dba9c83630add31f4517f7c3b7192e4bd646632a71039fe19330cc11" name="gimp-plugins-python-debuginfo" arch="i586">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="7320d6a987cf809d6e0b5e36cc7764752d670441b16b4250fc17896c91cd789c" name="gimp-plugins-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.10.12" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1515326400">- Run spec-cleaner, modernize spec, drop Obsoletes for versions
  no longer supported.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520510400">- Add gimp-gegl03-buildfix.patch: Port to gegl-03, patch taken from
  debian.
- Following the above port, replace pkgconfig(gegl-0.2) with
  pkgconfig(gegl-0.3) BuildRequires and add libtool BuildRequires:
  and pass autoreconf as the above patch touches the buildsystem.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524830400">- Update to version 2.10.0:
  + Image processing nearly fully ported to GEGL, allowing high bit
    depth processing, multi-threaded and hardware accelerated pixel
    processing, and more.
  + Color management is a core feature now, most widgets and
    preview areas are color-managed.
  + Many improved tools, and several new and exciting tools, such
    as the Warp transform, the Unified transform and the Handle
    transform tools.
  + On-canvas preview for all filters ported to GEGL.
  + Improved digital painting with canvas rotation and flipping,
    symmetry painting, MyPaint brush support.
  + Support for several new image formats added (OpenEXR, RGBE,
    WebP, HGT), as well as improved support for many existing
    formats (in particular more robust PSD importing).
  + Metadata viewing and editing for Exif, XMP, IPTC, and DICOM.
  + Basic HiDPI support: automatic or user-selected icon size.
  + New themes for GIMP (Light, Gray, Dark, and System) and new
    symbolic icons meant to somewhat dim the environment and shift
    the focus towards content (former theme and color icons are
    still available in Preferences).
  + And more, better, more, and even more awesome!
- Drop gimp-gegl03-buildfix.patch: Fixed upstream, following this
  drop libtool BuildRequires and no longer pass autoreconf.
- Replace pkgconfig(gegl-0.3) with gegl-0.4) BuildRequires.
- Add gcc-c++, gegl, glib-networking, pkgconfig(gexiv2),
  pkgconfig(liblzma), pkgconfig(libmypaint),
  pkgconfig(mypaint-brushes-1.0) and pkgconfig(poppler-data)
  BuildRequires: New dependencies.</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- add BR for gdk-pixbuf-loader-rsvg to enable svg icons
- enable jpeg2000 support: new BR pkgconfig(libopenjp2)
- enable webp support: new BR pkgconfig(libwebp) &gt;= 0.6.0
- enable OpenEXR support: new BR pkgconfig(OpenEXR)
- enable email support: new BR/R for xdg-utils for xdg-email
- set LC_ALL/LANG in %prep and %build to silence warnings about
  encoding of the translations
- make sure we can see the compiler cmdlines by disabling the
  silent rules</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1524916801">- libbabl is required in version 0.1.46+</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1525089600">- let libgimp-2_0-0 require libbabl-0_1-0 &gt;= 0.1.46 to enforce updating
  to the required version.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089601">- Update BuildRequires versions to be consistent with configure
  script.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add gimp-Fix-reference-to-gegl-0.3.patch: gimp.pc: Fix reference
  to gegl-0.3 - we require and build for gegl-0.4 now.</changelog>
  <changelog author="plinnell@opensuse.org" date="1526904000">- update to 2.10.2 bugfix release
- drop gimp-Fix-reference-to-gegl-0.3.patch
  + Core:
  - Discard fonts which fail to load and popup an info dialog to allow
    people debug their fonts.
  - New API to suppress updates in UI until plug-ins are done
    introducing changes.
  - New API to calculate histograms in separate threads, with possible further
    extension to handle similar cases elsewhere in GIMP.
  - Tool options are now properly saved and reloaded per-device at
    startup.
  + Plug-ins:
  - New plug-in for importing and exporting HEIF images.
  - Enable visibility of rasterized vector layer from PSD.
  - Single-window screenshots in Windows fixed to correctly snap a
    window even when it is partly off-screen or covered by another
    window or when display scaling is not set to 100%.
  + Filters:
  - New Spherize filter to wrap an image around a spherical cap
  - New Recursive Transform filter to create Droste effect.
  + Usability:
  - Warn users, when alpha-only painting has no effect. E.g. when target
    drawable doesn't have an alpha channel, or the alpha channel is locked.
  - Make the splash texts dynamic, so they are larger on larger splashes.
  - Mention pressing Enter to complete Foreground selection in the status bar.
  - Make sure that clicking outside any selection prevents Rectangle Select
    and Ellipse Select tools from creating empty selections.
  - Improve mouse wheel zooming behavior to keep the same point
    centered under the pointer even if the image is completely visible
    in the canvas.
  - Add "View -&gt; Center Image in Window" (Shift+J) as a quick way to
    center the image at any zoom level.
  + Translations:
  - Updated translations: Catalan, Danish, Dutch, French, German, Greek,
    Hungarian, Icelandic, Italian, Latvian, Polish, Russian, Spanish,
    Swedish, Ukrainian.
  - New translation of Windows installer: Chinese (Taiwan)
  + Build:
  - Add a --with-bug-report-url configure option allowing packagers to
    set the address of their own bug tracker. This address will be the
    one opened by the debug dialog for reporting bugs.
  - Add a flatpak manifest for the gtk3-port branch.
  - Remove the possibility to disable script-fu.
  - Add a --with-icc-directory configure option to customize the color
    profile directory. By default, it is set to the common path
    /usr/share/color/icc.
  + Documentation:
  - Updating the description of the XCF format "devel-docs/xcf.txt", for
    third-party readers wishing to support GIMP 2.10 XCF files.
  - Add documentation skeletons for all enums in libgimpbase/, there is
    much room for improvement.</changelog>
  <changelog author="mrueckert@suse.de" date="1530792000">- update to 2.10.4 bug fix release
  Core:
  - Remove gimp_display_shell_draw_background() and all clipping
    hacks for drawing the canvas background. This optimizes away
    one entire step of drawing of image size, for each expose.
  - Font loading does not block startup anymore. Only consequence
    is that the Text tool may not be usable immediately if fonts
    are not fully loaded yet (and will output an appropriate error
    if you do so). All non-text related activities can be performed
    right away.
  - Change of the URL from bugzilla to gitlab where appropriate.
  - New tool option manager to better keep track of user context
    and paint options in a consistent manner.
  User Interface:
  - The Dashboard dockable dialog now has a 'Memory' group that
    shows memory-usage information: the currently used memory size,
    the available physical memory size, and the total physical
    memory size.  It can also show the tile-cache size, for
    comparison against the other memory stats. Note that the
    upper-bound of the meter is the physical memory size, so the
    memory usage may be over 100% when GIMP uses the swap.
  - The Dashboard dockable dialog now has "read" and "written"
    fields in the dashboard swap group, which report the total
    amount of data read-from/written-to the tile swap, respetively.
    Additionally, the swap busy indicator (used as the meter's LED)
    has been improved, so that it's active whenever data has been
    read-from/written-to the swap during the last sampling
    interval, rather than at the point of sampling.
  - Fonts can now be tagged. The user interface is the same as for
    brushes, patterns etc.
  - Some icons fixed: larger spacing between broken chains and
    gimp-tool-ellipse-select made symmetrical.
  Usability:
  - When a plug-in cannot be applied to an image because of
    mismatch in image types (e.g. layer has no alpha or image is
    greyscale), GIMP now displays a message listing supported image
    types for this plug-in.
  Tools:
  - The Measurement tool now has an "Auto straighten" option
    allowing to rotate the active drawable (layer, channel?) so
    that the measurement line is used as horizon. As other
    transform tools, the feature will work on linked drawables as
    well.
  - The Smudge tool now paints correctly on images with a color
    profile other than the GIMP's built-in one.
  Build:
  - Installer: set compatibility options to run Python plugins in
    HiDPI-aware mode.
  - Put back compatibility DLLs for really old plugins.
  - Install binary tool `gimp-test-clipboard` on the system to
    allow people to help us debug clipboard bugs.
  - --enable-bundled-mypaint-brushes renamed
  - -enable-relocatable-bundle and also make WMF fonts looked up
    on the runtime prefix of GIMP (instead of the build-time path)
    when this build option was set.
  Plug-ins:
  - gimptool-2.0 binary now accepts source files with non-standard
    extensions if it can try to guess appropriate language from the
    compiler being used. It will also properly quote arguments for
    shell usage.
  - Run explicitly Python 2 as Python plug-in interpreter to
    prevent breakage on systems where Python 3 is the default.
  - raw_input()'s argument in Python console is now optional, and
    input() support has been added.
  File Formats:
  - The PSD loader now provides an option to load "merged",
    pre-composited version of the images that becomes available
    when a PSD file was saved with "Maximize Compatibility" option
    enabled in Photoshop. This is useful when loading PSD files
    that use features that GIMP doesn't currently support, and
    therefore can't render correctly, such as adjustment layers.
    When loading the merged image version, we avoid loading certain
    additional data from the file, such as channels, paths, and
    guides, while still loading metadata. This option is currently
    exposed as an additional file type ("Photoshop image
    (merged)"), which has to be explicitly selected from the
    file-type list when opening the image.
  - Embedding GIMP's built-in sRGB color profile to exported files
    is now optional. The default choice can be set in the
    Preferences dialog.
  Translations:
  - Updated translations: Catalan, Czech, Danish, Dutch, Finnish,
    Greek, Hungarian, Italian, Latvian, Polish, Romanian, Russian,
    Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="mrueckert@suse.de" date="1530878400">- bump versions in BR according to the configure.ac
- move library requires in libgimp to %requires_ge and also force
  the libgegl update</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878401">- fix build error for Leap 42.3
- add missing requires</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1535025600">- Update to version 2.10.6:
  + Core:
  - Render drawable previews asynchronously.
  - Merge the file view filter and file format lists in
    GimpFileDialog. The presence of 2 lists was very confusing.
  - DLL search priority is now updated before running a plug-in
    on Windows, depending on the executable bitness. This gets
    rid of one of the last remnant of DLL hell in GIMP, which was
    when running 32-bit plug-ins from a 64-bit build of GIMP.
  + Filters:
  - New "Little Planet" (gegl:stereographic-projection) filter.
  - New "Long Shadow" (gegl:long-shadow) filter.
  + Tools:
  - Halt the Measure tool after straightening.
  - Add an "orientation" option to the measure tool,
    corresponding to the "orientation" property of
    GimpToolCompass (i.e., it controls the orientation against
    which the angle is measured, when not in 3-point mode.) The
    orientation is "auto" by default, so that the angle is always
    &lt;= 45 deg.  Note that the "orientation" option affects the
    tool's "straighten" function, so that the layer is rotated
    toward the current orientation.
  - Text layers can now represent vertical texts, with 4
    variants: left-to-right and right-to-left lines, and forcing
    all characters to be upright or following Unicode's vertical
    orientation property. See also:
    https://www.unicode.org/reports/tr50/
    http://www.unicode.org/Public/UCD/latest/ucd/VerticalOrientation.txt
  + User Interface:
  - The Dashboard dockable dialog now has an "async" field to the
    dashboard's "misc" group, showing the number of async
    operations currently in the "running" state.
  - New Preferences option to enable/disable layer-group
    previews, since these can get quite time-expensive.
  + Updated translations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1537185600">- pkgconfig(glib-2.0) &gt;= 2.56.0 is needed.</changelog>
  <changelog author="sean@suspend.net" date="1541764800">- Update to vesion 2.10.8:
  +Core:
  - Use adaptive chunk size in GimpProjectio nwhen rendering the
    projection asynchronously, rather than using a fixed chunk size.
    This provides a better trade-off between throughput and
    responsiveness dynamically, based on how fast the processing is.
  +Tools:
  - In all selection tools, show error on attempt to
    subtract-from/intersect-with empty selection.
  - Fix text along path not working with vertical text.
  - Fix Text tool's frame position when undoing a move operation.
  - Streamline Text tool's drawing blocking/unblocking logic.
  - When moving a text layer using the text tool (through alt-drag),
    don't change the layer's box mode to "fixed", which is unnecessary,
    since the layer's size isn't affected.
  - Transform and deformation operations now maintain color for fully
    transparent pixels, making unerase and curves manipulation of alpha
    channel more reliable.
  - All transform tools now apply changes when you asve or export/overwrite
    an image without pressing Enter first to confirm changes.
  - Heal, Dodge/Burn, Smudge and Convovle tools now adjust the processed
    buffer and mask_buffer regions according to the changes made to the
    application region, as calculated by intersecting it with the
    drawable and mask extents. This fixes wrong application position
    when painting on a drawable whose origin is above/to the left of the
    image's origin, and there's a selection active.
  +Plug-ins:
  - Port all plug-ins to the new iterator API in GEGL.
  - Improve automatic detection of HEIC/HEIF files.
  - Improve RawTherapee discovery by looking up registry key (should
    become useful with RawTherapee 5.5 and more).
  +Usability:
  - Compatibility information in the Save dialog is now more understandable.
    The minimum GIMP version for the XCD file is always written down when it
    is GIMP 2.8 or over. The list of features warranting the minimum version
    is now listed in an expander container rather than as tooltip, which
    makes it more discoverable. The warning on compression is now displayed
    as its own text under the checkbox and not as additional text to the minimum    GIMP version label.
  +CLI:
  - New self-explanatory --enable-win32-debug-console CLI option
  +Translations:
  - Updated translations: Danish, Dutch, Finnish, German, Hungarian,
    Italian, Polish, Portugese (Brazil), Spanish, Swedish, Ukranian.</changelog>
  <changelog author="mvetter@suse.com" date="1553515200">- bsc#1130407: Remove dependency on JasPer.
  OpenJPEG is actually used.</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1554638400">- Update to version 2.10.10:
  - Core:
  - Add gimp-scratch allocator, a fast memory allocator (on the
    order of magnitude of alloca()), suitable for small (up to a
    few megabytes), short-lived (usually, bound to the current
    stack-frame) allocations.  Unlike alloca(), gimp-scratch
    doesn't use the stack, and is therefore safer, and will also
    serve bigger requests, by falling-back to malloc().
  - In gimp_drawable_transform_buffer_affine(), avoid modifying
    the clipping mode when transforming layer masks, since this
    function is used (among other things) to transform layer
    masks together with their layer, in which case they should
    use the same clipping mode as the layer. This fixes a
    regression introduced by commit 2ae823ba, causing layer masks
    to be transformed with a mismatched clipping mode during
    layer transforms, leading to discrepencies between the
    transformed layer and the transformed mask.
  - Moved swap/cache and temporary files out the GIMP user config
    dir and added new config file substitutions ${gimp_cache_dir}
    and ${gimp_temp_dir}.
  - Pass the GEGL tile-cache size, swap path, and thread-count to
    plug-ins as part of their config, and have libgimp set the
    plug-in's GeglConfig accordingly upon initialization.
  - Layer groups are now rendered in bigger chunks rather than
    tile-by-tile (which used to pretty much eliminate
    multithreading for groups), which improves the rendering
    speed.
  - Make saving/exporting files more robust to errors. In
    particular if an error occurs during the process (be it a
    bug, a memory error, or anything else), GIMP won't overwrite
    anymore any existing file with incomplete contents, so that
    you won't end up with no valid files at all.
  - Fix a regression on support of various graphics tablet.
  - Remove the "Edit -&gt; Fade..." feature: it makes GIMP use two
    buffers instead of one (east into system resources), it's
    broken in 2.10, and we can make the UX better for filters.
  - New generic canvas modifier 'Alt + middle click' allowing to
    pick layers by clicking on pixels. The available layers will
    be looped through (starting from the upper one) while Alt key
    is hold and the picked layer name will be temporarily
    displayed in the status bar.
  - When clearing a channel, do nothing if the channel is already
    empty; otherwise, align the cleared rectangle to the channel
    buffer's tile grid, so that all affected tiles are dropped,
    rather than zeroed.  Furthermore, only update the affected
    region of the channel.
  - Brush and pattern saving logics has been moved to core code
    (instead of plug-in).
  - Clipboard brushes and pattern can now be duplicated.
  - Parametric brushes are now 32-bit float to avoid
    posterization on large brushes.  Note: raster brushes are
    still 8-bit and plug-ins only have access to 8-bit versions
    of high-precision brushes/patterns. New API will be required
    to handle high-precision data.
  - On-canvas preview while editing a color in the colormap of an
    indexed image.
  - User interface:
  - Enabled HiDPI/Retina support for the GTK2/OSX build, fixes
    blurry icons.
  - Add a tooltip to the "better compression" checkbox in save
    dialog to make it clearer it does not mean that the file size
    is necessarily smaller in every cases. In particular some
    best/worst case are possible when an algorithm less efficient
    in general may end up better on a particular image.
  - Add basic support for cursors with a scale factor of 2 for
    HiDPI (artwork to be updated).
  - Foreground and background color icons, as well as color
    history will now display out-of-gamut warning on indexed
    images for colors outside of the palette, as well as on
    grayscale images, for non-gray colors.
  - Pack color picker and hexadecimal entry on same line in Color
    dock.
  - Add an "Open as Image" button to the brushes dialog.
  - Usability:
  - Attempting to transform locked layers or paint on them now
    results in blinking around the status bar (where the warning
    message is displayed) and around the toolbar where lock
    toggles are. The same applies to attempting to move a
    selection where there is none ? GIMP will blink around the
    toolbar where the moving target (layer, selection, path) is
    chosen.
  - GIMP now allows selecting default export file type for new
    projects.  The choice is limited to PNG, JPEG, WebP, PSD,
    ORA, TIFF, BMP.
  - GimpSpinScale widget now has an optional feature to constrain
    the value to integer when dragging with a pointer (even if
    the scale allows for fractional numbers), set with new
    function gimp_spin_scale_set_constrain_drag().  This is
    useful for settings where fractional numbers are technically
    possible, yet most common use case are with integers (such as
    pixel sizes, angles in degrees, etc.) so you want the easy
    interface to be constrained. Fractional numbers are still
    settable, for instance by keyboard edit; and arrow
    incrementation won't drop fraction parts.  This is currently
    only activated for brush options in paint tools.
  - Tools:
  - In scale tool, scale around center even when using numeric
    input.
  - New algorithm in the Bucket Fill tool when selecting the
    affected area "Fill by line art detection", based off the
    G'Mic algorithm for "smart colorization":
    https://hal.archives-ouvertes.fr/hal-01891876 In a few words,
    it identifies painted pixels (either based on grayscale or
    opacity values) and tries to close line arts to allow filling
    even with not perfectly closed zones; the second step of the
    algorithm will flood the colors under line art pixels to
    prevent "holes" in the filling.  It is possible to control a
    max size (in pixels) for the flooding, as well as max length
    of closing segments and splines.
  - The Bucket Fill tool got new interaction allowing to hold the
    click and move the mouse to fill based on several seed zones
    (for "Fill by line art detection" as well as "Fill similar
    colors"). You can now cancel the fill in progress with right
    click as in other tools.
  - The Bucket Fill tool now allows color picking with
    ctrl-click, same as every painting tool. It will pick either
    the foreground or background color depending on the selected
    Fill Type. The ctrl-alt modifier combination is also possible
    to pick the non-Fill Type color.
  - In the Bucket Fill tool, the Alt modifier will now switch to
    "FG color fill" when "Pattern fill" was set (instead of doing
    nothing).
  - In the Unified Transform tool, default to preserving aspect
    ratio when scaling up or down.
  - In the Healing tool, "Sample merged" now also work for the
    target pixels, allowing to draw in empty layers.
  - Selection by color is now parallelized, hence improving speed
    of the Select by Color tool (and any other processing which
    may share this piece of code now or in the future).
  - Add "Constrain handles" and "Around center" options to the
    perspective-transform tool's GUI, which are similar to the
    corresponding options of the unified-transform tool.
  - Improve color picking on indexed image to always select an
    indexed color corresponding to the picked pixel in the
    colormap.
  - Plug-ins:
  - file-pdf-save GUI now clearly indicates the order the layers
    will be used to make multi-page PDFs.
  - Add DDS loading/exporting plug-in originally developed by
    Shawn Kirst and Arne Reuter.
  - Rename the Guillotine plug-in to Slice Using Guides.
  - Add a new option saving a color profile when exporting PNG,
    JPEG, TIFF.  Always save it when exporting to PSD.
  - Remove the "Advanced" expanders from the PNG and TIFF export
    dialogs.
  - Full rewrite of the Spyrogimp plug-in with much more options
    and better interaction.
  - Indexed TIFF with alpha channel now supported.
  - Filters:
  - Add on-canvas GUI (simple lines) for circular, linear, and
    zoom motion blur.
  - Help:
  - Link to the bugtracker directly from the Help menu, also link
    to the wiki and the roadmap. Remove the link to currently
    disabled registry.gimp.org.
  - Translations:
  - Czech, Danish, French, Italian, Japanese, Marathi, Polish,
    Russian, Spanish, Swedish, Ukrainian.</changelog>
  <changelog author="ecsos@opensuse.org" date="1557057600">- No more need pkgconfig(glib-2.0) &gt;= 2.56.0 for build.
  pkgconfig(glib-2.0) &gt;= 2.54.2 is enough.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560600000">- Update to version 2.10.12:
  + Core:
  - Add an "Incremental" option to the Dodge/Burn tool, which,
    similarly to the Paintbrush, Pencil, and Eraser tools,
    applies the effect incrementally as the pointer moves.
  - Curves now have a concept of smooth vs corner points: smooth
    points produce a smooth curve, while corner points produce a
    sharp curve (previously, all points were smooth).
  - Search the user font directory path on Windows (since Windows
    10, non-admin users have the ability to install fonts). This
    is only a temporary hack until fontconfig adds proper
    upstream support.
  - In gimp_brush_core_get_paint_buffer(), when allocating a new
    paint buffer, clear the old buffer *before* allocating the
    new one, to reduce the amount of simultaneously allocated
    memory.
  - In GimpPaintbrush, avoid refilling the paint buffer at each
    dab if the paint color/pixmap hasn't changed, hence allowing
    faster painting in some specific cases.
  - Add hygon cpu detection and enable MMX/SSE support.
  - Add a GimpSymmetry::get_transform() virtual function and a
    corresponding gimp_symmetry_get_transform() function which
    return the brush transform corresponding to a given symmetry
    stroke in terms of the rotation angle and reflection flag (in
    contrast to gimp_symmetry_get_operation() which returns the
    same transforation in terms of a GeglNode). This allows us to
    simplify, fix (artifact bugs, etc.), and improve the
    painting-code performance for several symmetry painting
    cases.
  - New gimp-brush-pipe-spacing parasite set by core code to
    preserve GIH brush's spacing across reloads.
  - Add a new Offset filter tool, as a front-end to gimp:offset.
    The tool replaces, and provides the same interface as the
    drawable-offset dialog while also providing live preview and
    on-canvas interaction.
  + Plug-ins:
  - Exported profile and data format strategy updated in several
    file plug-ins.
  - When not saving a profile, we always export as sRGB data, as
    most viewers would not display the image properly otherwise.
  - When saving a profile:
    . If a profile was manually assigned, we always export to the
    assigned format, hence pixel data is converted accordingly,
    whatever the work format.
  - If no profile was assigned:
    . If the export format support high-bit depth, we export the
    work format as-is.
    . If the export format is 8-bit max, we convert the work
    format to sRGB, except if the work format is 8-bit linear.
  + The following plug-ins were updated: JPEG, PNG, TIFF and WebP.
  + Tools:
  - Add input/output spin-buttons to the Curves tool, which allow
    setting the selected point's coordinates numerically. When
    the image precision is greater than 8-bpc, use a 0.00-100.00
    range for the point-coordinate spin-buttons instead of a
    0-255 range.
  - In the Curves tool, allow changing the curve's point types
    (cf. new curve corner points in Core section). Corner points
    are displayed with a diamond shape instead of a circle.
  - Free Select tool now creates a selection as soon as the
    polygon is closed. This selection is updated when the
    polygon, or the relevant tool-options, change, similarly to
    GimpRectangleSelectTool.
  - Derive GimpEraser from GimpPaintbrush, instead of directly
    from GimpBrushCore. This allows GimpEraser to reuse the
    paint-buffer content across dabs, improving performance.
  - Allow moving an intersecting pair of guides with the Move tool.
  + User interface:
  - In GimpCurveView, when dragging an existing curve point,
    don't immediately move the point to the cursor position upon
    button press, but rather move it relative to its current
    position as the cursor moves. This allows selecting a point
    without moving it, and adjusting its position more easily.
  - When the cursor hovers above a point in GimpCurveView, or
    when dragging a point, have the coordinate indicator show the
    point's position, rather than the cursor's.
  - In GimpCurveView, when holding down Ctrl while
    adding/dragging a point, snap the y-coordinate to the
    original curve (at the start of the drag). This is
    particularly useful for adding points along the curve.
  - In GimpDashboard, don't show legend for groups with no meter.
  - Add a tile-alloc-total variable to the dashboard's memory and
    misc groups, showing the total amount of memory used by the
    tile allocator.
  - Add a "Save Keyboard Shortcuts Now" button to the Configure
    Keyboard Shortcuts dialog.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1610366400">- Add gimp-fix-issue-3630-postscript-plugin-crashes.patch:
  gsapi_new_instance() now expects a pointer to a NULL-initialized
  pointer. Initialize "void *instance" with NULL. Found by massimo
  (bsc#1180770, glgo#GNOME/GIMP#3630).</changelog>
</package>
<package pkgid="ba761ca4d22bc1b10dcf1dc1b0e8065d424db95f6611bb77839748cbe370b7aa" name="git-core-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="e4e3320dffccbc8a04259875604fed500bb25cb238b835e9bf021f1371217292" name="git-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="1264dcb217938efaa5a6de5c07b4268d908b1de0988b89ce76936c58f065b3fb" name="git-core-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="31cc6ab11379d1df1803e9578dddbd1303ef7bfc8390cb9ef055a6a3481d5d47" name="git-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="6c4ef5b4c93f456c569345878abed9ba223d625f591b834436fc393234854853" name="git-credential-gnome-keyring-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="75e46d80b8a4e67972428e7f72aa17c1c53e72dae020a31c4924f8ce9236f492" name="git-credential-gnome-keyring-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="0a9290610adc61f0dcf26f96219589cc05ea7b3e70a75b5d60ea744e78566635" name="git-credential-gnome-keyring-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="b487afb9eccb859f50b3bae1c02ec4079dc033df4382ccaca38c69e0b69b7320" name="git-credential-gnome-keyring-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="04a13abfcf5a89ae42fdee19f1742e3dd7a1193800c4994a000185d57b66e129" name="git-credential-libsecret-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="684234f65952281db540eaa3f61c3b08ce5f4b79a3972bd907e07df7e3311140" name="git-credential-libsecret-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="4d9026d270b9638112cabbaf4124e8465e7ac8d0d5ca1789f70904f5610fdd35" name="git-credential-libsecret-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="1e8b171d90977d6fee1d5081e1c23f09454ecf04bd85b7313f5d00c99635b04f" name="git-credential-libsecret-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="d0fc7b36b26885fb4f023a7ceba0616d6bae4df271b6fcdf25dfcab39586553d" name="git-daemon-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="70258e6458f0b065060fe8ed592d107b0c31a2978c1c4d99935f049bbbf12966" name="git-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="1f4f12aa5e6fcecd541c81d4403d0400c335f0c9cc34df1241885ec9232f57f4" name="git-daemon-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="3becd33a5ab340a1392ba5457f8d6a385ff9fcc87e558e5bdd82a02ce1d2be62" name="git-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="b3bef910c17250f4390db851d7383da797f2ca0bc4a65712b28cdfeefd7659aa" name="git-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="8f8ae79c03a68ffe7f62ca1f2f5860e71be87b980bbb413902dbbd7e375f4546" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="0c7bb39ec179b51d6fa85c0908a0cd3b37c0b213f892b2839aba2dcc5ebfcf83" name="git-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="57166766e3aba191ab38b521b456d428248955ae8b9380bf8b77ada965951f35" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="0f8e4e14afe17455f4ea3d6d6cad2c780abfe8c94eaabb5839a3e5984e987d43" name="git-debugsource" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="663a459beaa87fb882ccee7f70f289f16b6e705945e083d70ca526abb09639e7" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="6c5c66cb1cf97a8dbd57be7b1498613b18a1fbfe9e5848334e449e7903abf023" name="git-debugsource" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="51a82f30a30f9d7c6ce16a85d4e88b5a498b0c3bd83ef2cb5e87b11839835483" name="git-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="ef123b55e7c8c3695f51c20483986c2e2e1444c657febeb70c617b7b95e91f14" name="git-svn-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="bc41b1c77dbdee5ee42618a14a0ee0fbab49752d0630ad927fbe31a8b8cc5d93" name="git-svn-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.3.1"/>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1565784000">- git 2.22.1
  * A relative pathname given to "git init --template=&lt;path&gt; &lt;repo&gt;"
  ought to be relative to the directory "git init" gets invoked in,
  but it instead was made relative to the repository, which has been
  corrected.
  * "git worktree add" used to fail when another worktree connected to
  the same repository was corrupt, which has been corrected.
  * "git am -i --resolved" segfaulted after trying to see a commit as
  if it were a tree, which has been corrected.
  * "git merge --squash" is designed to update the working tree and the
  index without creating the commit, and this cannot be countermanded
  by adding the "--commit" option; the command now refuses to work
  when both options are given.
  * Update to Unicode 12.1 width table.
  * "git request-pull" learned to warn when the ref we ask them to pull
  from in the local repository and in the published repository are
  different.
  * "git fetch" into a lazy clone forgot to fetch base objects that are
  necessary to complete delta in a thin packfile, which has been
  corrected.
  * The URL decoding code has been updated to avoid going past the end
  of the string while parsing %-&lt;hex&gt;-&lt;hex&gt; sequence.
  * "git clean" silently skipped a path when it cannot lstat() it; now
  it gives a warning.
  * "git rm" to resolve a conflicted path leaked an internal message
  "needs merge" before actually removing the path, which was
  confusing. This has been corrected.
  * Many more bugfixes and code cleanups.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
</package>
<package pkgid="ccf94dcd751583d214896a34c4cf9b2b027b859424cb5b668d46197672aed42e" name="git-svn-debuginfo" arch="i586">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="b88c3ada894f87cc7331a19f893a9b16d03a2ccf74222683c848f3e667b5c18a" name="git-svn-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26.2" rel="lp152.2.6.1"/>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1566129600">- git 2.23.0:
  * The "--base" option of "format-patch" computed the patch-ids for
    prerequisite patches in an unstable way, which has been updated
    to compute in a way that is compatible with "git patch-id
  - -stable".
  * The "git log" command by default behaves as if the --mailmap
    option was given.
  * fixes and improvements to UI, workflow and features</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570104000">- These patches have been merged upstream a long time ago, no longer needed:
  * 0001-submodule-helper-use-to-signal-end-of-clone-options.patch
  * 0002-submodule-config-ban-submodule-urls-that-start-with-.patch
  * 0003-submodule-config-ban-submodule-paths-that-start-with.patch
  * git-mark-path-lookup-errors.patch</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1570449600">- Complete (but maybe a bit too generous) fix of bsc#1112230</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1572868800">- git 2.24.0
  * The command line parser learned "--end-of-options" notation.
  * A mechanism to affect the default setting for a (related) group of
    configuration variables is introduced.
  * "git fetch" learned "--set-upstream" option to help those who first
    clone from their private fork they intend to push to, add the true
    upstream via "git remote add" and then "git fetch" from it.
  * fixes and improvements to UI, workflow and features, bash completion fixes
- modified patch 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  * part of it merged upstream
  * the Makefile attempted to download some documentation, banned</changelog>
  <changelog author="Andreas Schwab &lt;schwab@linux-m68k.org&gt;" date="1572868801">- 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch: Don't remove
  "-x manpage.xsl" option
- BuildRequire docbook5-xsl-stylesheets</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1575028800">- added patch git-skip-test-s390x-aarch64-fail.patch
  * workaround for bsc#1156651</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1575028801">- Guard xmlto/sgml-skel BuildRequires by docs bcond.
- Fix building with asciidoctor and without DocBook4 stylesheets:
  * Add 0002-Also-use-DocBook-5-stylesheet-when-generating-HTML-o.patch
  * Refresh 0001-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
- Spec file cleanup, remove conditionals for obsolete/EOLed distros.
- Drop curl (executable) BuildRequires, only required by some skipped
  tests (skipped as these have an apache2 prerequisite).</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1576065600">- git 2.24.1:
  * CVE-2019-1348: The --export-marks option of fast-import is
    exposed also via the in-stream command feature export-marks=...
    and it allows overwriting arbitrary paths (boo#1158785)
  * CVE-2019-1349: on Windows, when submodules are cloned
    recursively, under certain circumstances Git could be fooled
    into using the same Git directory twice (boo#1158787)
  * CVE-2019-1350: Incorrect quoting of command-line arguments
    allowed remote code execution during a recursive clone in
    conjunction with SSH URLs (boo#1158788)
  * CVE-2019-1351: on Windows mistakes drive letters outside of
    the US-English alphabet as relative paths (boo#1158789)
  * CVE-2019-1352: on Windows was unaware of NTFS Alternate Data
    Streams (boo#1158790)
  * CVE-2019-1353: when run in the Windows Subsystem for Linux
    while accessing a working directory on a regular Windows
    drive, none of the NTFS protections were active (boo#1158791)
  * CVE-2019-1354: on Windows refuses to write tracked files with
    filenames that contain backslashes (boo#1158792)
  * CVE-2019-1387: Recursive clones vulnerability that is caused
    by too-lax validation of submodule names, allowing very
    targeted attacks via remote code execution in recursive
    clones (boo#1158793)
  * CVE-2019-19604: a recursive clone followed by a submodule
    update could execute code contained within the repository
    without the user explicitly having asked for that (boo#1158795)</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1579003200">- git 2.25.0
  * The branch description ("git branch --edit-description") has been
    used to fill the body of the cover letters by the format-patch
    command; this has been enhanced so that the subject can also be
    filled.
  * A few commands learned to take the pathspec from the standard input
    or a named file, instead of taking it as the command line
    arguments, with the "--pathspec-from-file" option.
  * Test updates to prepare for SHA-2 transition continues.
  * Redo "git name-rev" to avoid recursive calls.
  * When all files from some subdirectory were renamed to the root
    directory, the directory rename heuristics would fail to detect that
    as a rename/merge of the subdirectory to the root directory, which has
    been corrected.
  * HTTP transport had possible allocator/deallocator mismatch, which
    has been corrected.
  - dropped patch git-skip-test-s390x-aarch64-fail.patch (bsc#1156651)
  * upstream maintainers have skipped the test themselves</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1581940800">- git 2.25.1:
  * "git commit" now honors advise.statusHints
  * various updates, bug fixes and documentation updates</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584619200">- git 2.25.2:
  * bug fixes to various subcommands in specific operations</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1584964800">- git 2.26.0 (bsc#1167890, jsc#SLE-11608):
  * "git rebase" now uses a different backend that is based on the
    'merge' machinery by default. The 'rebase.backend' configuration
    variable reverts to old behaviour when set to  'apply'
  * Improved handling of sparse checkouts
  * Improvements to many commands and internal features</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1586865600">- git 2.26.1:
  * CVE-2020-5260: Specially crafted URLs with newline characters
    could have been used to make the Git client to send credential
    information for a wrong host to the attacker's site boo#1168930</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587124800">- Fix git-daemon not starting after conversion from sysvinit to systemd service
  (bsc#1169605).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1587384000">- Submit to SLE15 / resubmit to Factory (bsc#1169786, jsc#SLE-12396, bsc#1149792)</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1587384001">- git 2.26.2:
  * CVE-2020-11008: Specially crafted URLs may have tricked the
    credentials helper to providing credential information that
    is not appropriate for the protocol in use and host being
    contacted (boo#1169936)</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.de&gt;" date="1587470400">- With recent switch to protocol v2 people are reporting fetches transferring
  unreasonable amount of data. Upstream proposes switching the protocol back
  until the issue is properly diagnosed. The regression is problematic for
  people with lower network connection speed (bsc#1170741).
  Added: Revert-fetch-default-to-protocol-version-2.patch</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1587988800">- Add back SuSEfirewall2 support needed for SLE12 (bsc#1170302).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1588075200">- Protocol v2 in_vain fixes (bsc#1170741, bsc#1170939).
  Dropped: Revert-fetch-default-to-protocol-version-2.patch
  Added:   0001-fetch-pack-return-enum-from-process_acks.patch
    0002-fetch-pack-in-protocol-v2-in_vain-only-after-ACK.patch
    0003-fetch-pack-in-protocol-v2-reset-in_vain-upon-ACK.patch</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1614859200">- On case-insensitive filesystems, with support for symbolic links,
  if Git is configured globally to apply delay-capable clean/smudge
  filters (such as Git LFS), Git could be fooled into running
  remote code during a clone. (bsc#1183026, CVE-2021-21300)
  * checkout-dont-follow-symlinks.patch</changelog>
</package>
<package pkgid="760ca1692f8ab872ee631e29f4b997e9875e92de249fda310119323b5cdf866b" name="glfw-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="lp152.2.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1421323200">- Update to version 3.0.4
  +Added the GLFW_BUILD_DOCS CMake option for controlling whether
  the documentation is built
  +Added the _GLFW_USE_CONFIG_H configuration macro for controlling
  whether to include the configuration header
  +Moved version number macro to internal.h for easier manual compilation
  +Renamed configuration header to glfw_config.h to avoid conflicts
  +Bugfix: The glfw3.pc file did not respect the LIB_SUFFIX CMake option
  +Bugfix: The joysticks test would segfault if a controller had no axes
  +[Win32] Allowed swap interval to be explicitly set to zero on DWM systems
  +[Win32] Bugfix: Removed joystick axis value negation left over from GLFW 2
  +[Win32] Bugfix: Restoring windows using the Win+D hot key did not
  trigger the focus callback
  +[Win32] Bugfix: The disabled cursor mode clip rectangle was updated
  for unfocused windows
  +[Win32] Bugfix: Cursor was not properly re-centered over odd-sized windows
  +[Win32] Bugfix: Negative window positions were reported incorrectly
  +[Win32] Bugfix: The iconify callback was not triggered when switching
  away from a full screen window using Alt+Tab
  +[Win32] Bugfix: Resizing a window with glfwSetWindowSize gave it focus
  +[Cocoa] Added dependency on CoreVideo framework for refresh rate retrieval
  +[Cocoa] Enabled Lion full screen for resizable windowed mode windows
  +[Cocoa] Moved to Cocoa API for application transformation and activation
  +[Cocoa] Bugfix: The GLFW_KEY_GRAVE_ACCENT key was reported as
  GLFW_KEY_WORLD_1 and vice versa
  +[Cocoa] Bugfix: The GLFW_KEY_F13 key was reported as GLFW_KEY_PRINT_SCREEN
  +[Cocoa] Bugfix: Implicit conversion from NSUInteger to int caused
  warnings with Xcode 5
  +[Cocoa] Bugfix: Use of undeclared selectors with @selector caused
  warnings with Xcode 5
  +[Cocoa] Bugfix: The cursor remained visible if moved onto client
  area after having been set to hidden outside it
  +[Cocoa] Bugfix: The refresh rate was zero for all modes of certain monitors
  +[Cocoa] Bugfix: The install_name field of the dynamic library was not set
  +[Cocoa] Bugfix: Full screen windows were never reported as having focus
  +[Cocoa] Bugfix: A superfluous I/O flag test prevented video modes from
  being listed for Thunderbolt monitor
  +[Cocoa] Bugfix: Retrieving the name of some external displays caused segfault
  +[Cocoa] Bugfix: The 10.9 SDK defines GLintptrARB and GLsizeiptrARB
  differently from the Khronos glext.h
  +[Cocoa] Bugfix: Creating hidden windows would steal application focus
  +[Cocoa] Bugfix: Controllers were reported as having zero buttons and axes
  +[Cocoa] Bugfix: Removed joystick axis value negation left over from GLFW 2
  +[X11] Added setting of the WM_CLASS property to the initial window title
  +[X11] Added support for _NET_WM_BYPASS_COMPOSITOR
  +[X11] Bugfix: Removed joystick axis value negation left over from GLFW 2
  +[X11] Bugfix: The position of hidden windows was ignored by Metacity and Compiz
  +[X11] Bugfix: The pthread.h header was not included by the GLX platform header.
- Add upstream new dependencies: cmake, gcc-c++, doxygen, geany,
  pkgconfig(xi)
- Add a dependency to cmake in devel subpackage
- Build the geany tags
- Package README.md into doc directory
- Package examples code in devel subpackage
- Remove the static devel subpackage; not provided anymore
- Fix the home page Url
- Bump so version to 3</changelog>
  <changelog author="zaitor@opensuse.org" date="1422964800">- Update to version 3.1:
  + Added GLFWcursor custom system cursor handle
  + Added glfwCreateCursor, glfwCreateStandardCursor, glfwDestroyCursor and glfwSetCursor for managing system cursor images
  + Added GLFWimage struct for passing 32-bit RGBA images
  + Added monitor and adapter identifier access to native API
  + Added glfwSetDropCallback and GLFWdropfun for receiving dropped files
  + Added glfwPostEmptyEvent for allowing secondary threads to cause glfwWaitEvents to return
  + Added empty test program for verifying posting of empty events
  + Added glfwSetCharModsCallback for receiving character events with modifiers
  + Added glfwGetWindowFrameSize for retrieving the size of the frame around the client area of a window
  + Added GLFW_AUTO_ICONIFY for controlling whether full screen windows automatically iconify (and restore the previous video mode) on focus loss
  + Added GLFW_DONT_CARE for indicating that any value is acceptable
  + Added GLFW_DOUBLEBUFFER for controlling whether to use double buffering
  + Added GLFW_CONTEXT_RELEASE_BEHAVIOR and values GLFW_ANY_RELEASE_BEHAVIOR, GLFW_RELEASE_BEHAVIOR_FLUSH and GLFW_RELEASE_BEHAVIOR_NONE for GL_KHR_context_flush_control support
  + Added GLFW_INCLUDE_ES31 for including the OpenGL ES 3.1 header
  + Added GLFW_FLOATING for creating always-on-top windowed mode windows
  + Added GLFW_FOCUSED window hint for controlling initial input focus
  + Added partial and experimental support for Wayland
  + Added partial and experimental support for Mir
  + Changed the window state attributes (focused, iconified and visible) to query the system directly
  + Changed the default of GLFW_REFRESH_RATE to GLFW_DONT_CARE to maintain the default behavior
  + Changed static library to build as position independent code for easier use from the Rust language
  + Changed glfwGetCursorPos to query the system directly for all cursor modes except captured mode
  + Bugfix: The debug context attribute was set from GL_ARB_debug_output even when a debug context had not been requested
  + Bugfix: The particles example was not linked against the threading library
  + Bugfix: The cursor was not positioned over newly created full screen windows
  + Bugfix: The queried cursor position was not always up-to-date
  + Bugfix: glfwExtensionSupported always failed for OpenGL ES 3.0 and later if the library was compiled for OpenGL ES
  + [X11] Added run-time support for systems lacking the XKB extension
  + [X11] Made GLX 1.3 the minimum supported version
  + [X11] Replaced XRRGetScreenResources with XRRGetScreenResourcesCurrent for monitor property retrieval
  + [X11] Bugfix: The case of finding no usable CRTCs was not detected
  + [X11] Bugfix: Detection of broken Nvidia RandR gamma support did not verify that at least one CRTC was present
  + [X11] Bugfix: A stale _NET_SUPPORTING_WM_CHECK root window property would cause an uncaught BadWindow error
  + [X11] Bugfix: No check was made for the presence of GLX 1.3 when GLX_SGIX_fbconfig was unavailable
  + [X11] Bugfix: The message type of ICCCM protocol events was not checked
  + [X11] Bugfix: glfwDestroyWindow did not flush the output buffer
  + [X11] Bugfix: Window frame interactions were reported as focus events
  + [X11] Bugfix: Workaround for legacy Compiz caused flickering during resize
  + [X11] Bugfix: The name pointer of joysticks were not cleared on disconnection
  + [X11] Bugfix: Video mode resolutions and monitor physical sizes were not corrected for rotated CRTCs
  + [X11] Bugfix: Unicode character input ignored dead keys
  + [X11] Bugfix: X-axis scroll offsets were inverted
  + [X11] Bugfix: Full screen override redirect windows were not always positioned over the specified monitor
  + [X11] Bugfix: Character input did not work for the default "C" locale
  + [X11] Bugfix: Joysticks connected after glfwInit were not detected (temporary inotify solution until proper libudev solution)
- Add pkgconfig(xinerama), pkgconfig(xcursor) BuildRequires: New dependencies.</changelog>
  <changelog author="jengelh@inai.de" date="1442491200">- Update to new upstream release 3.1.1
  * This release adds fixes for a number of bugs that together affect
  all supported platforms, most notably workarounds for bugs in
  some popular window managers.
- Reduce overly explicit filelist</changelog>
  <changelog author="mimi.vx@gmail.com" date="1445688000">- Update to version 3.1.2
  * bugfix release, full changelog on http://www.glfw.org/changelog.html</changelog>
  <changelog author="rpm@fthiessen.de" date="1463572800">- Made build of geany-tags optional (fix SLE).</changelog>
  <changelog author="jengelh@inai.de" date="1468756800">- Trim irrelevant parts from %description</changelog>
  <changelog author="rpm@fthiessen.de" date="1470916800">- Update to new upstream release 3.2</changelog>
  <changelog author="mpluskal@suse.com" date="1486900800">- Update to version 3.2.1:
  * Added on-demand loading of Vulkan and context creation API
    libraries
  * Added _GLFW_VULKAN_STATIC build macro to make the library use
    the Vulkan loader linked statically into the application (#820)
  * Bugfix: Single compilation unit builds failed due to naming
    conflicts (#783)
  * Bugfix: The range checks for glfwSetCursorPos used the wrong
    minimum (#773)
  * Bugfix: Defining GLFW_INCLUDE_VULKAN when compiling the library
    did not fail with the expected error message (#823)
  * Bugfix: Inherited value of CMAKE_MODULE_PATH was clobbered
    (#822)
  * [X11] Bugfix: Window size limits were ignored if the minimum or
    maximum size was set to GLFW_DONT_CARE (#805)
  * [X11] Bugfix: Input focus was set before window was visible,
    causing BadMatch on some non-reparenting WMs (#789,#798)
  * [X11] Bugfix: glfwGetWindowPos and glfwSetWindowPos operated on
    the window frame instead of the client area (#800)
  * [WGL] Added reporting of errors from WGL_ARB_create_context
    extension
  * [GLX] Bugfix: Dynamically loaded entry points were not verified
  * [EGL] Added lib prefix matching between EGL and OpenGL ES
    library binaries
  * [EGL] Bugfix: Dynamically loaded entry points were not verified
- Enable vulkan on Tumbleweed</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1549022400">- Sort list of input files to geany for reproducible builds
  (boo#1049382, boo#1041090)</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1555416000">- Update to version 3.3
  * Changes too numerous to list, see
    https://www.glfw.org/docs/latest/news.html#news_33</changelog>
  <changelog author="Simon Puchert &lt;simonpuchert@alice.de&gt;" date="1585137600">- Update to version 3.3.2
  * [X11] bugfixes:
  * glfwFocusWindow could terminate on older WMs or without a WM
  * Creating an undecorated window could fail with BadMatch (#1620)
  * Querying a disconnected monitor could segfault (#1602)
- Update to version 3.3.1
  * General bugfixes:
  * The CMake config-file package used an absolute path and was not
    relocatable (#1470)
  * Video modes with a duplicate screen area were discarded
    (#1555,#1556)
  * Compiling with -Wextra-semi caused warnings (#1440)
  * Built-in mappings failed because some OEMs re-used VID/PID
    (#1583)
  * [X11] bugfixes:
  * The CMake files did not check for the XInput headers (#1480)
  * Key names were not updated when the keyboard layout changed
    (#1462,#1528)
  * Decorations could not be enabled after window creation (#1566)
  * Content scale fallback value could be inconsistent (#1578)
  * glfwMaximizeWindow had no effect on hidden windows
  * Clearing GLFW_FLOATING on a hidden window caused invalid read
  * Changing GLFW_FLOATING on a hidden window could silently fail
  * Disabled cursor mode was interrupted by indicator windows
  * Monitor physical dimensions could be reported as zero mm
  * Window position events were not emitted during resizing (#1613)
  * [Wayland] Bugfix: The GLFW_HAND_CURSOR shape used the wrong
    image (#1432)
- See also: https://www.glfw.org/changelog.html</changelog>
  <changelog author="Dirk Stoecker &lt;opensuse@dstoecker.de&gt;" date="1598443200">- Require pkgconfig(gl) for the devel package to supply needed
  include GL/gl.h</changelog>
</package>
<package pkgid="f1e9d4b1f9515663c3421065dfb9eb4774761edbe98035c10020efac512a2df2" name="glib2-debugsource" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="646ce7e68038c165a1ebc534bebd3110992a04fddbfb699130b56d1fe9b6f6c7" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="cabdb7bfdf4063131fb6aadaf9ed72af97a601b48d0f1898576146af6de55d79" name="glib2-debugsource" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="8cca2e21c2eced2427c7f1151c342973bdb31a303523128a6bccae611c4c5b53" name="glib2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="617c8f28520641024115f5d941990fe80b3c9bddfce9258191454407d7840786" name="glib2-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="a5c5c695eed08e7ca0012ceafa31b53b6d1b51846d91c075337b7322dc46ac97" name="glib2-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="99bd30a0a6da11c205b99093c14154358bea9e1745843858bf53c55ef09a2acc" name="glib2-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="4930571bdf56f06ca67b6797b05b9af32c5105ee2d1fd8798db5e97bb93613c9" name="glib2-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="be90cffe720f2862c2fce3dd258569b6d84f95e115f899fa33a76da2cdddc187" name="glib2-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="0f11865c41ae4d440b21f4f898076e7691547ea4a3415c4ca3d91d85e94e5227" name="glib2-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="2063576ab8b4f8a6d6361a149ba637cf67fdab0dc63692912da16b2d8028cba8" name="glib2-tests-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="6c2e5a941bd0260ab93e6910f54da94e05991e2097998385d8ee0240b0a0f732" name="glib2-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="5450eb16a87b6958c354d622f19a5100a258a9d4d933c09219d93bcd9d8bcfaf" name="glib2-tests-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="b514ba5103d2e77143ba22aa67ba2d3ad64eba0015f0a4d35fe57a51e741d1de" name="glib2-tests-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="e057afeb2af17a97b65494ab595555a188f4d6d6e96be047da9304699a947674" name="glib2-tools-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="0ab7ae45f467bde7ce0fcfd5d07c749c4c413f8ffbcd5e3f3ebc1e3ffdd6eb0e" name="glib2-tools-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="e7a622cecd55340bfb403636c3009dda135718b84e2fc6a4e669b0447cec1060" name="glib2-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="37d3618841b69647015bc17dff6f1c87282dcd8c14737c24f069e0c7bbbfdf3b" name="glib2-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.3.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move glib2.macros to %_rpmmacrodir. /etc is for the system admin.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Update to version 2.60.3:
  + * Various fixes to small key/value support in `GHashTable`.
  * Bugs fixed:
  - Critical in g_socket_client_async_connect_complete.
  - New GHashTable implementation confuses valgrind.
  - test_month_names: assertion failed.
  - GNetworkAddressAddressEnumerator unsafely modifies cache in
    GNetworkAddress.
  - Leaks in gsocketclient.c connection code.
  - glib/date test fails.
  - GDB pretty-printer for GHashTable no longer works
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612801">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
</package>
<package pkgid="c367cc447cc3c70b3469f58940f8842330aadf22dbe67dea3f9f48e8dc88aa21" name="glib2-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="c394958c8f760e11fa6305e1ca56c019fd2ceb695f3c7b22f14b410dd0087657" name="glib2-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="lp152.2.6.1"/>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1558612800">- Set umask to 022 before running glib-compile-schemas
  (boo#1131761).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
</package>
<package pkgid="77c70c6843d7566ac056e5ee92f944a60e28f1d5f0dfd00bc05b6e40352e22e6" name="glibc-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="9c3eb51e9e50cff249b9d8b2a615e9564203922391b8d7a46ba1127e5a6e40d4" name="glibc-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="e98286ba8f53c672971a10f5ec06d214e7ba5fa9f9a8ce926f2533a588f2ead6" name="glibc-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="0ac47bf2e1beeb85dba8d8fdc2d0a6d255f3fc76f4ae68fd0fb249617d81830f" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="5340f9189b04de2187fac230447d0f5ed72c3a4f1fdbfcbf58b8251f60edc091" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="f96a006beb4fcc2d36f93e4c1a8d5a8b199fe0ea87e910aa34cfbb3263080f3e" name="glibc-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="a92dc10810954e87df6bf925ce6f71364c535294c56def8045341bbb49348310" name="glibc-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="7f8985a05eec321e9735a95e77194003dcd6ca6c4ca86c23c540e8cca4d2bcfc" name="glibc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="5f223ce7a0f57bd63d726b830749a1124ec2d43c3cbcbceb74581e0836af4a1c" name="glibc-debugsource" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="3476b3e5f49d7dfafd76dd0ea0987a5cb7c8198450948c1ca6519be7168bad53" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="2e1bfb3f759301e9b0a23072ccddf97ab770e1df9d129f89955fd273eb151787" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="eab8a4e94a3825a7b40d786e1df491f59e644a1b2ed75628a9f797a754c2a62b" name="glibc-debugsource" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="90565f309e30d0b8cf2c7a4fd35aace7e5ec400969852a2c8ccb65d63f87ef00" name="glibc-debugsource" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="b02326e43af146622d87fe2763d696055e5958fdc40e2e9e220911199d4fc186" name="glibc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="18a75a48c3f39d1a427c9d7d883f713ec9af0ed15d65d594fb03b9570ae8ae81" name="glibc-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="a6f41b78dba883f306676c0ab1ea602c0b74681b639299f665946a593a67378f" name="glibc-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="4e9e01a05146ad1ecc1229b14c0120031c9075b856a803838d1d4f19434ec1b2" name="glibc-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="2b126bd816c4b745e25b6cbfb0202397acc79d9ba2e55fbd9d96b16fc84b737a" name="glibc-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="95877018ce8d736e8fce692112e53f104695e3efa69df13d524caac08563f641" name="glibc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="da114c81357454e4e559286d3e137409694e70fc4fb3be0a6ca150833112ffdb" name="glibc-devel-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="0f3429e5d7dbe9a7986a740b52e20843ae693ef9021dc751826cad075a6bcfe5" name="glibc-devel-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="aade4e4933a425eae12a8ed023cf1fd99047e4ae0d70261b59d948c434b9e50f" name="glibc-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="8fab227f1f937f3d49d99bd7b28f1f7ef2638fff08900b2c500ea0db1e201cda" name="glibc-extra-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="fa9f59c3bb3fc66784b52a81218f8b0f066f6bfc8fe023fc47ab625ca4a8f449" name="glibc-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="38c27ba77f94511f6e9e56992088846e842af2cdaa9c32ec038f1f1a081e7078" name="glibc-extra-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="19497529bbcfcd213c7ea80123a113531b6aa1ce83e4466ccbf113d54d97a9ef" name="glibc-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="e2aca03b9bbb516c9bdc5890e45c863e1c26183886e46341dd5d884a1a693ee0" name="glibc-locale-base-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="0219f24692676c9a8689b58453ee4878bea98a4da63e765ba9973514325d2383" name="glibc-locale-base-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="4043b02e67f41b3acb1857c1cba940095670b08fcc978448ead120cf9bfc30f9" name="glibc-locale-base-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="6a95f2de76170711974314f17827fed62072902d4c56a379fec7738d3d5724ca" name="glibc-locale-base-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="6438c530678d43362cb59c06002020e046835bd5d7aae78935738e8637be5860" name="glibc-locale-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="834a60c7b763a4636b829673125e8bdbeb1d899b8104ee213e2e4d942cc82721" name="glibc-locale-base-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="4efed9f5e9defd466fd124f26b35b4de3e58bcad87805ee90ad826876be6c45a" name="glibc-locale-base-debuginfo" arch="i686">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="8a3013f89b85d1dee3fee3f63e76fdecdf9328855ff57616428058dc089207b3" name="glibc-locale-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="6ccf7df01cde5434e88531b28a6e17bb9bfdaeecd28402ad5dd4f642dee12967" name="glibc-utils-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="f6088765a9514fd051715aaf0a264aadc5a59242f0cf1bbbf85335fbb6f9acbd" name="glibc-utils-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="9eb174c5afad54d33f0b002664dde5b93669c5d4031afc57c29f6b6c6ee9da2e" name="glibc-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="59762050abd439dd31b10bc334ed1202acfaea7824721207206c87ac01a214e5" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="22321e91cffc592adc8bc4ae19f8ce2a594fcb882e99af5b0e02a385f3fd9fec" name="glibc-utils-debuginfo" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="623c278d4d9ea401c7f98ca3bebb1f61908adca3836e405ab5d42603f96f17ce" name="glibc-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="fa713796cfeea2eb9569b38d93d0b4c1b555a1008642f7eab01fe536fc5c4a9e" name="glibc-utils-src-debugsource" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="a7b8bb3773f0ea6c60c17629e41e4f4bf47badccbcb9b4354a6581d99036c6f9" name="glibc-utils-src-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.3.1"/>
  <changelog author="schwab@suse.de" date="1541592000">- x86-haswell-string-flags.patch: Fix Haswell CPU string flags
  (bsc#1114984, BZ #23709)
- pthread-cond-broadcast-waiters-after-spinning.patch: Fix
  waiters-after-spinning case (bsc#1114993, BZ #23538)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1551787200">- mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
- mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
  4.15 (bsc#1126590)
- nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
  in coredumps (bsc#1063675, BZ #22153)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1553169600">- pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
  the correct order of instructions while maintaining the robust mutex
  list due to missing compiler barriers (bsc#1130045, BZ #24180)
- getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
  address strings (CVE-2016-10739, bsc#1122729, BZ #20018)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
</package>
<package pkgid="d4a735234e9c539e429fe971079bc05cac4aae86fcf72001dc74b347dfd2f1b7" name="glibc-utils-src-debugsource" arch="i586">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="7f19bc62f3c2069cad5037060c3b047b496eea73ce9a055760efdb3fb1ea04ac" name="glibc-utils-src-debugsource" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp152.26.6.1"/>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1554292800">- japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
  Japanese era (bsc#1100396, BZ #22964)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559649600">- force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
  to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559736000">- ldconfig-concurrency.patch: Avoid concurrency problem in ldconfig
  (bsc#1117993, BZ #23973)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1559822400">- crt-nocompress-debug-sections.patch: Don't compress debug sections in
  crt*.o files (bsc#1123710)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1560427200">- regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
  behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
- regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
  bsc#1127308, BZ #24114)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1573646400">- GNU1815 - Hardware support in toolchain (bsc#1151582)
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
  0003-S390-Unify-31-64bit-memcpy.patch
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
  0008-S390-Add-z13-memmove-ifunc-variant.patch
  0009-S390-Add-z13-strstr-ifunc-variant.patch
  0010-S390-Add-z13-memmem-ifunc-variant.patch
  0011-S390-Cleanup-ifunc-resolve.h.patch
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
  0015-S390-Add-arch13-memmove-ifunc-variant.patch
  0016-S390-Add-arch13-strstr-ifunc-variant.patch
  0017-S390-Add-arch13-memmem-ifunc-variant.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1574337600">- prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
  honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
  [#25204])</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1575892800">- s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
  a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1576065600">- ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
  initialization (SLE-8348, BZ #22685)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1578571200">- posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
  popen (bsc#1149332, BZ #22834)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1579608000">- backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
  (CVE-2020-1751, bsc#1158996, BZ #25423)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1582632000">- pthread-rwlock-pwn.patch: Fix rwlock stall with
  PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
- manual-memory-protection.patch: manual: Document mprotect and introduce
  section on memory protection (bsc#1163184)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583409600">- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1583841600">- dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
  object to work (bsc#1166106, BZ #16272)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1608120000">- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1613044800">- euc-kr-overrun.patch: Fix buffer overrun in EUC-KR conversion module
  (CVE-2019-25013, bsc#1182117, BZ #24973)</changelog>
</package>
<package pkgid="68ef19d2ac4071bd89fc9d2c4f86d22e604f4aad97d675571d945ae0410cab9a" name="gmenudbusmenuproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.18.6" rel="lp152.3.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1572350400">- Update to 5.17.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.2.php
- Changes since 5.17.1:
  * [wallpapers/image] Randomise new batches of images in the slideshow (kde#413463)
  * [wallpapers/image] Seed random number generator
  * [Lock Screen] Don't use black shadows with black text (kde#413537)
  * clear the cells before relayouting the items (kde#413019)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1573560000">- Update to 5.17.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.3.php
- Changes since 5.17.2:
  * Fix binding loop in lockscreen media controls (kde#413087)
  * update panel shadows when background hints are changed
  * [Slideshow] Reenable other modes
  * Make env in plasma-sourceenv.sh call portable</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1575460800">- Update to 5.17.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.4.php
- Changes since 5.17.3:
  * [sddm-theme] Fix initial focus after SDDM QQC2 Port
  * [XembedSNIProxy] Send all container windows to background on KWin restart (kde#357443)
  * [XembedSNIProxy] If available, always use 32-bit color. (kde#356937)
  * Port to non-deprecated KWindowSystem::setMainWindow overload
  * Fix broken multimedia control on lockscreen (kde#414487)
  * NET::StaysOnTop -&gt; NET::KeepAbove (since 5.0)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1578398400">- Update to 5.17.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.5.php
- Changes since 5.17.4:
  * Fix build with gpsd 3.20 (kde#425939)
  * [Notifications] Don't show DrKonqi notifications in history
  * Revert "Add Meta+Space as a default shortcut to activate KRunner"
  * [Notifications] Release all cookies when service unregisters
  * Revert "[sddm-theme] Fix initial focus after SDDM QQC2 Port" (kde#414875)
  * Keep at least one system monitor alive
  * Use the right value of EnableMagicMimeActions
  * [sddm-theme] Fix initial focus after SDDM QQC2 Port</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579003200">- Add patch to fix/workaround scaling issues Qt 5.14.0 (kde#415421, boo#1160624):
  * 0001-Set-QT_AUTO_SCREEN_SCALE_FACTOR-0-for-Qt-5.14-as-wel.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579176000">- Update to 5.17.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.90.php
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
  * lazy-sddm-theme.patch
- Refresh patches:
  * 0001-Use-qdbus-qt5.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579608000">- knewstuff-imports is needed for several KCMs</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579780800">- Replace %make_jobs with %cmake_build</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1580990400">- Update to 5.18.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.0.php
- Changes since 5.17.90:
  * tooltips always have normal color group
  * Fix typo
  * [Notifications] Don't dodge notification popups
  * [Notifications] Fixup setSourceModel
  * [SNI] Fix race condition in item registration (kde#416652)
  * [Notifications] Fix typo
  * Shut up
  * [System Tray] Initially set correct category for plasmoids (kde#416947)
  * [Task Manager] Remove strict URL handling (kde#385727)
  * [context menu] Remove last traces of "Lock Widgets" action from UI (kde#416578)
  * Remove unused includes
  * Port plasma-workspace to autoconfig.kde.org
  * [sddm-theme] Fix broken wallpaper loading
  * [Notifications] Fix action button size
  * search for a default wallpaper in lookandfeel
  * [startkde] Export LC_TIME again (kde#416670)
  * [Notifications] Set transient parent for file menu (kde#387597)
  * [SystemTray] Fix model update in settings (missing icon) (kde#416400)
  * [SystemTray] Remove scrollbar paddings
  * Runner/Windows make the window finding more reliable (kde#414804)
  * Kicker/RecentDocuments display place's icon when resource matches one
  * [Notifications] When there is only a reply action, show reply field right away
  * [Notifications] Send reply text as targeted signal
  * Also disable automatic scaling on Qt &gt;= 5.14 (kde#415421)
  * add includes needed for compiling with qt 5.13
- Drop patches, now upstream:
  * 0001-Set-QT_AUTO_SCREEN_SCALE_FACTOR-0-for-Qt-5.14-as-wel.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1581422400">- Update tarball, now with updated preview images</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582027200">- Update to 5.18.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.1.php
- Changes since 5.18.0:
  * [kcms/feedback] Improve default kcmshell window size (kde#417747)
  * Extract messages from header files as well (Thanks to Victor Ryzhykh)
  * Remove downloadNewWhat usage
  * Don't delay ksplash until the entire slideshow is loaded
  * [Notifications] Only let details label grow, never shrink (kde#417489)
  * [libtaskmanager] Fix shared VirtualDesktopInfo::Private tied to the 1st creator (kde#415200)
  * [Background Finder] Create a valid invocation token
  * Replace plasma.kde.org with kde.org/plasma-desktop</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582632000">- Update to 5.18.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.2.php
- Changes since 5.18.1:
  * Use appropriate icon for unconfigured applets' "Configure..." buttons
  * [applets/systemtray] Clip ListView in config
  * [kcms/feedback] Increase default window height a bit more (kde#417747)
  * fix activity runner
- Build the KUserFeedback KCM</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1583841600">- Update to 5.18.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.3.php
- Changes since 5.18.2:
  * [gmenu-dbusmenu-proxy] Fix radio button state detection
  * [gmenu-dbusmenu-proxy] Pass action "target" in invocation
  * Degrade qCInfo to qCDebug
  * Demote jump list actions to PossibleMatches
  * ItemContainer: disconnect signals in destructor (kde#417603)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656000">- Update to 5.18.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.4.php
- Changes since 5.18.3:
  * [runners/recentdocuments] disable executables or .desktop files (kde#419310)
  * [applets/digital-clock] Fix inappropriately high QtQuick version
  * [applets/systemtray] Clear item from shown/hidden list when disabling entry (kde#419197)
  * [applets/digital-clock] Fix date sizing in vertical panel (kde#417852)
  * [VirtualDesktopInfo] Connect to rowsChanged singal (kde#408783)
  * Fix systemtray configuration</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656001">- Update to 5.18.4.1:
  * Version fixed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1588680000">- Update to 5.18.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.5.php
- Changes since 5.18.4.1:
  * [Notifications] Don't show do not disturb end date beyond 100 days
  * [systemtray] Fix SNI icon not rendering (kde#419305)
  * [KRunner] Watch config with KConfigWatcher
  * [Notifications] Have checkIndex check if the index is valid
  * [Notifications] Fix typo
  * Fix warning about connecting to a null sender, favoritesModel can be null
  * Fix variable assignment
  * [Notifications] Don't reverse() Array
  * use the decoded url for launcherPosition (kde#418483)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1589198400">- Add patch to fix animations with Frameworks 5.70:
  * 0001-Stop-multiplying-duration-values.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1601380800">- Update to 5.18.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma-5.18.6
- Changes since 5.18.5:
  * Fix calendar events not being shown at first
  * [applets/systemtray] Fix context menu misplaced (kde#421275)
  * [Notifications] Don't take updated time into account for sorting
  * [sddm-theme] Prevent the logo from leaking in after a fadeout</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1607169600">- Add patch to fix the weather data for Canada
  (https://invent.kde.org/plasma/plasma-workspace/-/issues/8):
  * 0001-Fix-Environment-Canada-weather-domain.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1607515200">- Replace %{_plasma5_bugfix} with hardcoded values in some places to
  allow installation with other components being at 5.18.5</changelog>
</package>
<package pkgid="00888bcfaf27fa5146638508c603dbddba9ff2065695503ee0e28ef2322ac034" name="gmp-debugsource" arch="i586">
  <version epoch="0" ver="6.1.2" rel="lp152.6.3.1"/>
  <changelog author="afaerber@suse.de" date="1415361600">- Fix tarball directory name to unbreak build</changelog>
  <changelog author="schwab@suse.de" date="1416225600">- Make gmp-noexec.diff compatible with arm
- Use correct version number</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Refresh sources
- Add gpg signature
- Correct version number so that it matches actuall version</changelog>
  <changelog author="mpluskal@suse.com" date="1424779201">- Remove old ppc related conditionals</changelog>
  <changelog author="rguenther@suse.com" date="1446465600">- Update to GMP 6.1.0 release.
  * New C++ functions gcd and lcm for mpz_class
  * New public mpn functions mpn_divexact_1, mpn_zero_p, and mpn_cnd_swap
  * New public mpq_cmp_z function, to efficiently compare rationals with
    integers
  * Support for more 32-bit arm processors
  * Support for AVX-less modern x86 CPUs
  * Speedups and bugfixes
- Includes gmp-6.0.0-ppc64-gcd.diff, now removed
- Update gmp keyring</changelog>
  <changelog author="astieger@suse.com" date="1466683200">- gmp 6.1.1:
  * Work around faulty cpuid on some recent Intel chips (this
    allows GMP to run on Skylake Pentiums).</changelog>
  <changelog author="mpluskal@suse.com" date="1467288000">- Use macro for configure (as bsc#870358) is already fixed
- Use xz compressed archives
- Update info pages dependencies</changelog>
  <changelog author="rguenther@suse.com" date="1483531200">- Update to GMP 6.1.2 release.
  * Mini-GMP: Fixed a division bug, which on a machine with 64-bit
    unsigned long affects approximately 1 out of 2^32 divisors.
  * Mini-GMP: Fix mpz_set_str crash on inputs with a large number of
    leading zeros. Also stricter input validation, rejecting inputs
    with no digits.
  * Handle more systems which require PIC code in static libraries (e.g.,
    "hardened" Gentoo and Debian 9).
  * Configuration for arm (-32 and -64) has been rewritten, fixing poor
    code selection for many CPUs.
  * Mini-GMP: Updated to the latest development version, including
    new functions mpn_com and mpn_neg.
- Add gmp-6.1.2-conftest.patch to fix configure test.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
- Run spec-cleaner on the spec</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1611921600">- adjusted to be the same license as in factory (bsc#1180603)</changelog>
</package>
<package pkgid="02947e0dac33c309b3b5fb25b39950518f74d4f25b0fd06a34d75f50a4cfa86c" name="gmp-debugsource" arch="x86_64">
  <version epoch="0" ver="6.1.2" rel="lp152.6.3.1"/>
  <changelog author="afaerber@suse.de" date="1415361600">- Fix tarball directory name to unbreak build</changelog>
  <changelog author="schwab@suse.de" date="1416225600">- Make gmp-noexec.diff compatible with arm
- Use correct version number</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Cleanup spec file with spec-cleaner
- Refresh sources
- Add gpg signature
- Correct version number so that it matches actuall version</changelog>
  <changelog author="mpluskal@suse.com" date="1424779201">- Remove old ppc related conditionals</changelog>
  <changelog author="rguenther@suse.com" date="1446465600">- Update to GMP 6.1.0 release.
  * New C++ functions gcd and lcm for mpz_class
  * New public mpn functions mpn_divexact_1, mpn_zero_p, and mpn_cnd_swap
  * New public mpq_cmp_z function, to efficiently compare rationals with
    integers
  * Support for more 32-bit arm processors
  * Support for AVX-less modern x86 CPUs
  * Speedups and bugfixes
- Includes gmp-6.0.0-ppc64-gcd.diff, now removed
- Update gmp keyring</changelog>
  <changelog author="astieger@suse.com" date="1466683200">- gmp 6.1.1:
  * Work around faulty cpuid on some recent Intel chips (this
    allows GMP to run on Skylake Pentiums).</changelog>
  <changelog author="mpluskal@suse.com" date="1467288000">- Use macro for configure (as bsc#870358) is already fixed
- Use xz compressed archives
- Update info pages dependencies</changelog>
  <changelog author="rguenther@suse.com" date="1483531200">- Update to GMP 6.1.2 release.
  * Mini-GMP: Fixed a division bug, which on a machine with 64-bit
    unsigned long affects approximately 1 out of 2^32 divisors.
  * Mini-GMP: Fix mpz_set_str crash on inputs with a large number of
    leading zeros. Also stricter input validation, rejecting inputs
    with no digits.
  * Handle more systems which require PIC code in static libraries (e.g.,
    "hardened" Gentoo and Debian 9).
  * Configuration for arm (-32 and -64) has been rewritten, fixing poor
    code selection for many CPUs.
  * Mini-GMP: Updated to the latest development version, including
    new functions mpn_com and mpn_neg.
- Add gmp-6.1.2-conftest.patch to fix configure test.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569931200">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)
- Run spec-cleaner on the spec</changelog>
  <changelog author="Stephan Kulow &lt;coolo@suse.com&gt;" date="1590494400">- correct license statement (library itself is no GPL-3.0)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1611921600">- adjusted to be the same license as in factory (bsc#1180603)</changelog>
</package>
<package pkgid="48c649b79b456671d6c0270e34d7998c5d2e170ed87f942f5b21be37d9853855" name="gn-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.1807" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
</package>
<package pkgid="e965edc139cd2f014b0325820dacd7528f350c67ab79ad6e8469ffc652db5134" name="gn-debugsource" arch="x86_64">
  <version epoch="0" ver="0.1807" rel="lp152.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1540900800">- Version update to 0.1479:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1541764800">- Add patch to add missing files to fix armv7 build:
  * gn-add_missing_arm_files.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1557230400">- Update to 0.1544:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1571832000">- Update to 0.1616:
  * no upstream changelog
- Remove merged patch gn-add_missing_arm_files.patch
- Add patch to always use python3 in tests:
  * gn-always-python3.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1585828800">- Update to 0.1726:
  * no upstream changelog
- Rebase patches:
  * gn-always-python3.patch
  * gn-flags.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1602331200">- Update to 0.1807:
  * no upstream changelog</changelog>
</package>
<package pkgid="a8d4d07ca028658f7fdf48721ae06ad12a42c80f277b08cca4bec15864951c7c" name="gnome-autoar-debuginfo" arch="i586">
  <version epoch="0" ver="0.2.3" rel="lp152.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519646400">- Update to version 0.2.3:
  + Use proper extracted name for xz archives.
  + Fix decompressing files with legacy encoding file names.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1613995200">- Add gnome-autoar-CVE-2020-36241.patch: Skip problematic files
  that might be extracted outside of the destination dir to prevent
  potential security threat. (bsc#1181930,
  glgo#GNOME/gnome-autoar#7)</changelog>
</package>
<package pkgid="b129f116c618662076b375280c0f39cac289bcce325c58b2202495a12b897622" name="gnome-autoar-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="lp152.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519646400">- Update to version 0.2.3:
  + Use proper extracted name for xz archives.
  + Fix decompressing files with legacy encoding file names.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1613995200">- Add gnome-autoar-CVE-2020-36241.patch: Skip problematic files
  that might be extracted outside of the destination dir to prevent
  potential security threat. (bsc#1181930,
  glgo#GNOME/gnome-autoar#7)</changelog>
</package>
<package pkgid="28badcb5c6ef4a2a2b9cd98da1962d4d81573fefa81fea887d947fbb6fcf1647" name="gnome-autoar-debugsource" arch="i586">
  <version epoch="0" ver="0.2.3" rel="lp152.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519646400">- Update to version 0.2.3:
  + Use proper extracted name for xz archives.
  + Fix decompressing files with legacy encoding file names.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1613995200">- Add gnome-autoar-CVE-2020-36241.patch: Skip problematic files
  that might be extracted outside of the destination dir to prevent
  potential security threat. (bsc#1181930,
  glgo#GNOME/gnome-autoar#7)</changelog>
</package>
<package pkgid="4ac103789bc39631c965c11cd29f1caf84ffce0eb0dacf79e4795ee1cb49dd4c" name="gnome-autoar-debugsource" arch="x86_64">
  <version epoch="0" ver="0.2.3" rel="lp152.4.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Initial package, version 0+20160825.0fec26d (no tagged release
  yet available in git).</changelog>
  <changelog author="zaitor@opensuse.org" date="1472731200">- Update to version 0.1.0:
  + Bump required libarchive version.
  + AutoarExtractor: signal error on encrypted archives.
  + Add COPYING file.
  + tests: Add missing linker flags.
- Stop using sourceservice, tarball release now available.
- Following the above: gnome-common BuildRequires and autogen.sh
  call: We no longer need to bootstrap.</changelog>
  <changelog author="zaitor@opensuse.org" date="1472817600">- Updated to version 0.1.1:
  + Fix library link issues for Evolution.
  + Make decide destination signal synchronous for Evolution.
  + Fix licence to LGPLv2.1+.</changelog>
  <changelog author="zaitor@opensuse.org" date="1487851200">- Update to version 0.2.0:
  + Generate vala bindings.
  + Check encrypted entry after header is read.
  + Fix extraction name case, e.j.'sample.odt' in 'sample.odt.zip'.
  + Remove GSettings schema files.
- Add pkgconfig(vapigen) BuildRequires: New dependency for vala
  bindings.
- Pass --enable-gtk to configure, ensure we build gtk3 widgets.
- Drop gnome-autoar-schema subpackage and add gnome-autoar-schema
  Obsoletes replacing previous Requires, following upstream
  changes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488542400">- Update to version 0.2.1:
  + Drop rar support since rar5 is not yet supported by libarchive.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490097600">- Update to version 0.2.2:
  + Fix docx files and other format subtypes of zip to be
    uncompressed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519646400">- Update to version 0.2.3:
  + Use proper extracted name for xz archives.
  + Fix decompressing files with legacy encoding file names.
- Run spec-cleaner, modernize spec, use autosetup and make_build
  macros.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1613995200">- Add gnome-autoar-CVE-2020-36241.patch: Skip problematic files
  that might be extracted outside of the destination dir to prevent
  potential security threat. (bsc#1181930,
  glgo#GNOME/gnome-autoar#7)</changelog>
</package>
<package pkgid="4a2f685124804f889f6cd0202d62fbf7688ed4d5bf017bf40cbfefc209d907d6" name="gnome-control-center-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1558699200">- Update to version 3.32.2:
  + Applications: Use larger icons.
  + Display:
  - Set Night Light screen temperature strings as translatable.
  - Fix crash if a monitor has no preferred mode.
  + Mouse &amp; Touchpad: Reinstate keyboard navigation in the panel.
  + Power: Correct the value of 90 minutes to 5400.
  + Region &amp; Language: Fix input source options not being applied.
  + Sound: Clean up labels of devices without origin.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.2+9:
  + display:
  - Add guards for NULL display configuration.
  - Add failure returns into CcDisplayConfig.
  + universal-access:
  - Don't use widget names for GSettings keys.
  - Fix leaks checking settings.
  - Fix duplicate settings call.
  + Updated translations.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.90:
  + Background: Clarify remove background button.
  + Display: Various bugfixes.
  + Search:
  - Introduce Drag n' Drop
  - Visual polishment.
  + Updated translations.
- Changes from version 3.33.3:
  + Various minor improvements from the Every Detail Matters
    session.
  + Add shadows to application icons
  + Documented Communication Guidelines
  + Development builds with Flatpak working again
  + Background: Redesigned panel.
  + Display: Move Night Light to a tab, instead of a dialog.
  + Keyboard Shortcuts:
  - Panel renamed from "Keyboard".
  - Minor UI adjustments.
  + Mouse &amp; Touchpad: Reinstate keyboard navitation.
  + Power: Don't treat all batteries as laptop batteries.
  + Sharing: Use a HdyLeaflet.
  + User Accounts: Present the default avatar in the avatar
    popover.
  + Wacom: Ensure calibrator UI CSS only applies to its UI.
  + Updated translations.
- Remove control-center-fix-mtu-label.patch
- Remove control-center-network-add-domain-suffix-match.patch
- Remove gnome-control-center-disable-error-message-for-NM.patch</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0.1:
  + Sound: fix sliders not behaving properly.
  + Changes in version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569067200">- Add gnome-control-center-Remove-leftover-canberra-gtk.patch:
  sound: Remove leftover canberra-gtk header inclusion. Following
  this, drop pkgconfig(libcanberra-gtk3) BuildRequires: No longer
  needed, nor used.
- Add explicit xorg-x11-server-Xvfb BuildRequires: Previously
  pulled in by libcanberra-gtk3. Needed for tests to succeed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570276800">- Update to version 3.34.1:
  + Background:
  - Allow load background file relative to XML file.
  - Update clock in both preview modes.
  + Date &amp; Time: Allow changing the timezone when auto-update is
    prohibited.
  + Network:
  - Disable the "Apply" button until a change has been made.
  - Fix Add Connection dialog.
  - Accept empty values for the cloned mac address.
  + Online Accounts: Fix a crash.
  + Printers:
  - Give printer name fewer characters in width.
  - Check whether URI is valid while searching for printers.
  + Region &amp; Language: Fix crash in keyboard layout population.
  + Search: Fix crash on clicking 'Search Locations'.
  + Sharing: Set new shared folder visible as soon as it gets
    added.
  + Sound: Remove leftover canberra-gtk header inclusion.
  + Updated translations.
- Drop patches fixed upstream:
  + gnome-control-center-Remove-leftover-canberra-gtk.patch.
  + control-center-network-fix-ce-apply-button.patch.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573732800">- BuildRequires /usr/bin/Xvfb instead of the xorg-x11-server-Xvfb
  package. This is for the compatibility with older X packages where
  Xvfb is not splitted.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1573819200">- Rebase gnome-control-center-bring-back-firewall-zone.patch</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1574164800">- Drop patches fixed upstream:
  + control-center-fix-crash-due-to-object-name-clashes.patch
  + control-center-fix-crash-opening-hidden-network.patch
  + control-center-sharing-fix-margin-issue.patch
  + gnome-control-center-fix-users-crash.patch
  + gnome-control-center-periodic-wifi-scan.patch
  + gnome-control-center-users-empty-state.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 3.34.2:
  + Applications: Fix a memory leak.
  + Background: Fix crash if a BgRecentSource is unreffed during an
    async operation.
  + Display: Use correct mode for supported scale checking.
  + Printer: Provide a scheme to address parser.
  + User Accounts: Fix password dialog crashes and hangs.
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1575547200">- Add gnome-control-center-can-not-find-usermod.patch:
  g-c-c use command usermod to verify user is valid, usermod is in
  /usr/sbin, environment PATH doesn't include this path, so g-c-c
  can't find this command. Upstream commit c6be204
  (bsc#1158341 glgo#GNOME/gnome-control-center!653).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1575633600">- Rebase gnome-control-center-more-power-button-actions.patch for 3.34:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796, bsc#1158476).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1576152000">- Add gnome-control-center-Initialize-GError-to-NULL-before-use.patch:
  backport upstream commit 54caab7b, initialize GError* to NULL
  before use, fix g-c-c crash.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1578571200">- Add gnome-control-center-fno-common.patch: fix build with
  - fno-common (boo#1160393 glgo#GNOME/gnome-control-center!681).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- No longer recommend gnome-control-center-lang: the lang package
  has relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  gnome-control-center-lang being triggered for installation on
  english-only systems.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581595200">- Update to version 3.34.4:
  + Thunderbolt: Fix memory leak.
  + Printers: Fix read of freed memory.
  + User Accounts:
  - Use absolute path of command usermod.
  - Fix carousel arrow location when animations are disabled.
  - Fix memory leak.
  - Fix uninitialized variable.
  + Region &amp; Language: Fix LC_* variables not being correctly
    reset.
  + Sound: Add missing subwoofer icons.
  + Updated translations.
- Drop gnome-control-center-can-not-find-usermod.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585569600">- Update to version 3.34.5:
  + Remove some dead code.
  + Display: Fix resolution options getting stuck in a low
    resolution (bsc#1160173 glgo#GNOME/Settings#903).
  + Network:
  - Print warning if failed to save to libsecret.
  - Handle security combo box being not selected correctly.
  - Fix small memory leaks.
  + Sharing: Fix small memory leak.
  + User Accounts:
  - Fix uninitialized variable.
  - Fix small memory leak.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589371200">- Update to version 3.34.6:
  + Sound: fix translation of "System Sounds".</changelog>
</package>
<package pkgid="df48524c6d3d8e03e96dac8acad19db03eec5c7cbef17bbc0e7187b1bb2a9411" name="gnome-control-center-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="lp152.2.3.1"/>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1558008000">- Add control-center-fix-mtu-label.patch: network: Fix mtu label
  not requesting enough space (glgo#GNOME/gnome-control-center!475,
  bsc#1040055).
- Modify gnome-control-center-bring-back-firewall-zone.patch:
  rebase patch with control-center-fix-mtu-label.patch applied.</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1558094400">- Update gnome-control-center-more-power-button-actions.patch:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1558699200">- Update to version 3.32.2:
  + Applications: Use larger icons.
  + Display:
  - Set Night Light screen temperature strings as translatable.
  - Fix crash if a monitor has no preferred mode.
  + Mouse &amp; Touchpad: Reinstate keyboard navigation in the panel.
  + Power: Correct the value of 90 minutes to 5400.
  + Region &amp; Language: Fix input source options not being applied.
  + Sound: Clean up labels of devices without origin.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.2+9:
  + display:
  - Add guards for NULL display configuration.
  - Add failure returns into CcDisplayConfig.
  + universal-access:
  - Don't use widget names for GSettings keys.
  - Fix leaks checking settings.
  - Fix duplicate settings call.
  + Updated translations.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.90:
  + Background: Clarify remove background button.
  + Display: Various bugfixes.
  + Search:
  - Introduce Drag n' Drop
  - Visual polishment.
  + Updated translations.
- Changes from version 3.33.3:
  + Various minor improvements from the Every Detail Matters
    session.
  + Add shadows to application icons
  + Documented Communication Guidelines
  + Development builds with Flatpak working again
  + Background: Redesigned panel.
  + Display: Move Night Light to a tab, instead of a dialog.
  + Keyboard Shortcuts:
  - Panel renamed from "Keyboard".
  - Minor UI adjustments.
  + Mouse &amp; Touchpad: Reinstate keyboard navitation.
  + Power: Don't treat all batteries as laptop batteries.
  + Sharing: Use a HdyLeaflet.
  + User Accounts: Present the default avatar in the avatar
    popover.
  + Wacom: Ensure calibrator UI CSS only applies to its UI.
  + Updated translations.
- Remove control-center-fix-mtu-label.patch
- Remove control-center-network-add-domain-suffix-match.patch
- Remove gnome-control-center-disable-error-message-for-NM.patch</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0.1:
  + Sound: fix sliders not behaving properly.
  + Changes in version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569067200">- Add gnome-control-center-Remove-leftover-canberra-gtk.patch:
  sound: Remove leftover canberra-gtk header inclusion. Following
  this, drop pkgconfig(libcanberra-gtk3) BuildRequires: No longer
  needed, nor used.
- Add explicit xorg-x11-server-Xvfb BuildRequires: Previously
  pulled in by libcanberra-gtk3. Needed for tests to succeed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570276800">- Update to version 3.34.1:
  + Background:
  - Allow load background file relative to XML file.
  - Update clock in both preview modes.
  + Date &amp; Time: Allow changing the timezone when auto-update is
    prohibited.
  + Network:
  - Disable the "Apply" button until a change has been made.
  - Fix Add Connection dialog.
  - Accept empty values for the cloned mac address.
  + Online Accounts: Fix a crash.
  + Printers:
  - Give printer name fewer characters in width.
  - Check whether URI is valid while searching for printers.
  + Region &amp; Language: Fix crash in keyboard layout population.
  + Search: Fix crash on clicking 'Search Locations'.
  + Sharing: Set new shared folder visible as soon as it gets
    added.
  + Sound: Remove leftover canberra-gtk header inclusion.
  + Updated translations.
- Drop patches fixed upstream:
  + gnome-control-center-Remove-leftover-canberra-gtk.patch.
  + control-center-network-fix-ce-apply-button.patch.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1573732800">- BuildRequires /usr/bin/Xvfb instead of the xorg-x11-server-Xvfb
  package. This is for the compatibility with older X packages where
  Xvfb is not splitted.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1573819200">- Rebase gnome-control-center-bring-back-firewall-zone.patch</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1574164800">- Drop patches fixed upstream:
  + control-center-fix-crash-due-to-object-name-clashes.patch
  + control-center-fix-crash-opening-hidden-network.patch
  + control-center-sharing-fix-margin-issue.patch
  + gnome-control-center-fix-users-crash.patch
  + gnome-control-center-periodic-wifi-scan.patch
  + gnome-control-center-users-empty-state.patch</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 3.34.2:
  + Applications: Fix a memory leak.
  + Background: Fix crash if a BgRecentSource is unreffed during an
    async operation.
  + Display: Use correct mode for supported scale checking.
  + Printer: Provide a scheme to address parser.
  + User Accounts: Fix password dialog crashes and hangs.
  + Updated translations.</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1575547200">- Add gnome-control-center-can-not-find-usermod.patch:
  g-c-c use command usermod to verify user is valid, usermod is in
  /usr/sbin, environment PATH doesn't include this path, so g-c-c
  can't find this command. Upstream commit c6be204
  (bsc#1158341 glgo#GNOME/gnome-control-center!653).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1575633600">- Rebase gnome-control-center-more-power-button-actions.patch for 3.34:
  Rename 'Shutdown' to 'Force Off' and adjust the order by severity
  (bsc#1091796, bsc#1158476).</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1576152000">- Add gnome-control-center-Initialize-GError-to-NULL-before-use.patch:
  backport upstream commit 54caab7b, initialize GError* to NULL
  before use, fix g-c-c crash.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1578571200">- Add gnome-control-center-fno-common.patch: fix build with
  - fno-common (boo#1160393 glgo#GNOME/gnome-control-center!681).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- No longer recommend gnome-control-center-lang: the lang package
  has relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  gnome-control-center-lang being triggered for installation on
  english-only systems.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581595200">- Update to version 3.34.4:
  + Thunderbolt: Fix memory leak.
  + Printers: Fix read of freed memory.
  + User Accounts:
  - Use absolute path of command usermod.
  - Fix carousel arrow location when animations are disabled.
  - Fix memory leak.
  - Fix uninitialized variable.
  + Region &amp; Language: Fix LC_* variables not being correctly
    reset.
  + Sound: Add missing subwoofer icons.
  + Updated translations.
- Drop gnome-control-center-can-not-find-usermod.patch: Fixed
  upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585569600">- Update to version 3.34.5:
  + Remove some dead code.
  + Display: Fix resolution options getting stuck in a low
    resolution (bsc#1160173 glgo#GNOME/Settings#903).
  + Network:
  - Print warning if failed to save to libsecret.
  - Handle security combo box being not selected correctly.
  - Fix small memory leaks.
  + Sharing: Fix small memory leak.
  + User Accounts:
  - Fix uninitialized variable.
  - Fix small memory leak.
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589371200">- Update to version 3.34.6:
  + Sound: fix translation of "System Sounds".</changelog>
</package>
<package pkgid="9fff0b92b9dc1103112134534336630d54e8245fe8ab9db5df4eaedae9ea61ed" name="gnome-desktop-debugsource" arch="i586">
  <version epoch="0" ver="3.34.7" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1549540800">- Update to version 3.31.3:
  + Use LC_TIME for time format string translations.
  + Fix a use-after-free in the thumbnailer.
- Changes from version 3.31.2:
  + Updated translations.
- Changes from version 3.31.1:
  + Port buildsystem to meson.
  + Updated translations.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Drop all conditionals and gnome-common BuildRequires: they are
  not needed, nor make sense after the port to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549540801">- Update to version 3.31.4:
  + Fix some thumbnailer sandboxing issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549540802">- Fix translation-update-upstream call, needed after update of
  translation-update-upstream in distro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 3.31.91:
  + Updated translations.
- Changes from version 3.31.90:
  + Fix slow thumbnailer due to missing font cache.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.31.92:
  + tests: fixes to use uselocale.
  + Thumbnail: Only mount fontconfig cache if it exists.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.32.0:
  + Stable release version bump.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1556020800">- Update to version 3.32.1.1:
  + Fix thumbnailer sandbox escape, CVE-2019-11460,
    glgo#GNOME/gnome-desktop#112.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1556193600">- Update to version 3.32.1.2 (CVE-2019-11460):
  + Release to correct CVE ID.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557230400">- Update to version 3.32.2:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567684800">- Update to version 3.33.92.1:
  + tests/wall*: Do not fail if some of the locales is missing.
- Changes in version 3.33.92:
  + Updated translations.
- Changes in version 3.33.91:
  + Updated translations.
- Changes in version 3.33.90:
  + Avoid using g_type_class_add_private().
  + Updated translations.
- Changes in version 3.33.4:
  + Support common_name in ISO 639.
  + Display locale @modifiers properly.
  + Fix detection of builtin display on NVIDIA.
  + GnomeBGSlideShow filename property replaced with a file
    property.
- Changes in version 3.33.3:
  + Updated translations.
- Changes in version 3.33.2:
  + thumbnailer: Correctly cleanup stale thumbnailer directories.
  + Updated translations.
- Changes in version 3.33.1:
  + gnome-languages: Use uselocale to avoid threadsafety issues.
  + Add default keyboard layout for Indonesia.
  + Updated translations.
- API version is now 18.
- Rebase gnome-desktop-switch-Japanese-default-input-to-mozc.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 3.34.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1575374400">- Update to version 3.34.2:
  + Add helper to create transient systemd scopes.
  + Updated translations.
- Add pkgconfig(libsystemd) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578484800">- Update to version 3.34.3:
  + Seccomp is not supported ATM on riscv64 architecture, blacklist
    it for now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- No longer recommend gnome-desktop-lang: the lang package has
  relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  gnome-desktop-lang being triggered for installation on
  english-only systems.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581940800">- Update to version 3.34.4:
  + Don't use seccomp on riskv64.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585742400">- Update to version 3.34.5:
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591617600">- Update to version 3.34.7:
  + Update testsuite for new Hebrew clock format.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1600257600">- Add gnome-desktop-invalid-size-crash.patch: fix a crash caused
  by a malformed background xml file (bsc#1176596
  glgo#GNOME/gnome-desktop#169).</changelog>
</package>
<package pkgid="2accf9180fd29d17c08c65e3ace12181cd40e52da5e00e443755f8c7849944ec" name="gnome-desktop-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.7" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1549540800">- Update to version 3.31.3:
  + Use LC_TIME for time format string translations.
  + Fix a use-after-free in the thumbnailer.
- Changes from version 3.31.2:
  + Updated translations.
- Changes from version 3.31.1:
  + Port buildsystem to meson.
  + Updated translations.
- Switch to meson buildsystem, add meson BuildRequires and macros.
- Drop all conditionals and gnome-common BuildRequires: they are
  not needed, nor make sense after the port to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549540801">- Update to version 3.31.4:
  + Fix some thumbnailer sandboxing issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549540802">- Fix translation-update-upstream call, needed after update of
  translation-update-upstream in distro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 3.31.91:
  + Updated translations.
- Changes from version 3.31.90:
  + Fix slow thumbnailer due to missing font cache.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.31.92:
  + tests: fixes to use uselocale.
  + Thumbnail: Only mount fontconfig cache if it exists.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.32.0:
  + Stable release version bump.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1556020800">- Update to version 3.32.1.1:
  + Fix thumbnailer sandbox escape, CVE-2019-11460,
    glgo#GNOME/gnome-desktop#112.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1556193600">- Update to version 3.32.1.2 (CVE-2019-11460):
  + Release to correct CVE ID.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557230400">- Update to version 3.32.2:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567684800">- Update to version 3.33.92.1:
  + tests/wall*: Do not fail if some of the locales is missing.
- Changes in version 3.33.92:
  + Updated translations.
- Changes in version 3.33.91:
  + Updated translations.
- Changes in version 3.33.90:
  + Avoid using g_type_class_add_private().
  + Updated translations.
- Changes in version 3.33.4:
  + Support common_name in ISO 639.
  + Display locale @modifiers properly.
  + Fix detection of builtin display on NVIDIA.
  + GnomeBGSlideShow filename property replaced with a file
    property.
- Changes in version 3.33.3:
  + Updated translations.
- Changes in version 3.33.2:
  + thumbnailer: Correctly cleanup stale thumbnailer directories.
  + Updated translations.
- Changes in version 3.33.1:
  + gnome-languages: Use uselocale to avoid threadsafety issues.
  + Add default keyboard layout for Indonesia.
  + Updated translations.
- API version is now 18.
- Rebase gnome-desktop-switch-Japanese-default-input-to-mozc.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570536000">- Update to version 3.34.1:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1575374400">- Update to version 3.34.2:
  + Add helper to create transient systemd scopes.
  + Updated translations.
- Add pkgconfig(libsystemd) BuildRequires: New dependency.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578484800">- Update to version 3.34.3:
  + Seccomp is not supported ATM on riscv64 architecture, blacklist
    it for now.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578657600">- No longer recommend gnome-desktop-lang: the lang package has
  relevant supplements which pulls it in whenever needed.
- Move /usr/share/locale/en from the -lang package to the main
  package: English is installed on all systems. This avoids
  gnome-desktop-lang being triggered for installation on
  english-only systems.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581940800">- Update to version 3.34.4:
  + Don't use seccomp on riskv64.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1585742400">- Update to version 3.34.5:
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1591617600">- Update to version 3.34.7:
  + Update testsuite for new Hebrew clock format.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1600257600">- Add gnome-desktop-invalid-size-crash.patch: fix a crash caused
  by a malformed background xml file (bsc#1176596
  glgo#GNOME/gnome-desktop#169).</changelog>
</package>
<package pkgid="1ee0fd324e71ebc2959914969f3e6ac69baae2ee74d0e212b8391f6f3493f9a1" name="gnome-initial-setup-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="lp152.2.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1535889600">- Update to version 3.29.92:
  + Improved network page.
  + Fix timezone selection in new-user mode.
  + Properly use libsecret unstable api.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1545220800">- Add gnome-initial-setup-smarter.patch,
  Smarter gnome initial configuration: Find a method (better
  upstream compatible) to allow gnome-initial-setup decide the
  pop-ups smartly based on the system wise setup provided by the
  installer(FATE#325763).
  Adapt previous solutions to satisfy this feature. (FATE#321126,
  boo#1067288, bnc#1029083).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 3.31.90:
  + Generate default user account pictures.
  + Fix Meson build with (buggy) Meson 0.48.0 and 0.48.1.
  + Remove Autotools build.
  + Fix various compiler warnings.
  + Add welcome distro logo for openSUSE.
  + Updated translations.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop obsolete intltool BuildRequires: No longer needed.
- Add pkgconfig(packagekit-glib2) BuildRequires: New dependency.
- Refresh patch with refresh_patches service.</changelog>
  <changelog author="qzhao@suse.com" date="1551268800">- Update gnome-initial-setup-smarter.patch:
  Avoid duplicate privilege requirement(FATE#321126).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Connect to GDM as soon as gnome-initial-setup starts and fix
    memory leaks.
  + Improve account page behaviour when offline.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554465600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.92:
  + Translation updates.
  + Changes in version 3.33.91:
  + build: Add a log domain.
  + Translation updates.
  + Changes in version 3.33.90:
  + systemd user instance support. This is inert without
    corresponding changes in other GNOME modules, and can be
    disabled entirely with `-Dsystemd=false` at build time.
  + Other improvements and bug fixes:
  - summary: don't free borrowed password string.
  - data: use a11y menu in initial-setup session.
  - driver: Account for multi monitor when checking for small screen.
  - language: Refactor the logo selection.
  - language: Fix the visibility of the placeholder.
  - summary: Make the page fit narrow screens.
  - Drop the headers for the first rows.
  - account: Drop the avatar button padding.
  - Refactor page headers.
  - data: Update required gnome-settings-daemon plugins.
  + Translation updates.
  + Changes in version 3.33.4:
  + Bugs fixed:
  - Check for errors from newlocale().
  + Translation updates.
  + Changes in version 3.33.2:
  + Bugs fixed:
  - setlocale() usage is not threadsafe.
  - Include bug report URL in .pot file
  + Translation updates.
- Rebase gnome-initial-setup-only-setup-keyboard.patch.
- Depend on systemd.
- Remove setup-shell.desktop from files.
- Add user systemd targets to files.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 3.34.0:
  + Bugs fixed: Fixes for systemd user instance support.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1569326400">- Fix unpackaged files in specfile.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570276800">- Update to version 3.34.1:
  + Bugs fixed:
  - Mark ?Accept? button as suggested action
  - Disable g-i-s in GDM.
  + Updated translations.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1571918400">- Update gnome-initial-setup.spec
  Drop gnome-initial-setup-disable-dep-on-started-docs.patch
  Drop gnome-initial-setup-mozc-engine-prioritized.patch
  Drop gnome-initial-setup-only-setup-keyboard.patch
  Drop gnome-initial-setup-only-launch-CJK.patch
  to avoid blank docs window appear after gnome-initial-setup
  finished (bnc#1125694, bnc#1131087).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1574769600">- Update gnome-initial-setup-smarter.patch: Rebase to
  gnome-initial-setup-3.34.1 for SLE-15-SP2 build(bnc#1156952).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578225600">- Update to version 3.34.3:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1586952000">- Update gnome-initial-setup.spec: Drop the is_opensuse macro to
  eliminate in behavior in between SLE-15 and openSUSE-Leap
  (jsc#SLE-11857).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1587988800">- Update gnome-initial-setup.spec, gnome-initial-setup-smarter.patch:
  Avoid the boot error message and gnome "getting started" help
  messages(bnc#1158488, bnc#1166008).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589284800">- Update to version 3.34.6 (bsc#1171501):
  + Updated translations.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592222400">- Update gnome-initial-setup.spec: Start gnome-initial-setup via
  xdg autostart as an alternative to systemd user units on
  SLE-15-SP2 and Leap 15.2 (bsc#1172910).</changelog>
</package>
<package pkgid="45478521a157cb6e6dd6e1ab77240644a50d5e2fdfb982b4e27e20b4df00d066" name="gnome-initial-setup-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="lp152.2.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1535889600">- Update to version 3.29.92:
  + Improved network page.
  + Fix timezone selection in new-user mode.
  + Properly use libsecret unstable api.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Updated translations.</changelog>
  <changelog author="qzhao@suse.com" date="1545220800">- Add gnome-initial-setup-smarter.patch,
  Smarter gnome initial configuration: Find a method (better
  upstream compatible) to allow gnome-initial-setup decide the
  pop-ups smartly based on the system wise setup provided by the
  installer(FATE#325763).
  Adapt previous solutions to satisfy this feature. (FATE#321126,
  boo#1067288, bnc#1029083).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 3.31.90:
  + Generate default user account pictures.
  + Fix Meson build with (buggy) Meson 0.48.0 and 0.48.1.
  + Remove Autotools build.
  + Fix various compiler warnings.
  + Add welcome distro logo for openSUSE.
  + Updated translations.
- Switch to meson build system, add meson BuildRequires and macros.
- Drop obsolete intltool BuildRequires: No longer needed.
- Add pkgconfig(packagekit-glib2) BuildRequires: New dependency.
- Refresh patch with refresh_patches service.</changelog>
  <changelog author="qzhao@suse.com" date="1551268800">- Update gnome-initial-setup-smarter.patch:
  Avoid duplicate privilege requirement(FATE#321126).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Connect to GDM as soon as gnome-initial-setup starts and fix
    memory leaks.
  + Improve account page behaviour when offline.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552305600">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554465600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.92:
  + Translation updates.
  + Changes in version 3.33.91:
  + build: Add a log domain.
  + Translation updates.
  + Changes in version 3.33.90:
  + systemd user instance support. This is inert without
    corresponding changes in other GNOME modules, and can be
    disabled entirely with `-Dsystemd=false` at build time.
  + Other improvements and bug fixes:
  - summary: don't free borrowed password string.
  - data: use a11y menu in initial-setup session.
  - driver: Account for multi monitor when checking for small screen.
  - language: Refactor the logo selection.
  - language: Fix the visibility of the placeholder.
  - summary: Make the page fit narrow screens.
  - Drop the headers for the first rows.
  - account: Drop the avatar button padding.
  - Refactor page headers.
  - data: Update required gnome-settings-daemon plugins.
  + Translation updates.
  + Changes in version 3.33.4:
  + Bugs fixed:
  - Check for errors from newlocale().
  + Translation updates.
  + Changes in version 3.33.2:
  + Bugs fixed:
  - setlocale() usage is not threadsafe.
  - Include bug report URL in .pot file
  + Translation updates.
- Rebase gnome-initial-setup-only-setup-keyboard.patch.
- Depend on systemd.
- Remove setup-shell.desktop from files.
- Add user systemd targets to files.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568808000">- Update to version 3.34.0:
  + Bugs fixed: Fixes for systemd user instance support.
  + Updated translations.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1569326400">- Fix unpackaged files in specfile.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570276800">- Update to version 3.34.1:
  + Bugs fixed:
  - Mark ?Accept? button as suggested action
  - Disable g-i-s in GDM.
  + Updated translations.</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1571918400">- Update gnome-initial-setup.spec
  Drop gnome-initial-setup-disable-dep-on-started-docs.patch
  Drop gnome-initial-setup-mozc-engine-prioritized.patch
  Drop gnome-initial-setup-only-setup-keyboard.patch
  Drop gnome-initial-setup-only-launch-CJK.patch
  to avoid blank docs window appear after gnome-initial-setup
  finished (bnc#1125694, bnc#1131087).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1574769600">- Update gnome-initial-setup-smarter.patch: Rebase to
  gnome-initial-setup-3.34.1 for SLE-15-SP2 build(bnc#1156952).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1578225600">- Update to version 3.34.3:
  + Updated translations.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1586952000">- Update gnome-initial-setup.spec: Drop the is_opensuse macro to
  eliminate in behavior in between SLE-15 and openSUSE-Leap
  (jsc#SLE-11857).</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1587988800">- Update gnome-initial-setup.spec, gnome-initial-setup-smarter.patch:
  Avoid the boot error message and gnome "getting started" help
  messages(bnc#1158488, bnc#1166008).</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1589284800">- Update to version 3.34.6 (bsc#1171501):
  + Updated translations.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1592222400">- Update gnome-initial-setup.spec: Start gnome-initial-setup via
  xdg autostart as an alternative to systemd user units on
  SLE-15-SP2 and Leap 15.2 (bsc#1172910).</changelog>
</package>
<package pkgid="d087bfb3782c5e1a657fdd9a869669bf8932c1054b9437a2b27fe62bd92a396a" name="gnome-packagekit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
</package>
<package pkgid="45ed3f18ccf66f4c1e68d125d995ec5bdd3e01144babd8f5aaad574317c626bd" name="gnome-packagekit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611144000">- Add gnome-packagekit-define-HAVE_SYSTEMD.patch: define
  HAVE_SYSTEMD macro if systemd if found
  (glgo#GNOME/gnome-packagekit!3, bsc#1134544).</changelog>
</package>
<package pkgid="46d4a2e5123b3eb5fae029b1d6d53ee1707dc664884907fb13d7ba68cd4a078a" name="gnome-packagekit-debugsource" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
</package>
<package pkgid="60c9d7436f64a6e7a5d83f3814f755fec61f3f63d4e01fabb0976293d7cc6506" name="gnome-packagekit-debugsource" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611144000">- Add gnome-packagekit-define-HAVE_SYSTEMD.patch: define
  HAVE_SYSTEMD macro if systemd if found
  (glgo#GNOME/gnome-packagekit!3, bsc#1134544).</changelog>
</package>
<package pkgid="570cf504c7bfe8942e7669e3a0dcb529920445b2c1a72d97411809d2702bd385" name="gnome-packagekit-extras-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 3.21.92:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
</package>
<package pkgid="29c1ccc1c2e729c3720f45726c784658c03c12a014f973ec0cefca11b2dca1d5" name="gnome-packagekit-extras-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.32.0" rel="lp152.2.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1474027200">- Run spec-clean: Modernize macros, add pkgconfig BuildRequires,
  and generally clean up spec.
- Stop passing V=1 to make, we do debugging locally.
- Conditionally apply translations-update-upstream BuildRequires
  and macro for non-openSUSE only.</changelog>
  <changelog author="dimstar@opensuse.org" date="1474286400">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1476273600">- Update to version 3.22.1:
  + Modernize metainfo.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1477396800">- Replace pkgconfig(libsystemd-login) for pkgconfig(libsystemd)
  BuildRequires, this was changed upstream during the 3.22
  development, but we missed changing it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Update to version 3.23.90:
  + Port away from intltool.
  + Updated translations.
- Drop intltool BuildRequires: no longer needed.
- Rebase gnome-packagekit-OnlyShowIn.patch.
- Rebase bnc-946886-install-signatures-in-viewer.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1489233600">- Update to version 3.23.92:
  + Install appstream data to /usr/share/metainfo (bgo#778559).
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1490011200">- Update to version 3.24.0:
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1494504000">- Add gnome-packagekit-fix-not-responding-after-update.patch: Fix
  gpk-update-viewer not responding after installing all available
  updates (bgo#782673, bsc#1036542).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Update to version 3.25.90:
  + Switch to meson build system.
  + Updated translations.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131200">- Update to version 3.26.0:
  + Application: update application ID to match .desktop file.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 3.28.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1536408000">- Update to version 3.30.0:
  + Updated translations.
- Use autosetup macro.
- Remove lang package from recommended packages as it already
  supplements main package (same effect, it's redundant).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552046400">- Update to version 3.32.0:
  + Use newer meson features to avoid a build warning.
  + Remove the app menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;sckang@suse.com&gt;" date="1573646400">- Add gnome-packagekit-upgrade-system.patch: Call upgrade-system
  instead of update-packages when cliking the install button in
  Tumbleweed (bsc#1155638).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1582804800">- Remove gnome-packagekit-upgrade-system.patch: Tumbleweed has been
  handled in update-packages. This patch is no longer useful.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1609934400">- Add gnome-packagekit-bring-back-logout-support.patch: Add back
  logout support(glgo#GNOME/gnome-packagekit!2, bsc#1180247).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1611144000">- Add gnome-packagekit-define-HAVE_SYSTEMD.patch: define
  HAVE_SYSTEMD macro if systemd if found
  (glgo#GNOME/gnome-packagekit!3, bsc#1134544).</changelog>
</package>
<package pkgid="7c6a9e87c71eb505f7b6210a7eaa660f0d68ef085b513a7b78dd53a6fc1b9528" name="gnome-session-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.5.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1536321600">- Update to version 3.30.0:
  + Updated translations.
- Reenable translation-update-upstream BuildRequires and its macro:
  the previous issue has been fixed.
- Drop hack/workaround for gnome.desktop not being installed to
  wayland-sessions (bgo#792207).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Fix region computation when debugging is enabled.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.4:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552478400">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1553860800">- Add
  gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked (bsc#1118286,
  glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860801">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+5:
  + Updated translations.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.</changelog>
  <changelog author="mgorse@suse.com" date="1567339200">- Update to version 3.33.90:
  + Add support to manage the session using the systemd user
    instance.
  + Update session definitions to match new gnome-settings-daemon.
  + Don't show logout button in fail whale when not logged in.
  + Handle apps exiting abruptly at log out better.
  + Updated translations.
- Changes from version 3.33.4:
  + Fix warning in log spew with dbus activated services.
  + Fix idle detection.
  + Advertize support for GDM's session registration API
  + Updated translations.
- Drop
  gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  fixed upstream.
- Add systemd user unit files.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + More systemd --user fixes
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568721600">- Add gnome-session-no-debug.patch: Disable debug log spam in
  journald. Patch/bug to be sent upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Drop accidentally included `--debug` when launching
    `gnome-session-binary`.
  + Introduce a list of variables to potentially unset in launched
    sessions.
  + Updated translations.
- Drop gnome-session-no-debug.patch: Fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Pass systemd_journal=true to both SLE and Tumbleweed(jsc#SLE-10383).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574942401">- Update to version 3.34.2:
  + autostart-app: Strip blacklisted variables from autostart
    environment.
  + data:
  - Ensure shutdown target does not keep units loaded.
  - Make X11 services part of gnome-session-initialized.
  - Remove gnome-session-stable.timer and related units.
  - Remove never used gnome-session-shutdown.service.
  + doap: Add a description.
  + manager: Disable session saving on systemd managed sessions.
  + session-fill: Disable session restoring on systemd.
  + Updated translations.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh gnome-session-s390-not-require-g-s-d_wacom.patch for
  GNOME 3.34.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1584360000">- Add gnome-session-remove-gsd-XSettings.patch: Remove
  org.gnome.SettingsDaemon.XSettings from file gnome.session
  (bsc#1163262 glgo#GNOME/gnome-session#51)</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586952000">- Add gnome-session-error-numbers-wrong.patch: Remove erron in log
  'gnome-session-c[4905]: Error creating FIFO: File exists'
  (bsc#1169165 glgo!GNOME/gnome-session#42).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1589284800">- Update gnome-classic-s390-not-require-g-s-d_wacom.patch: Solve
  conflict with gnome-shell-extensions-remove-gsd-XSettings.patch
  (bsc#1171485).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1617969600">- Add gnome-session-exit-when-lost-name-on-bus.patch: gnome-session
  exit immediately when lost name on bus
  (bsc#1175622 glgo!GNOME/gnome-session!60).</changelog>
</package>
<package pkgid="8eab1aeb32f66ff1f7d04f81f111e4f348c7b918350b796305425dd5d1211e24" name="gnome-session-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.5.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1536321600">- Update to version 3.30.0:
  + Updated translations.
- Reenable translation-update-upstream BuildRequires and its macro:
  the previous issue has been fixed.
- Drop hack/workaround for gnome.desktop not being installed to
  wayland-sessions (bgo#792207).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.1:
  + Fix region computation when debugging is enabled.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546948800">- Update to version 3.31.4:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552478400">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="xwang@suse.com" date="1553860800">- Add
  gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  Enable dimming screen when screen is locked (bsc#1118286,
  glgo#GNOME/gnome-shell#900).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1553860801">- Add gnome-session-s390-not-require-g-s-d_wacom.patch: Remove the
  gnome session runtime requirement of g-s-d Wacom plugin because
  it is not build on s390 (bsc#1129412).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 3.32.0+5:
  + Updated translations.
- Switch to git checkout via source service, upstream is lacking in
  stable releases. In the future we will use a stable tag when
  possible, but when upstream slacks off, we will use a checkout of
  the stable branch.</changelog>
  <changelog author="mgorse@suse.com" date="1567339200">- Update to version 3.33.90:
  + Add support to manage the session using the systemd user
    instance.
  + Update session definitions to match new gnome-settings-daemon.
  + Don't show logout button in fail whale when not logged in.
  + Handle apps exiting abruptly at log out better.
  + Updated translations.
- Changes from version 3.33.4:
  + Fix warning in log spew with dbus activated services.
  + Fix idle detection.
  + Advertize support for GDM's session registration API
  + Updated translations.
- Drop
  gnome-session-presence-Enable-idle-detection-when-screen-locked.patch:
  fixed upstream.
- Add systemd user unit files.</changelog>
  <changelog author="luke@ljones.dev" date="1567598400">- Update to version 3.33.92:
  + More systemd --user fixes
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568203200">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1568721600">- Add gnome-session-no-debug.patch: Disable debug log spam in
  journald. Patch/bug to be sent upstream.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Drop accidentally included `--debug` when launching
    `gnome-session-binary`.
  + Introduce a list of variables to potentially unset in launched
    sessions.
  + Updated translations.
- Drop gnome-session-no-debug.patch: Fixed upstream.</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1574942400">- Pass systemd_journal=true to both SLE and Tumbleweed(jsc#SLE-10383).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574942401">- Update to version 3.34.2:
  + autostart-app: Strip blacklisted variables from autostart
    environment.
  + data:
  - Ensure shutdown target does not keep units loaded.
  - Make X11 services part of gnome-session-initialized.
  - Remove gnome-session-stable.timer and related units.
  - Remove never used gnome-session-shutdown.service.
  + doap: Add a description.
  + manager: Disable session saving on systemd managed sessions.
  + session-fill: Disable session restoring on systemd.
  + Updated translations.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Refresh gnome-session-s390-not-require-g-s-d_wacom.patch for
  GNOME 3.34.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Xiaoguang Wang &lt;xwang@suse.com&gt;" date="1584360000">- Add gnome-session-remove-gsd-XSettings.patch: Remove
  org.gnome.SettingsDaemon.XSettings from file gnome.session
  (bsc#1163262 glgo#GNOME/gnome-session#51)</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586952000">- Add gnome-session-error-numbers-wrong.patch: Remove erron in log
  'gnome-session-c[4905]: Error creating FIFO: File exists'
  (bsc#1169165 glgo!GNOME/gnome-session#42).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1589284800">- Update gnome-classic-s390-not-require-g-s-d_wacom.patch: Solve
  conflict with gnome-shell-extensions-remove-gsd-XSettings.patch
  (bsc#1171485).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1617969600">- Add gnome-session-exit-when-lost-name-on-bus.patch: gnome-session
  exit immediately when lost name on bus
  (bsc#1175622 glgo!GNOME/gnome-session!60).</changelog>
</package>
<package pkgid="d84608b8c1fe08864a41e0b801f8f4a84f0f3c280d58610ee0dfadb2f7012967" name="gnome-settings-daemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.2+0" rel="lp152.3.3.1"/>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Signal connector rather than output ID for OSDs.
  + Media-keys: Fix MPRIS issues with disconnecting clients.
  + Color: Allow night light to be always on.
  + Power: Only disable Suspend/Hibernate actions inside VM.
  + Smartcard: Fix cancellation issues.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1564747200">- Refresh patches with quilt.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.90:
  + Add systemd user service files for all the plugins.
  - With the exception of gsd-xsettings, daemons do not use the
    GDK X11 backend anymore.
  + WWAN: New daemon, handles WWAN device settings.
  + Mouse: Removed daemon, everything is now implemented in mutter.
  + Clipboard: - Removed daemon, everything is now implemented in
    mutter.
  + Color: Use Planckian calculations on night light.
  + Rfkill: - Handle airplane mode for WWAN interfaces.
  + XSettings: Round Xft.dpi setting to an integer.
  + Add entry for overlay scrolling setting.
  + Media-keys: - Use device node from AcceleratorActivated
    arguments.
  + Updated translations.
- Changes from version 3.33.0:
  + Compile warning fixes.
  + Media-keys:
  - Keygrabbing has been reworked. The new UngrabAccelerators
    DBus API on the shell is now required. Non-GNOME Desktops
    using g-s-d will need to be updated for this.
  - Add mapping for screen brightness cycle key.
  - Fix launched clients inheriting DESKTOP_AUTOSTART_ID.
  - Allow mapping of hard-coded keys.
  + Power:
  - Fix memory leak.
  - Remove special handling of tablet devices.
  + Mouse:
  - Remove locate-pointer, in favor of gnome-shell handling.
  - Remove mousetweaks support, in favor of gnome-shell handling.
  + Keyboard: Remove numlock persistence, in favor of gnome-shell
    handling.
  + Updated translations.
- Up colord, gsettings-desktop-schemas, polkit-gobject, and
  upower-glib dependencies.
- Add systemd dependency.
- Add gcr and mm-glib dependencies for wwan.
- Drop gnome-settings-daemon-round-xft_dpi-to-integer.patch: fixed
  upstream.
- Rebase patches: gnome-settings-daemon-initial-keyboard.patch,
  gnome-settings-daemon-bgo793253.patch., and SLED patches:
  gnome-settings-daemon-bnc873545-hide-warnings.patch,
  gnome-settings-daemon-more-power-button-actions.patch,
  gnome-settings-daemon-notify-idle-resumed.patch, and
  gnome-settings-daemon-sle-configure-timeout-blank.patch.
- Add gsd-wwan to files, and remove gsd-clipboard, gsd-mouse, and
  gsd-locate-pointer.
- Add systemd services and targets to files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Media-keys: Fix MPRIS controller no longer working.
  + XSettings: Make plugin able to run on demand.
  + Ensure plugin is started after the shell.
  + Replace deprecated 'g_type_class_add_private' in
    GnomeSettingsPluginInfo.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568721600">- Add gsd-smartcard-parent-type.patch: use correct parent type for
  structs.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568980800">- Apply gnome-settings-daemon-sle-configure-timeout-blank.patch
  correctly.
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1570536000">- Rebase gnome-settings-daemon-notify-idle-resumed.patch:
  Add the newly added parameter NOTIFICATION_PRIVACY_SYSTEM for the
  function of create_notification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570622400">- Update to version 3.34.0+10:
  + smartcard:
  - Change timeout on spurious event error
  - Change manager to non-blocking
  + GsdSmartcardService: Use correct parent type for structs
  + media-keys: Divide keyboard brightness value by 100
  + Updated translations.
- Switch to git checkout via source service, use upstream stable
  branch.
- Drop gsd-smartcard-parent-type.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570881600">- Update to version 3.34.1+0:
  + power: Fix rounding of brightness value.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-settings-daemon-notify-idle-resumed.patch with
  proper xml tag names.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Update to version 3.34.1+3:
  + media-keys: Add guard to map_keybinding()
  + media-keys: Fix crash on key bindings migration
  + media-keys: Use X11 display for clipboard
- Fix build on s390x (ie without wacom support)</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1575547200">- Enable the patches for both Leap and SLE (bsc#1158243):
  + gnome-settings-daemon-notify-idle-resumed.patch
  + gnome-settings-daemon-bnc873545-hide-warnings.patch
  + gnome-settings-daemon-sle-configure-timeout-blank.patch
  + gnome-settings-daemon-more-power-button-actions.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576670400">- Update to version 3.34.2+0:
  + media-keys: Place spawned processes into a systemd scope
  + smartcard: Initialize a pointer before use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1578916800">- Drop gnome-settings-daemon-sle-configure-timeout-blank.patch:
  Drop this for SLE and Leap to align with upstream(bsc#1158476).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1588161600">- Remove unecessary conditional BuildRequires pkgconfig(udev),
  Tumbleweed needs it as well from 3.27.90. Meanwhile an explict
  unconditional BuildRequires pkgconfig(udev) has been already
  stated in spec a couple of lines before the removal.
- Recommends iio-sensor-proxy and xf86-input-libinput to both
  openSUSE and SLE (jsc#SLE-11710). The condition does not make
  sense today when gnome-settings-daemon 3.34 and above are only
  built on SLE/Leap 15 and above.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591790400">- Add gnome-settings-daemon-not-warn-about-starting-stopping-services.patch:
  Don?t warn about starting/stopping services which don?t exist,
  backport upstream commit 523ffa14 (bsc#1172760).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1602590400">- Add gnome-settings-daemon-jscSLE16518-update-subprojects-libgvc.patch:
  Update libgvc to revision 7a621180. This update is necessary to
  add support for recent UCM related changes in ALSA and PulseAudio.
- Add gnome-settings-daemon-media-keys-warnings-cleanup-for-gvc-update.patch:
  Don't throw warnings when we can't find a default source or sink
  and the PulseAudio daemon is restarting (jsc#SLE-16518,
  glgo#GNOME/gnome-settings-daemon!203).</changelog>
</package>
<package pkgid="13b805ac8f3df882e48e813a074a6d6c2b466896374a873b7ee94aa3cb9efbb7" name="gnome-settings-daemon-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.2+0" rel="lp152.3.3.1"/>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1556452800">- Add gnome-settings-daemon-round-xft_dpi-to-integer.patch: Round
  the Xft.dpi setting to an integer (bsc#1086789,
  glgo#GNOME#gnome-settings-daemon!99).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560945600">- Update to version 3.32.1:
  + Signal connector rather than output ID for OSDs.
  + Media-keys: Fix MPRIS issues with disconnecting clients.
  + Color: Allow night light to be always on.
  + Power: Only disable Suspend/Hibernate actions inside VM.
  + Smartcard: Fix cancellation issues.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1564747200">- Refresh patches with quilt.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.90:
  + Add systemd user service files for all the plugins.
  - With the exception of gsd-xsettings, daemons do not use the
    GDK X11 backend anymore.
  + WWAN: New daemon, handles WWAN device settings.
  + Mouse: Removed daemon, everything is now implemented in mutter.
  + Clipboard: - Removed daemon, everything is now implemented in
    mutter.
  + Color: Use Planckian calculations on night light.
  + Rfkill: - Handle airplane mode for WWAN interfaces.
  + XSettings: Round Xft.dpi setting to an integer.
  + Add entry for overlay scrolling setting.
  + Media-keys: - Use device node from AcceleratorActivated
    arguments.
  + Updated translations.
- Changes from version 3.33.0:
  + Compile warning fixes.
  + Media-keys:
  - Keygrabbing has been reworked. The new UngrabAccelerators
    DBus API on the shell is now required. Non-GNOME Desktops
    using g-s-d will need to be updated for this.
  - Add mapping for screen brightness cycle key.
  - Fix launched clients inheriting DESKTOP_AUTOSTART_ID.
  - Allow mapping of hard-coded keys.
  + Power:
  - Fix memory leak.
  - Remove special handling of tablet devices.
  + Mouse:
  - Remove locate-pointer, in favor of gnome-shell handling.
  - Remove mousetweaks support, in favor of gnome-shell handling.
  + Keyboard: Remove numlock persistence, in favor of gnome-shell
    handling.
  + Updated translations.
- Up colord, gsettings-desktop-schemas, polkit-gobject, and
  upower-glib dependencies.
- Add systemd dependency.
- Add gcr and mm-glib dependencies for wwan.
- Drop gnome-settings-daemon-round-xft_dpi-to-integer.patch: fixed
  upstream.
- Rebase patches: gnome-settings-daemon-initial-keyboard.patch,
  gnome-settings-daemon-bgo793253.patch., and SLED patches:
  gnome-settings-daemon-bnc873545-hide-warnings.patch,
  gnome-settings-daemon-more-power-button-actions.patch,
  gnome-settings-daemon-notify-idle-resumed.patch, and
  gnome-settings-daemon-sle-configure-timeout-blank.patch.
- Add gsd-wwan to files, and remove gsd-clipboard, gsd-mouse, and
  gsd-locate-pointer.
- Add systemd services and targets to files.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 3.33.92:
  + Media-keys: Fix MPRIS controller no longer working.
  + XSettings: Make plugin able to run on demand.
  + Ensure plugin is started after the shell.
  + Replace deprecated 'g_type_class_add_private' in
    GnomeSettingsPluginInfo.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1568116800">- Update to version 3.34.0:
  + Updated translations.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1568721600">- Add gsd-smartcard-parent-type.patch: use correct parent type for
  structs.</changelog>
  <changelog author="Felix Zhang &lt;fezhang@suse.com&gt;" date="1568980800">- Apply gnome-settings-daemon-sle-configure-timeout-blank.patch
  correctly.
- Rebase gnome-settings-daemon-notify-idle-resumed.patch.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1570536000">- Rebase gnome-settings-daemon-notify-idle-resumed.patch:
  Add the newly added parameter NOTIFICATION_PRIVACY_SYSTEM for the
  function of create_notification.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570622400">- Update to version 3.34.0+10:
  + smartcard:
  - Change timeout on spurious event error
  - Change manager to non-blocking
  + GsdSmartcardService: Use correct parent type for structs
  + media-keys: Divide keyboard brightness value by 100
  + Updated translations.
- Switch to git checkout via source service, use upstream stable
  branch.
- Drop gsd-smartcard-parent-type.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570881600">- Update to version 3.34.1+0:
  + power: Fix rounding of brightness value.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-settings-daemon-notify-idle-resumed.patch with
  proper xml tag names.</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1575028800">- Update to version 3.34.1+3:
  + media-keys: Add guard to map_keybinding()
  + media-keys: Fix crash on key bindings migration
  + media-keys: Use X11 display for clipboard
- Fix build on s390x (ie without wacom support)</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1575547200">- Enable the patches for both Leap and SLE (bsc#1158243):
  + gnome-settings-daemon-notify-idle-resumed.patch
  + gnome-settings-daemon-bnc873545-hide-warnings.patch
  + gnome-settings-daemon-sle-configure-timeout-blank.patch
  + gnome-settings-daemon-more-power-button-actions.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576670400">- Update to version 3.34.2+0:
  + media-keys: Place spawned processes into a systemd scope
  + smartcard: Initialize a pointer before use</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1578916800">- Drop gnome-settings-daemon-sle-configure-timeout-blank.patch:
  Drop this for SLE and Leap to align with upstream(bsc#1158476).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1588161600">- Remove unecessary conditional BuildRequires pkgconfig(udev),
  Tumbleweed needs it as well from 3.27.90. Meanwhile an explict
  unconditional BuildRequires pkgconfig(udev) has been already
  stated in spec a couple of lines before the removal.
- Recommends iio-sensor-proxy and xf86-input-libinput to both
  openSUSE and SLE (jsc#SLE-11710). The condition does not make
  sense today when gnome-settings-daemon 3.34 and above are only
  built on SLE/Leap 15 and above.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591790400">- Add gnome-settings-daemon-not-warn-about-starting-stopping-services.patch:
  Don?t warn about starting/stopping services which don?t exist,
  backport upstream commit 523ffa14 (bsc#1172760).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1602590400">- Add gnome-settings-daemon-jscSLE16518-update-subprojects-libgvc.patch:
  Update libgvc to revision 7a621180. This update is necessary to
  add support for recent UCM related changes in ALSA and PulseAudio.
- Add gnome-settings-daemon-media-keys-warnings-cleanup-for-gvc-update.patch:
  Don't throw warnings when we can't find a default source or sink
  and the PulseAudio daemon is restarting (jsc#SLE-16518,
  glgo#GNOME/gnome-settings-daemon!203).</changelog>
</package>
<package pkgid="8c09e215e88e474964443b5472d66ccf429e4ea2607a7b104bb5542045a9d925" name="gnome-shell-calendar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.34.1+6:
  + shell-screenshots: Do not pass a clip for window screenshots.
  + workspace: Sort windows in overview grid using cached center.
  + screenShield: Compute lock timeout fade duration using
    animation settings.
  + environment: Only disable unredirection of ongoing transitions.
  + js: Replace Tweener time leftovers with ease duration.
  + animation: Finish porting to clutter transitions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572436800">- Update to version 3.34.1+7:
  * dnd: Skip drag target when its acceptDrop() throws an exception</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
</package>
<package pkgid="d98b0a1fb55bfbb8bddbf7c2ac31cd0fd0dc95b444f22d0166f16c6658cb6489" name="gnome-shell-calendar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.6.1"/>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
</package>
<package pkgid="3ba1cbfac031ab3a06382cccc5e95883db27447e55d8123f3f3c146b0c8a13e9" name="gnome-shell-calendar-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.9.1"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1602504000">- Add gnome-shell-jscSLE16518-update-subprojects-libgvc.patch:
  Update libgvc to revision 7a621180. This update is necessary to
  add support for recent UCM related changes in ALSA and PulseAudio
  (jsc#SLE-16518, glgo#GNOME/gnome-shell!1444).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1603454400">- Add gnome-shell-CVE-2020-17489.patch: reset auth prompt on vt
  switch before fade in in loginDialog
  (bsc#1175155 glgo#GNOME/gnome-shell!1377 CVE-2020-17489).</changelog>
</package>
<package pkgid="0f8563a2e6cae489d40ea561f44525758f9f66899b61e31eba5c65dbc1da2e77" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.34.1+6:
  + shell-screenshots: Do not pass a clip for window screenshots.
  + workspace: Sort windows in overview grid using cached center.
  + screenShield: Compute lock timeout fade duration using
    animation settings.
  + environment: Only disable unredirection of ongoing transitions.
  + js: Replace Tweener time leftovers with ease duration.
  + animation: Finish porting to clutter transitions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572436800">- Update to version 3.34.1+7:
  * dnd: Skip drag target when its acceptDrop() throws an exception</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
</package>
<package pkgid="7450398a7dc3d10a0512d983c886ff58a436285a082d301f5be4c33ca42715f9" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.6.1"/>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
</package>
<package pkgid="36fc927c1b29230ba02ad61b8d3ab0d3d52b661bb86a620309be2b62f3db1cc1" name="gnome-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.9.1"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1602504000">- Add gnome-shell-jscSLE16518-update-subprojects-libgvc.patch:
  Update libgvc to revision 7a621180. This update is necessary to
  add support for recent UCM related changes in ALSA and PulseAudio
  (jsc#SLE-16518, glgo#GNOME/gnome-shell!1444).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1603454400">- Add gnome-shell-CVE-2020-17489.patch: reset auth prompt on vt
  switch before fade in in loginDialog
  (bsc#1175155 glgo#GNOME/gnome-shell!1377 CVE-2020-17489).</changelog>
</package>
<package pkgid="1b7f99b7889e15b13a510be00e4d6a013385dbc9dddd17ff6003e2acec5bba29" name="gnome-shell-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.34.1+6:
  + shell-screenshots: Do not pass a clip for window screenshots.
  + workspace: Sort windows in overview grid using cached center.
  + screenShield: Compute lock timeout fade duration using
    animation settings.
  + environment: Only disable unredirection of ongoing transitions.
  + js: Replace Tweener time leftovers with ease duration.
  + animation: Finish porting to clutter transitions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1572436800">- Update to version 3.34.1+7:
  * dnd: Skip drag target when its acceptDrop() throws an exception</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
</package>
<package pkgid="bdbcc8e69d848127b1661fa20a792f8a44060663f398bb67a325f9c29d0b1034" name="gnome-shell-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.6.1"/>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1572609600">- Rebase patch gnome-shell-domain.patch and
  gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1574164800">- Update to version 3.34.1+14:
  * windowManager: Replace left-over calls to _removeEffect()
  * Update Russian translation
  * windowManager: Complete interrupted size change effects
  * windowManager: Use Sets to track ongoing effects
  * ci: Fix checking out mutter on stable branches
  * theme: Adjust system-menu-action buttons
  * calendar-server: Uses wrong timezone for event times</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
</package>
<package pkgid="bba1d70a2b054b4cd92aee1735ae6f8c9402d71da66dc41e53e8937a8b6ad7bd" name="gnome-shell-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.5" rel="lp152.2.9.1"/>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574337600">- Update gnome-shell-domain.patch to fix syntax errors.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * popupMenu: Close when a system modal pops up
  * switcherPopup: Dismiss when a system modal dialog opens
  * weather: Only require auto-location authorization if sandboxed
  * util: Place spawned processes into a systemd scope
  * shell-global: Place launched applications into a systemd scope
  * Update Malay translation
  * closeDialog: Fix scale of dialog for x11 clients in Wayland sessions
  * switcherPopup: Fix scrollable check
  * calendar-server: Use correct timezone for all-day events
  * theme: Add light styling to message buttons
  * Update Chinese (Taiwan) translation
  * appIcon: Draw running dot above the overview icon
  * texture-cache: Remove also scaled keys from the cache
  * data: Enable clean session shutdown after gnome-shell failure
  * extensionSystem: Create a file to flag that extensions are being loaded
  * extensions-tool: Fix removing from settings list
  * introspect: Fix whitelist check
  * theme: Add :active styling to message-close and media control buttons
  * theme: Add message close button styling
  * theme: Darken hovered message-media-control button
  * magnifier: Use new cursor tracker API to keep wayland focus while hidden
  * magnifier: Use own showSystemCursor() instead of set_pointer_visible()
  * Update Brazilian Portuguese translation
  * polkitAgent: Use dialog as confirmation when the user has no password
  * polkitAgent: Update user name on user changes
  * polkitAgent: Fix a typo of a signal name
  * appDisplay: Add a timeout when switching pages during DnD
  * appDisplay: Add threshold after overshoot page switches
  * appDisplay: Simplify event blocking while folder is opened
  * appDisplay: Ensure we don't recreate existing AppIcons for folders
  * appDisplay: Add missing .actor
  * keyboard: Try harder to find a matching layout
  * screenShield: Replace child properties
  * switcherPopup: Fix last commit
  * switcherPopup: Improve modifier-less keybinding navigation
  * switcherPopup: Use roundtrip time when the popup is modifier-less
  * appDisplay: Don't crash if app is missing categories
  * panel: Update window section items on title changes
  * power: Handle "100% but charging" case
  * closeDialog: Fix dialog size when using geometry scaling
  * appIcon: Remove drag monitor on destroy
  * folderView: Reset schemas before removing the folder
  * baseAppView: Destroy icon when removing
  * allView: Rename variable
  * allView, frequentView: Only create icons when necessary
  * polkitAgent: Fix spinner
  * Increase .calendar-today visibility
  * appMenu: Hide stopped spinner actor
  * animation: Add parameter for hiding stopped Spinner actor
  * animation: Turn Spinner animate parameter into Params option</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * keyboard: Stop accessing deprecated actor property</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- Update to version 3.34.2+2:
  * polkitAgent: Only set key focus to password entry after opening dialog</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1577707200">- Update BuildRequires for latest release of gnome-desktop-3
  to get systemd scope support for launched applications.
- Update BuildRequires to mutter libraries &gt;= 3.34.0 and
  gsettings-desktop-schemas &gt;= 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump verion to 3.34.3</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1581854400">- Update to version 3.34.4:
  + Switch screen-recorder back to VP8.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1582804800">- Update to version 3.34.4+4:
  * shell: fix typo in comment
  * global: force fsync() to worker thread when saving state
  * overview: Hide the overview on session mode hasOverview changes
  * closeDialog: Make dialog inactive while fading out</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1583755200">- Drop gnome-shell-Avoid-loginDialog-grab-focus-when-locked.patch:
  This patch will steal the mouse focus of the gdm greeter, drop
  it to be aligned with upstream, let the first/only user entry of
  gdm to be selected by default, and the bug the patch fixed can not
  be reproduced in GNOME3.34 (bsc#1164856).
- Rebase gs-fate318433-prevent-same-account-multi-logins.patch and
  gnome-shell-domain.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Leave overview when locking the screen.
  + Avoid IO on the main thread.
  + Fix OSK layout fallback for unsupported variants.
  + Fix high-contrast/symbolic icon mix-up.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1586433600">- Update gnome-shell-disable-ibus-when-not-installed.patch: Remove
  error in journal log(bsc#1169029).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1587556800">- Add gnome-shell-Get-resource-scale-by-get_resource_scale.patch:
  To remove 'Getting invalid resource scale property' warnings in
  the log(bsc#1169845 glgo#GNOME/gnome-shell!1206).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1591185600">- Update gnome-shell-private-connection.patch: Remove JS error in
  messages log when NetworkManager is not installed (bsc#1172424).</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1591876800">- Add gnome-shell-disable-screensaver-user-switch-when-remote.patch:
  This patch will set the button invisible when the user's can_switch
  is false (e.g. when the session is remote) or user-switch-enabled is
  disabled (bsc#1167276 glgo#GNOME/gnome-shell!1215).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594296000">- Add gnome-shell-network-agent-not-pop-up.patch: Fix network agent
  doesn't pop up (bsc#1171822).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1594641600">- Update gnome-shell.spec: Replace is_opensuse with sle_version
  (jsc#SLE-11720).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599220800">- Add gnome-shell-executable-path-not-absolute.patch: Fix ExecStart
  is not absolute path. ExecStart can use related path in high
  systemd version. The current systemd version in SLE-15-SP2
  should use absolute path (bsc#1176051).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1599739200">- Move branding image file to branding-SLE package
  (jsc#SLE-11720 bsc#1176304).
  + Update gnome-shell-1007468-lock-screen-SUSE-logo-missing.patch
  + Remove sle-background.png</changelog>
  <changelog author="QK ZHU &lt;qkzhu@suse.com&gt;" date="1602504000">- Add gnome-shell-jscSLE16518-update-subprojects-libgvc.patch:
  Update libgvc to revision 7a621180. This update is necessary to
  add support for recent UCM related changes in ALSA and PulseAudio
  (jsc#SLE-16518, glgo#GNOME/gnome-shell!1444).</changelog>
  <changelog author="Xiaoguang Wang &lt;xiaoguang.wang@suse.com&gt;" date="1603454400">- Add gnome-shell-CVE-2020-17489.patch: reset auth prompt on vt
  switch before fade in in loginDialog
  (bsc#1175155 glgo#GNOME/gnome-shell!1377 CVE-2020-17489).</changelog>
</package>
<package pkgid="1e467a9b035672dc8c33222d85572405e54f460827fed047925b64f7fc26c8ff" name="gnome-software-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551096000">- Update to version 3.31.90:
  + Fix showing the installed check mark on tiles.
  + Fix crashes in the packagekit plugin due to missing locking.
  + Add back support for appstream data in
    /var/{cache,lib}/app-info directories that accidentally got
    left out with the libxmlb rewrite.
  + Update the featured banner for gnome-chess.
  + Fix the details page alignment when only one screenshot is
    shown.
  + Move the Update button to the right hand side on the details
    page.
  + Fix enabling repos when installing codecs through the extras
    page.
  + Remove the Sundry folder and sync the apps in the Utilities
    folder with gnome-menus 3.31.90.
  + Improve various content rating texts.
  + Drop workarounds for locales with codesets.
  + Use the currently selected icon theme for stock icons.
  + Don't hide compulsory apps in the category views.
  + Use the SPDX-License-Identifier in all source files.
  + Remove various useless error prefixes, making flatpak and
    packagekit error messages shorter and easier to read.
  + flatpak:
  - Show the installation type (user, system) in the Source
    dropdown.
  - Let apps control the name suffix/prefix they have and don't
    force (Nightly) suffix for everything on the master branch.
  - Various fixes for matching flatpaks to appstream entries.
  - Distinguish between the same app coming from multiple
    remotes.
  + rpm-ostree:
  - Correctly resolve installed appdata files to package names.
  - Hook up percentage progress for install and remove.
  - Implement layered package install.
  - Implement locally downloaded rpm install.
  - Show the source of the packages when installing layered
    packages.
  - Various fixes making things more robust.
  + snap: Use new media API.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Add two missing description strings for flatpak permissions.
  + Only show permissions for flatpak apps and not for e.g. fonts.
  + Fix flatpak permissions to correctly show up for available
    apps.
  + Hide various details page items that don't make sense when
    showing .flatpakrepo files.
  + Fix an issue that caused descriptions to sometimes not get
    correctly loaded.
  + Sort the items in the Source drop down.
  + Don't show error notifications for background download and
    refresh errors.
  + Fix an issue that could cause an explosion of "A restart is
    required" notifications.
  + Various flatpak plugin fixes to make it correctly match the
    data when multiple flatpak repos are available.
  + Fix the rpm-ostree plugin to correctly convert remote dbus
    errors.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.32.0:
  + trivial: Don't crash when installing a web-app.
  + Remove reference to obsolete Ubuntu review plugin from README.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1555416000">- Update to version 3.32.1:
  + Add drop shadows to app icons.
  + Various fixes to initial loading screen.
  + Show a generic icon instead of empty space if we failed to load
    the app icon.
  + Update featured banners for Maps and Blender.
  + Update featured app IDs.
  + Fix a crash due to missing locking.
  + Fix missing back button under certain conditions.
  + Fix loading AppSteam data from .yml.gz files.
  + Fix an issue that caused flatpak repo to not be correctly shown
    when it matched an existing packagekit repo name.
  + Hide the fwupd Vendor repo in the repos dialog.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557230400">- Update to version 3.32.2:
  + Avoid showing a review more than once.
  + Correctly update progress bar when downloading packagekit
    distro upgrades.
  + Fix a crash when closing the updates dialog before the content
    has loaded.
  + Fix CTRL+F not working right in certains conditions.
  + Set 022 umask to make sure flatpak system helper process can
    read the files we've written.
  + rpm-ostree:
  - Implement getting the repo list, and enabling and disabling
    repos.
  - Implement provides search.
  - Make layered apps not discoverable in the UI.
  + Various other minor bug fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1558699200">- Update to version 3.32.3:
  + Add missing XbSilo locking, hopefully fixing a large number of
    reported crashes.
  + Fix a regression that caused the fonts category to go missing.
  + Show a placeholder on the details page when we don't have the
    actual icon.
  + Plug a large memory leak.
  + Use nicer arrows for version numbers on the updates page.
  + Fix an issue that led to screenshots not being correctly scaled
    on hidpi.
  + flatpak:
  - Fix several double-uses of GErrors.
  - Handle failure of a libflatpak function updating permissions.
  + rpm-ostree: Implement what-provides decompose.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562328000">- Drop pkgconfig(valgrind) BuildRequires, and pass valgrind=false
  to meson. Fixes build for arm, and we do not really need valgrind
  integration.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562846400">- Update to version 3.32.4:
  + Fix an issue that led to some packages with multiple appdata
    files not correctly showing up on the updates page.
  + Fix various problems with flatpak branch handling that were
    causing issues with freedesktop.org runtime updates.
  + Fix flatpak update versions to correctly show up.
  + Various other minor bug fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Add a link to the privacy policy in the review dialog.
  + Add and improve many overview banners.
  + Add support for download scheduling using Mogwai.
  + Allow installing locale data automatically.
  + Allow snaps to be shown by AppStream ID.
  + Don't apply drop shadow on stock symbolic icons.
  + Don't install queued apps when the network changes and is
    metered.
  + Fix the 'localised in my language' kudo.
  + Hide addons that are not available in repos.
  + Localize ESRB content rating strings.
  + Never show the installation progress bar going backwards.
  + Notify the user when an application can escape the sandbox.
  + Refactor screenshots and hide those unavailable when offline.
  + Select the rating systems selected based by territory.
  + Use smaller default size for main window when required.
  + Updated Translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Fix firmware updates where the device needed a manual detach.
  + Fix installing webapps.
  + Fix signal blocking for search.
  + Fix third party repo enabling.
  + Hide the shortcut buttons for parentally filtered apps.
  + Make disabled flatpak remote enabling work.
  + Show snap channels as app alternates.
  + Show the correct application when clicking from the GNOME Shell
    menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574164800">- Add gnome-software-fwupd-dependency.patch: fwupd: Fix compile
  with old versions of fwupd (bsc#1156960,
  gh#hughsie/gnome-software!362).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 3.34.2:
  + Do not show a crazy error when installing packages.
  + Do not show non-applications in the installed panel.
  + Download Flatpak updates in the correct installation.
  + Fix a potential threading crash when using flatpak.
  + Fix a small memory leaks.
  + Set the shell extension origin correctly in all cases.
  + Speed up flatpak loading in some situations.
  + Updated translations.
- Drop gnome-software-fwupd-dependency.patch: Fixed upstream.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1574856000">- Rebase gnome-software-launch-gpk-update-viewer-for-updates.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574942400">- Don't start gnome-software at startup and disable its search
  extension on SLE until bsc#1157928 is fixed properly.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1580299200">- Apply polkit workaround also for Leap 15.2
  bsc#1157928 poo#62762</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590062400">- Re-autostart GNOME Software and re-enable its search extension
  (bsc#1168861, bsc#1157928).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1591704000">- Add gnome-software-failed-offline-update-notification.patch:
  plugin-loader: handle offline update errors properly(bsc#1161095,
  glgo#GNOME/gnome-software!471).</changelog>
  <changelog author="Erico Mendonca &lt;erico.mendonca@suse.com&gt;" date="1596110400">- Add gnome-software-add-missing-headers.patch: add missing devel
  headers referenced by gnome-software.h (bsc#1174849).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1596628800">- Update gnome-software-add-missing-headers.patch: add more devel
  headers in lib/meson.build (glgo#GNOME/gnome-software!446).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1605873600">- Added gnome-packagekit as recommended dependency:
  gnome-software-launch-gpk-update-viewer-for-updates.patch needs
  gnome-packagekit to work (SLE only) (bsc#1178768).</changelog>
</package>
<package pkgid="c4ec53606d4f6a3b48abb87ea7ef197658ed079b0a38ff41d478e22f12e90e39" name="gnome-software-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551096000">- Update to version 3.31.90:
  + Fix showing the installed check mark on tiles.
  + Fix crashes in the packagekit plugin due to missing locking.
  + Add back support for appstream data in
    /var/{cache,lib}/app-info directories that accidentally got
    left out with the libxmlb rewrite.
  + Update the featured banner for gnome-chess.
  + Fix the details page alignment when only one screenshot is
    shown.
  + Move the Update button to the right hand side on the details
    page.
  + Fix enabling repos when installing codecs through the extras
    page.
  + Remove the Sundry folder and sync the apps in the Utilities
    folder with gnome-menus 3.31.90.
  + Improve various content rating texts.
  + Drop workarounds for locales with codesets.
  + Use the currently selected icon theme for stock icons.
  + Don't hide compulsory apps in the category views.
  + Use the SPDX-License-Identifier in all source files.
  + Remove various useless error prefixes, making flatpak and
    packagekit error messages shorter and easier to read.
  + flatpak:
  - Show the installation type (user, system) in the Source
    dropdown.
  - Let apps control the name suffix/prefix they have and don't
    force (Nightly) suffix for everything on the master branch.
  - Various fixes for matching flatpaks to appstream entries.
  - Distinguish between the same app coming from multiple
    remotes.
  + rpm-ostree:
  - Correctly resolve installed appdata files to package names.
  - Hook up percentage progress for install and remove.
  - Implement layered package install.
  - Implement locally downloaded rpm install.
  - Show the source of the packages when installing layered
    packages.
  - Various fixes making things more robust.
  + snap: Use new media API.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1551787200">- Update to version 3.31.92:
  + Add two missing description strings for flatpak permissions.
  + Only show permissions for flatpak apps and not for e.g. fonts.
  + Fix flatpak permissions to correctly show up for available
    apps.
  + Hide various details page items that don't make sense when
    showing .flatpakrepo files.
  + Fix an issue that caused descriptions to sometimes not get
    correctly loaded.
  + Sort the items in the Source drop down.
  + Don't show error notifications for background download and
    refresh errors.
  + Fix an issue that could cause an explosion of "A restart is
    required" notifications.
  + Various flatpak plugin fixes to make it correctly match the
    data when multiple flatpak repos are available.
  + Fix the rpm-ostree plugin to correctly convert remote dbus
    errors.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.32.0:
  + trivial: Don't crash when installing a web-app.
  + Remove reference to obsolete Ubuntu review plugin from README.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1555416000">- Update to version 3.32.1:
  + Add drop shadows to app icons.
  + Various fixes to initial loading screen.
  + Show a generic icon instead of empty space if we failed to load
    the app icon.
  + Update featured banners for Maps and Blender.
  + Update featured app IDs.
  + Fix a crash due to missing locking.
  + Fix missing back button under certain conditions.
  + Fix loading AppSteam data from .yml.gz files.
  + Fix an issue that caused flatpak repo to not be correctly shown
    when it matched an existing packagekit repo name.
  + Hide the fwupd Vendor repo in the repos dialog.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1557230400">- Update to version 3.32.2:
  + Avoid showing a review more than once.
  + Correctly update progress bar when downloading packagekit
    distro upgrades.
  + Fix a crash when closing the updates dialog before the content
    has loaded.
  + Fix CTRL+F not working right in certains conditions.
  + Set 022 umask to make sure flatpak system helper process can
    read the files we've written.
  + rpm-ostree:
  - Implement getting the repo list, and enabling and disabling
    repos.
  - Implement provides search.
  - Make layered apps not discoverable in the UI.
  + Various other minor bug fixes.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1558699200">- Update to version 3.32.3:
  + Add missing XbSilo locking, hopefully fixing a large number of
    reported crashes.
  + Fix a regression that caused the fonts category to go missing.
  + Show a placeholder on the details page when we don't have the
    actual icon.
  + Plug a large memory leak.
  + Use nicer arrows for version numbers on the updates page.
  + Fix an issue that led to screenshots not being correctly scaled
    on hidpi.
  + flatpak:
  - Fix several double-uses of GErrors.
  - Handle failure of a libflatpak function updating permissions.
  + rpm-ostree: Implement what-provides decompose.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562328000">- Drop pkgconfig(valgrind) BuildRequires, and pass valgrind=false
  to meson. Fixes build for arm, and we do not really need valgrind
  integration.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562846400">- Update to version 3.32.4:
  + Fix an issue that led to some packages with multiple appdata
    files not correctly showing up on the updates page.
  + Fix various problems with flatpak branch handling that were
    causing issues with freedesktop.org runtime updates.
  + Fix flatpak update versions to correctly show up.
  + Various other minor bug fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + Add a link to the privacy policy in the review dialog.
  + Add and improve many overview banners.
  + Add support for download scheduling using Mogwai.
  + Allow installing locale data automatically.
  + Allow snaps to be shown by AppStream ID.
  + Don't apply drop shadow on stock symbolic icons.
  + Don't install queued apps when the network changes and is
    metered.
  + Fix the 'localised in my language' kudo.
  + Hide addons that are not available in repos.
  + Localize ESRB content rating strings.
  + Never show the installation progress bar going backwards.
  + Notify the user when an application can escape the sandbox.
  + Refactor screenshots and hide those unavailable when offline.
  + Select the rating systems selected based by territory.
  + Use smaller default size for main window when required.
  + Updated Translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570449600">- Update to version 3.34.1:
  + Fix firmware updates where the device needed a manual detach.
  + Fix installing webapps.
  + Fix signal blocking for search.
  + Fix third party repo enabling.
  + Hide the shortcut buttons for parentally filtered apps.
  + Make disabled flatpak remote enabling work.
  + Show snap channels as app alternates.
  + Show the correct application when clicking from the GNOME Shell
    menu.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1574164800">- Add gnome-software-fwupd-dependency.patch: fwupd: Fix compile
  with old versions of fwupd (bsc#1156960,
  gh#hughsie/gnome-software!362).</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574683200">- Update to version 3.34.2:
  + Do not show a crazy error when installing packages.
  + Do not show non-applications in the installed panel.
  + Download Flatpak updates in the correct installation.
  + Fix a potential threading crash when using flatpak.
  + Fix a small memory leaks.
  + Set the shell extension origin correctly in all cases.
  + Speed up flatpak loading in some situations.
  + Updated translations.
- Drop gnome-software-fwupd-dependency.patch: Fixed upstream.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1574856000">- Rebase gnome-software-launch-gpk-update-viewer-for-updates.patch</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574942400">- Don't start gnome-software at startup and disable its search
  extension on SLE until bsc#1157928 is fixed properly.</changelog>
  <changelog author="Lubos Kocman &lt;lubos.kocman@suse.com&gt;" date="1580299200">- Apply polkit workaround also for Leap 15.2
  bsc#1157928 poo#62762</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1590062400">- Re-autostart GNOME Software and re-enable its search extension
  (bsc#1168861, bsc#1157928).</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1591704000">- Add gnome-software-failed-offline-update-notification.patch:
  plugin-loader: handle offline update errors properly(bsc#1161095,
  glgo#GNOME/gnome-software!471).</changelog>
  <changelog author="Erico Mendonca &lt;erico.mendonca@suse.com&gt;" date="1596110400">- Add gnome-software-add-missing-headers.patch: add missing devel
  headers referenced by gnome-software.h (bsc#1174849).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1596628800">- Update gnome-software-add-missing-headers.patch: add more devel
  headers in lib/meson.build (glgo#GNOME/gnome-software!446).</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1605873600">- Added gnome-packagekit as recommended dependency:
  gnome-software-launch-gpk-update-viewer-for-updates.patch needs
  gnome-packagekit to work (SLE only) (bsc#1178768).</changelog>
</package>
<package pkgid="95c6f70c57ab06e9bf7c73c0779553944175acf8d49009dd3fb8342bf61d3f00" name="gnote-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474804800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 3.22.1:
  + Fix possible loss of bullet when using formatting (bgo#773630).
  + More translator comments for the boost formats (bgo#774262).
  + Updated translations.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- Use individual libboost-*-devel packages instead of boost-devel.
  + Add conditional libboost_test-devel BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488196800">- Update to version 3.23.0:
  + New Features:
  - New optional dependency: UnitTest++ (required only for
    running gnote tests).
  - Removed dependency: boost (all of it).
  - Gnote now internally uses Unicode strings for all data.
  + Fixes:
  - Fix indentation sometimes getting is lost after restart
    (bgo#773630).
  - Use %1 style placeholders instead of %1% in translatable
    strings (bgo#774262).
  - Make app menu item ordering consistent with GNOME
    (bgo#772009).
  - Use open-menu-symbolic icon for menu (bgo#775320).
  + Updated translations.
- Drop libboost_test-devel/boost-devel BuildRequires: no longer
  needed.
- Bump _gnote_version defines to 3.23, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1490702400">- Update to version 3.24.0:
  + Left align items in popovers and increase vertical spacing
    (bgo#778823).
  + Fix --background option.
  + Make D-Bus APIs for opening notes respect new window setting
    (bgo#778871).
  + Change default for window to not autosize (bgo#778822).
  + Fix no icon for Gnote windows in some WMs (bgo#762001).
  + Use icon for Create Note button (bgo#704116).
  + Fix crash in search.
  + Updated translations.
- Bump _gnote_version defines to 3.24, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 3.24.1:
  + Fix typo in help.
  + Fix possible crash when deleting a notebook (bgo#701846).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504612800">- Update to version 3.25.0:
  + Removed Shadow from SearchView (bgo#783610).
  + Formatting and actions menus redesigned.
  + Fix possible crash when deleting a notebook (bgo#701846).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505736000">- Update to version 3.26.0:
  + Updated manual.
  + Updated translations.</changelog>
  <changelog author="qzheng@suse.com" date="1518350400">- Add shortkey-ctrl-o-alt-w.patch:
  When left-click the note tree view, shortkey should be enable
  ( bsc#1075335, bgo#792859 ).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521374400">- Update to version 3.28.0:
  + Fixes:
  - Manual validation;
  - gettext-domain in GSettings schema;
  - Do not show empty actions menu (bgo#789750);
  - Some shortcuts, that are added by context menu (bgo#792859).
  + Updated manual.
  + Updated translations.
- Update URL tag to https://wiki.gnome.org/Apps/Gnote: currently
  the Gnote's web page.
- Drop:
  + shortkey-ctrl-o-alt-w.patch: fixed upstream.
  + update-desktop-files BuildRequires and suse_update_desktop_file
    macro: they are no longer needed.
- Add desktop-file-utils BuildRequires to avoid implicit
  dependencies since the configure script checks for desktop-file-\
  validate. It was already being pulled by update-desktop-files.
- Conditionalize glib2_gsettings_schema_*, desktop_database_* and
  icon_theme_cache_* post/postun scriptlets, and
  glib2_gsettings_schema_require macro: they are needed only in
  distro releases where RPM 4.13 is not present.
- Point fdupes to the data directory instead of directly to the
  build root, which is a practice that must be avoided.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Added new automated tests.
  + Removed a bunch of unused localized manual images.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 3.31.0:
  + Added new automated tests.
  + Removed App menu, refactored actions menu.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552824000">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1555243200">- Update to version 3.32.1:
  + Fix Preferences menu item not visible in menu.
  + Update manual.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1567425600">- Update to version 3.33.0:
  + Manual updates.
  + Add Online Folder synchronization plugin.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569067200">- Upate to version 3.34.0:
  + New Features:
  - Add OARS and update appdata.
  - Use GSpell instead of GtkSpell for spellchecking.
  + Updated translations.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires following upstream changes.
- Bump base version to 3.34.
- Use modern macros.
- Drop conditionals for obsolete versions of openSUSE.
- Drop gnote-lang Recommends: No longer needed, automatic
  supplements in place.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574596800">- Update to version 3.34.1:
  + Added manual for Online Folder sync.
  + Lowerer gspell requirement to 1.6.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1583668800">- Update to version 3.34.2:
  + Fix possible crash when removing tags.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1599048000">- Add gnote-enabling-addin-for-opened-notes.patch: noteaddin: Fix
  newly enabled addin not working for opened(bsc#1075342,
  glgo#GNOME/gnote!11).</changelog>
</package>
<package pkgid="86b5970a78159eb3adf0be16f9d0651a0cac7e09393b9c77fb80b0ba2ec16a5b" name="gnote-debugsource" arch="x86_64">
  <version epoch="0" ver="3.34.2" rel="lp152.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1474804800">- Update to version 3.22.0:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1480420800">- Update to version 3.22.1:
  + Fix possible loss of bullet when using formatting (bgo#773630).
  + More translator comments for the boost formats (bgo#774262).
  + Updated translations.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- Use individual libboost-*-devel packages instead of boost-devel.
  + Add conditional libboost_test-devel BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1488196800">- Update to version 3.23.0:
  + New Features:
  - New optional dependency: UnitTest++ (required only for
    running gnote tests).
  - Removed dependency: boost (all of it).
  - Gnote now internally uses Unicode strings for all data.
  + Fixes:
  - Fix indentation sometimes getting is lost after restart
    (bgo#773630).
  - Use %1 style placeholders instead of %1% in translatable
    strings (bgo#774262).
  - Make app menu item ordering consistent with GNOME
    (bgo#772009).
  - Use open-menu-symbolic icon for menu (bgo#775320).
  + Updated translations.
- Drop libboost_test-devel/boost-devel BuildRequires: no longer
  needed.
- Bump _gnote_version defines to 3.23, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1490702400">- Update to version 3.24.0:
  + Left align items in popovers and increase vertical spacing
    (bgo#778823).
  + Fix --background option.
  + Make D-Bus APIs for opening notes respect new window setting
    (bgo#778871).
  + Change default for window to not autosize (bgo#778822).
  + Fix no icon for Gnote windows in some WMs (bgo#762001).
  + Use icon for Create Note button (bgo#704116).
  + Fix crash in search.
  + Updated translations.
- Bump _gnote_version defines to 3.24, following upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503230400">- Update to version 3.24.1:
  + Fix typo in help.
  + Fix possible crash when deleting a notebook (bgo#701846).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504612800">- Update to version 3.25.0:
  + Removed Shadow from SearchView (bgo#783610).
  + Formatting and actions menus redesigned.
  + Fix possible crash when deleting a notebook (bgo#701846).
  + Updated translations.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1505736000">- Update to version 3.26.0:
  + Updated manual.
  + Updated translations.</changelog>
  <changelog author="qzheng@suse.com" date="1518350400">- Add shortkey-ctrl-o-alt-w.patch:
  When left-click the note tree view, shortkey should be enable
  ( bsc#1075335, bgo#792859 ).</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1521374400">- Update to version 3.28.0:
  + Fixes:
  - Manual validation;
  - gettext-domain in GSettings schema;
  - Do not show empty actions menu (bgo#789750);
  - Some shortcuts, that are added by context menu (bgo#792859).
  + Updated manual.
  + Updated translations.
- Update URL tag to https://wiki.gnome.org/Apps/Gnote: currently
  the Gnote's web page.
- Drop:
  + shortkey-ctrl-o-alt-w.patch: fixed upstream.
  + update-desktop-files BuildRequires and suse_update_desktop_file
    macro: they are no longer needed.
- Add desktop-file-utils BuildRequires to avoid implicit
  dependencies since the configure script checks for desktop-file-\
  validate. It was already being pulled by update-desktop-files.
- Conditionalize glib2_gsettings_schema_*, desktop_database_* and
  icon_theme_cache_* post/postun scriptlets, and
  glib2_gsettings_schema_require macro: they are needed only in
  distro releases where RPM 4.13 is not present.
- Point fdupes to the data directory instead of directly to the
  build root, which is a practice that must be avoided.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 3.30.0:
  + Added new automated tests.
  + Removed a bunch of unused localized manual images.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546689600">- Update to version 3.31.0:
  + Added new automated tests.
  + Removed App menu, refactored actions menu.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552824000">- Update to version 3.32.0:
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1555243200">- Update to version 3.32.1:
  + Fix Preferences menu item not visible in menu.
  + Update manual.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1567425600">- Update to version 3.33.0:
  + Manual updates.
  + Add Online Folder synchronization plugin.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1569067200">- Upate to version 3.34.0:
  + New Features:
  - Add OARS and update appdata.
  - Use GSpell instead of GtkSpell for spellchecking.
  + Updated translations.
- Replace pkgconfig(gtkspell3-3.0) with pkgconfig(gspell-1)
  BuildRequires following upstream changes.
- Bump base version to 3.34.
- Use modern macros.
- Drop conditionals for obsolete versions of openSUSE.
- Drop gnote-lang Recommends: No longer needed, automatic
  supplements in place.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1574596800">- Update to version 3.34.1:
  + Added manual for Online Folder sync.
  + Lowerer gspell requirement to 1.6.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1583668800">- Update to version 3.34.2:
  + Fix possible crash when removing tags.
  + Updated translations.</changelog>
  <changelog author="Jonathan Kang &lt;songchuan.kang@suse.com&gt;" date="1599048000">- Add gnote-enabling-addin-for-opened-notes.patch: noteaddin: Fix
  newly enabled addin not working for opened(bsc#1075342,
  glgo#GNOME/gnote!11).</changelog>
</package>
<package pkgid="b33a67d13cdb0cb8fc91e8b682c3d2f363d3b9af9fd04d929d4729466a71b6f9" name="gnuplot-debuginfo" arch="i586">
  <version epoch="0" ver="5.2.2" rel="lp152.6.3.1"/>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
</package>
<package pkgid="ca0481304ecce2256adf72f1883a947c792a442542960d09862467396ec3bb10" name="gnuplot-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="lp152.6.3.1"/>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
</package>
<package pkgid="a323ea4ed5e8115472590ca1e9a85622747abab53be6c5566855829287beaf8f" name="gnuplot-debugsource" arch="i586">
  <version epoch="0" ver="5.2.2" rel="lp152.6.3.1"/>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
</package>
<package pkgid="257a550b073022c59d71eb13a4497f148bf47c856650630a9ce61b96078c2847" name="gnuplot-debugsource" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="lp152.6.3.1"/>
  <changelog author="burnus@net-b.de" date="1421841600">- Update to 5.0.0
  * NEW new command set {xyz}tics {timedate|geographic|numeric} sets
  axis-&gt;tictype
  * NEW add the tictype keywords to
  set format {axis} {time|geographic|numeric}
  * NEW format modifier 't' in timedate mode indicates a time
  rather than a date
  * NEW grey out key entries when corresponding plot is toggled off
  * NEW allow parenthesized expressions as call parameters
  * NEW set margins &lt;left&gt;, &lt;right&gt;, &lt;top&gt;, &lt;bottom&gt;
  * NEW set trange [theta_min:theta_max] filters input data in polar plots
  * NEW "set mouse zoomfactors &lt;xfact&gt;,&lt;yfact&gt;"
  * NEW New matrix keywords for text data: "columnheaders" and "rowheaders"
  * NEW The dashtype property on any line can be seperately controlled
  * NEW custom dashtypes
  * NEW LFS support for datafiles
  * NEW timecolumn(col,"timeformat') now requires 2nd parameter, the format
  * NEW 'set view map {scale}' allows resizing a 3D projection plot
  * NEW 'nodraw' keyword to suppress lines (e.g. in style linespoints)
  * NEW bold/italic text markup in enhanced text mode
  * NEW bit-shifing binary operators &lt;&lt; and &gt;&gt;
  * NEW stat calculates skewness, kurtosis, and standard errors
  * NEW function plugins, e.g. 'import f(x) from "plugins.so"'
  * NEW option to tabulate all input columns "set table;
  plot ... with table"
  * NEW smoothing option "mcsplines" for piecewise monotonic
  cubic splines
  * NEW 'history !N' reexecutes the command at history entry N.
  * NEW 'set history {size &lt;N&gt;} {quiet|numbers} {full|trim} {default}'
  * NEW piecewise functions via separate sampling ranges for each plot
  element
  * NEW function hsv2rgb(H,S,V) creates a 24-bit RGB value
  * NEW plot title can be placed next to the plot line in
  the graph proper
  * NEW inline data can be stored for reuse in named data blocks
  * NEW 'set print|table $datablock' to redirect output to a named
  data block
  * NEW hypertext labels can be displayed on mouse-over
  * NEW geographic (Degrees Minutes Seconds) data axes
  * NEW set arrow &lt;tag&gt; from &lt;start&gt; length &lt;len&gt; angle &lt;ang&gt;
  * NEW arrow style keywords "noborder" and "fixed"
  * NEW the high bits of RGB colors are treated as an alpha channel
  * NEW 'set surface explicit' disables automatic generation of
  a surface mesh
  * NEW 'set link [x2|y2]' ties secondary axis range to the primary axis
  * NEW 'set link x2 via f(x) inverse g(x)' introduces generic nonlinear
  axes
  * NEW linked axes can be used to place x2 and y2 labels on 3D plots
  in map mode
  * NEW 'set key opaque' works for 3D plots also
  * NEW x11 terminal is aware of current and requested plot aspect ratio
  * NEW x11 support for toggling plots on/off with left mouseclick on
  the key
  * NEW post term can use /FlateDecode to reduce the size of embedded
  images
  * NEW 'set fit quiet|results|brief|verbose' changes fit's verbosity
  * NEW fit optionally stores final covariances to user variables
  * NEW fit command takes errors of independent variables into account
  * NEW 'set multiplot next/previous'
  * NEW 'set contours; splot FOO with labels' places labels on the
  contour lines
  * NEW Additional levels of user-specified axis tics
  * NEW complex math routines cerf, cdawson, erfi, faddeeva from
  libcerf if present
  * NEW i/v/V hotkeys to toggle all plots on the screen on/off
  * NEW 'set mrtics' (minor tics on polar axis)
  * NEW 'reset session'
  * NEW call argument convention ARGC, ARG0 ARG1 ... ARG&lt;ARGC&gt;
  * NEW shell invocation gnuplot -c scriptfile ARG1 ARG2 ARG3
  * NEW format %h is like %g but uses LaTeX or enhanced markup for the
  exponent
  * NEW LaTeX terminals use math mode for axis tic labels
  * NEW Interrupt scripts or fits by pressing Ctrl-C in Windows console
  mode gnuplot or Ctrl-Break in wgnuplot.
  * NEW optional faster windows terminal variant using GDI+
  * NEW plot option to "skip N" lines at start of an ascii data file
  * NEW interactive color character art terminal "caca"
- Rediff gnuplot-4.6.0-fonts.diff, gnuplot-4.4.0-x11ovf.dif,
  gnuplot-4.6.0.dif and gnuplot-4.6.0-demo.diff.
- Remove gnuplot-4.6.0-backtick.diff as to-be-patched file no longer
  exists.</changelog>
  <changelog author="alinm.elena@gmail.com" date="1422705600">- for versions greater than 13.1 we shall build against qt5
  * cleaned up various rpmlint warning
  * got rid of configure options obsoleted</changelog>
  <changelog author="jengelh@inai.de" date="1427025600">- Enable CACA output module
- Build with wxWidgets 3. Add patch gnuplot-wx3.diff</changelog>
  <changelog author="werner@suse.de" date="1432209600">- Since QtCore is build with -reduce-relocations a -fPIC is required
  therefore add patch gnuplot-QtCore-PIC.dif</changelog>
  <changelog author="werner@suse.de" date="1432296000">- Make it build even with older Qt4 based systems</changelog>
  <changelog author="werner@suse.de" date="1437739200">- Require pkgconfig of libcerf at build time</changelog>
  <changelog author="werner@suse.de" date="1438084800">- Add patch gnuplot-5.0.0-lua-5.3.1.dif to make it build with
  lua-5.3.1</changelog>
  <changelog author="nico.kruber@gmail.com" date="1448884800">- Update to 5.0.1
  * NEW "set mono" (full command "set monochrome {linetype lt
    &lt;line-properties&gt;}")
  * NEW "set fit nolog" suppresses output to log file
  * NEW sixel terminal supports RGB and palette colors, but only 16 at
    a time :-(
  * NEW command "printerr" acts exactly like "print" but always outputs
    via stderr
  * CHANGE autoconfigure of Qt5 support now looks for --variable=host_bins
  * CHANGE reevaluate fill color for each polygon in data for
    "with filledcurves"
  * CHANGE gstrptime(): always check validity of %y %Y %d %B %b input fields
  * CHANGE track text properties for key title separately from key entries
  * CHANGE "smooth kdensity" now handles logscale y and explicit x range
  * CHANGE order of margins in the "set margin" command to left, right,
    bottom, top
  * CHANGE guarantee color of key sample for "lc variable" plots matches
    1st point
  * CHANGE "set term fig color" can use predefined linetype colors and
    named colors
  * CHANGE skip all preprocessing for input lines beginning with shell escape
    char
  * CHANGE build system to suppress dvi as an automake-generated target
  * CHANGE in hidden3d mode, the 'nosurface' suppresses both surface grid
    directions
  * FIX replace palette color value NaN with background color
  * FIX improved handling of boxplot data with multiple factors (categories)
  * FIX save_textcolor was not handling "tc variable"
  * FIX apply numeric locale when reading ascii matrix data
  * FIX handling of ascii matrix data
  * FIX reinitialize brush used to draw dotted lines in gd terminal
  * FIX failure to clear bold/italic text attributes in cairo terminals
  * FIX tabular output of time data when the axis format has not been set
  * FIX breakage in plot style filledcurves {above|below} y1=&lt;yval&gt;
  * FIX dashtypes after "set term {e}pslatex mono"
  * FIX report and enforce maximum number of parallel axes without faulting
  * FIX smooth mcsplines for a curve containing multiple y values at a single x
  * FIX several bugs evident for log-scaled color axis
  * FIX regression in color support for pbm/sixel/hpgl terminals (no RGB color)
  * FIX accummulated round-off error in dotted lines drawn by libgd terminals
  * FIX incorrect colorbox axis labels in polar plots
  * FIX AquaTerm framework name is case-sensitive
  * FIX strip enhanced text markup from plot titles embedded in svg output
  * FIX error in retrieving matrix column headers as strings
  * FIX error in calculating absolute deviation (stats command)
  * FIX allocation error from "set fit covariancevariables"
  * FIX tkcanvas terminal handling of blank (default) font family name
  * FIX off-by-one-error in color of contours when hidden3d is active
  * FIX adjust WIN32 encoding used by text output from "pause" command
  * FIX qt terminal 3D rotation mode tendency to get stuck "on"
  * FIX dash pattern rendering in contour lines
  * FIX 'fit [][min:max] f(x)' was incorrectly ignoring min:max
- Rediff gnuplot-4.6.0.dif
- Add gnuplot-5.0.1-fix-latex-docs.diff to fix a regression of 5.0.1 in
  building the latex docs</changelog>
  <changelog author="werner@suse.de" date="1469534400">- Some more TexLive packages</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Update to 5.0.5
  * NEW allow filename completion for system commands and pipes (backport from 5.1)
  * NEW option to plot with labels {rotate variable}
  * NEW command "set minussign"
  * NEW stats command "name" option now accepts "columnheader" or "columnheader(N)"
  * NEW command option "set colorbox invert"
  * CHANGE qt terminal force selection of outline font rather than bitmap font
  * CHANGE post terminal simplex/duplex output depends on PostScript level setting
  * CHANGE improved autoscaling of plot "with boxes"
  * CHANGE qt terminal sets TERM_POLYGON_PIXELS to avoid aliasing artifacts
  * CHANGE all stats and fit commands skip header records if "autotitle columnhead"
  * FIX Do not confuse EOF with 8-bit character 0x177 (E.g. in Cyrillic encodings).
  * FIX use blank line rather than 'u' flag in "set table" output of smoothed data
  * FIX order dependence of "fillcolor" keyword in plot commands
  * FIX svg - better vertical justification of rotated text
  * FIX wxt - file export widget correctly handles inactive plots
  * FIX qt - preserve leading and trailing whitespace in enhanced text strings
  * FIX various bugs affecting matrix data plotted "with image"
- Remove the patches now upstream
  gnuplot-5.0.0-lua-5.3.1.dif
  gnuplot-5.0.1-fix-latex-docs.diff
- Port patches to current version
  gnuplot-4.4.0-x11ovf.dif
  gnuplot-4.6.0-demo.diff
  gnuplot-4.6.0.dif
  gnuplot-QtCore-PIC.dif
  gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1494417600">- Update to 5.0.6
  * NEW command 'set micro' enables encoding-specific char for gprintf %c format
  * NEW command 'set datafile missing NaN' treats invalid data as if it were
    missing
  * NEW backport updated svg/domterm terminal from development version
  * CHANGE - start/end limits in nested iterations are reevaluated dynamically
  * CHANGE - revised adjustment of x2label and plot title when x2tics are
    present
  * CHANGE - mark non-free pdf terminal DEPRECATED
    (to be removed in release 5.2)
  * CHANGE - allow fractional font sizes for gdlib terminals
  * CHANGE - do not allow inverted R axis
    (requires support not backported from 5.1)
  * CHANGE - allow pointinterval property in 'with lp' for splot as well as
    for plot
  * CHANGE - "linewidth &lt;lw&gt;" is accepted as a terminal option for aquaterm,
    qt, wxt
  * CHANGE - spline segments outside xrange are ignored rather than treated
    as errors
  * FIX wxt - multithreaded wxt was faulting during resize (mutex lock failure)
  * FIX windows - timed pause only worked for intervals &lt; 1 second
  * FIX Front/back layering of border+grid lines was not always correct in
    hidden3d
  * FIX "set pm3d depthorder interpolate N,M" memory allocation failure
  * FIX aquaterm failed to honor request to disable enhanced text markup
  * FIX save and show commands failed to list linecolor for lines with "lt -1"
  * FIX the "missing" data flag is honored by "using ($n)" as it is for "using n"
  * FIX error reporting of line number inside a bracketed clause
  * FIX gnuplot_x11: possible fix for sporadic use-after-free error
  * FIX initialization of hidden3d structures for splot with dots
  * FIX track arrowhead properties in hidden3d mode
  * FIX tracking of NaN values from function evaluated during binary data input
  * FIX 3D rotation does not clobber hidden/visible status of plots</changelog>
  <changelog author="werner@suse.de" date="1502884800">- Update to 5.0.7 (which does also close CVE-2017-9670 (bsc#1044638))
  * NEW set term {pngcairo|pdfcairo} pointscale &lt;factor&gt;
  * NEW "save fit" back-ported from version 5.2 as a replacement for "update"
  * NEW user-defined dashtypes in metapost terminal
  * CHANGE deprecate "update" command (but do not remove it)
  * CHANGE allow placement of circles in 3D plots using axis coordinates
  * CHANGE ignore invalid z coordinate for 3D objects placed in "set view map"
  * CHANGE distinguish 'bind "shift-Button1"' from 'bind "Button1"'
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * CHANGE allow range to include sampling interval in plots using pseudofile '+'
  * FIX rangelimited y2 axis could produce spurious diagonal line across plot
  * FIX assignment of x/y dimensions in "binary record=(a,b) ... with image"
  * FIX negative array index caused by hidden3d degenerate polygon
  * FIX object clipping in "set view map"
  * FIX cairo terminals: scale textbox border linewidth by terminal linewidth
  * FIX canvas terminal: initialization of plot dimensions (affects first zoom)
  * FIX crash in stats if no usable data is found
  * FIX do not use LaTeX formatting in tabular output
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check for empty image data structure on input
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX 2D images with logscale axes could fail (segfault)
  * FIX nested iteration containing an empty range
  * FIX allow 64-bit Cygwin build using gtk3 for wxt terminal</changelog>
  <changelog author="werner@suse.de" date="1506513600">- Update to gnuplot 5.2.0
  * NEW user-defined dashtypes in metapost terminal
  * NEW datablock contents may be accessed as an indexed array of strings
  * CHANGE allow explicit sample interval for u and v using pseudofile '++'
  * CHANGE decouple cbrange from color components in "with rgbimage"
  * FIX reconcile aspect ratio flags from "set view map" and "set view equal xy"
  * FIX "set key fixed" should be ignored in the case of "set view map"
  * FIX GPVAL_* variables were not being updated in "set table" mode
  * FIX evaluation of nested iteration containing an empty range
  * FIX bug in variant time_spec formats %tH %tM (undesired wrapping)
  * NEW "plot with table" can handle string-valued output columns
  * CHANGE add caca terminal documentation to the user manual
  * CHANGE revised output of "test" command
  * CHANGE use Mingw-w64 and MSVC popen rather than built-in "fake" popen
  * FIX copy environmental variable GNUTERM to internal variable on entry
  * FIX more consistent handling of plot 'with table'
  * FIX incorrect, possibly empty, command string was saved for previous fit
  * FIX ignore non-numeric values of potential dummy params used by "fit"
  * FIX autoscaling during refresh of volatile data plots "with vectors"
  * FIX terminal initialization must be done before executing ~/.gnuplot
  * FIX do not use LaTeX formatting in tabular output
  * FIX polar border should not be clipped to rectangular border
  * FIX raxis was truncated at R=0 if the axis direction was inverted
  * FIX sanity check to catch "plot '+' binary"
  * FIX sanity check for NULL format passed to gprintf
  * FIX sanity check inverse mapping function of set link and set nonlinear
  * FIX sanity check for empty image data structure
  * FIX segfault from corruption of timestamp text
  * FIX several unitialized variables (see Bug 1933)
  * FIX dumb term: linetype character distinction was lost if not in color mode
  * CHANGE svg terminal option "fontscale" replaces obsolete "fsize"
  * NEW plot styles
  * NEW    splot ... using &lt;x&gt;:&lt;y&gt;:&lt;z&gt;:&lt;zlow&gt;:&lt;zhigh&gt; with zerrorfill
  * NEW    "set jitter" allows creation of bee swarm plots
  * NEW    data filter "bins" sorts input into equal width bins on x
  * NEW    "with points" and "with linespoints" accept `pointtype variable`
  * NEW    hidden3d now treats 'image' and 'rgbimage' as occluding rectangles
  * NEW    "smooth fnormal" normalized frequency
  * NEW polar mode improvements and extensions
  * NEW    "set [m]ttics" places labels around perimeter of polar grid
  * NEW    "set rlabel" places a label above the r axis
  * NEW    "set rrange [90:0]" plots in celestial horizontal coordinates
  * NEW    "set border polar" uses border linetype for perimeter of polar plot
  * NEW    "set theta &lt;origin&gt; &lt;sense&gt;" orientation of polar coordinate theta
  * NEW    label, arrow, and object positions may be given in polar coordinates
  * NEW nonlinear coordinate systems
  * NEW    "set nonlinear &lt;axis&gt; via f(axis) inverse g(axis)"
  * NEW    "set log" re-implemented as special case of "set nonlinear"
  * NEW data type array[size]
  * NEW commands and command options
  * NEW    "break" exits from iteration loop
  * NEW    "continue" begins next iteration immediately
  * NEW    "toggle {&lt;plotno&gt; | "plottitle" | all}"
  * NEW    "set pm3d lighting" specifies lighting model with specular highlighting
  * NEW    "set table OUTFILE {append}"
  * NEW    "set minussign" and "set micro" (first appeared in 5.0.5)
  * NEW    "set view azimuth &lt;angle&gt;" controls azimuth of the z axis in 3D plots
  * NEW    "save fit &lt;filename&gt;" replaces deprecated command "update"
  * NEW terminals and terminal options
  * NEW    terminal domterm (supports in-line SVG in DomTerm terminal emulator)
  * NEW    terminal sixelgd (sixel terminal graphics using gdlib)
  * NEW    svg 'standalone' embeds images rather than including by reference
  * NEW    windows terminal supports saving graph as bitmap
  * NEW    windows graph windows can be docked to the wgnuplot text window
  * NEW    windows terminal Direct2D driver rather than GDI/GDI+ where possible
  * NEW    wxt supports saving graph as EMF on Windows
  * NEW    wxt supports printing on Windows
  * NEW    dumb suports ANSI colors and filled polygons
  * NEW Optional sampling interval in range specifiers for pseudofiles '+' '++'
  * NEW gnuplot on Windows
  * converts Unicode (BMP) input to current `set encoding`, including UTF-8
  * is system DPI aware
  * NEW textbox style supports fillcolor and bordercolor
  * CHANGE point style associated with "plot with labels" is shown in the key
  * CHANGE Revise placement of axis labels in 3D plots
  * CHANGE Timestamp is now placed relative to page rather than plot boundary
  * CHANGE Track font/enhanced for key title separately from the key entries
  * CHANGE order of margins in `set margins &lt;left&gt;, &lt;right&gt;, &lt;bottom&gt;, &lt;top&gt;`
  * CHANGE Store and reuse x,y dimensions from the time image data is read in
  * CHANGE Some STATS_* variables are of type integer rather than real (complex)
  * CHANGE ^R starts a backward search when using the built-in readline
  * CHANGE Only update axis-&gt;data_min/max if the point being stored is INRANGE
  * CHANGE auto-generation of minitics on logscale axis has changed
  * CHANGE revised printing dialogs on Windows
  * CHANGE preserve whitespace following opening { in enhanced text strings
  * CHANGE windows terminal provides better oversampling
  * CHANGE New default "set key fixed" prevents 3D key box from rotating with plot
  * CHANGE Deprecate pdf terminal requiring non-free library PDFlib
  * CHANGE windows terminal also uses GDI+ for printing and copy-to-clipboard
  * CHANGE raxis/polar grid can coexist with cartesian axes
  * CHANGE evaluation of norm(x) or x**y returns 0 on floating underflow
  * CHANGE support for space-in-x11-raises-KDE3-konsole is now a configure option
  * CHANGE don't use loadpath to choose output directory for "save"
  * CHANGE GNUTERM may contain terminal options in addition to bare terminal name
  * CHANGE remove legacy terminals corel and dxf from default build
  * FIX cairo.trm - reset terminal font after printing an enhanced text string
  * FIX autoscaling of data with "smooth cnorm"
  * FIX Built-in readline handles S-JIS encoding
  * FIX Output to printer on Windows via special file "PRN"</changelog>
  <changelog author="werner@suse.de" date="1506686400">- Add patch gnuplot-5.2.0-texi2info.patch as source to be avble
  to patch the resulting gnuplot.texi
- Modify patches
  * gnuplot-4.4.0-x11ovf.dif
  * gnuplot-4.6.0-demo.diff
  * gnuplot-4.6.0-fonts.diff
  * gnuplot-4.6.0.dif
  * gnuplot-QtCore-PIC.dif
  * gnuplot-wx3.diff</changelog>
  <changelog author="nico.kruber@gmail.com" date="1510142400">- Update to gnuplot 5.2.1
  * NEW set table separator {tab|comma|"char"} allows creation of csv files
  * NEW hotkey for changing azimuth in 3D plots with mousing
  * NEW titles for "splot .. with lines" can be placed at {beg|end} of plotted line
  * NEW Rework gstrptime() to handle relative time formats tH tM tS
  * NEW command 'set rgbmax &lt;value&gt;' controls interpretation of input RGB values
  * CHANGE restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * CHANGE allow mixed use of in-key plot titles and manually placed titles
  * FIX autoscaling of plots with spline or bezier smoothing
  * FIX autoscaling of plots with linked axes where data is plotted on x2 or y2
  * FIX "with filledcurves below y=foo" mishandled the case of y value exactly = foo
  * FIX [windows] repair breakage of stderr/stdout redirection to console
  * FIX postscript terminal artifacts when drawing dot/dash circles
  * FIX handle empty range on logscale y axis as a warning, not an error</changelog>
  <changelog author="werner@suse.de" date="1510833600">- Update to gnuplot 5.2.2
  * NEW splot ... with lines title at {beg|end}
  * FIX allow mixed use of in-key plot titles and manually placed titles
  * FIX prevent runaway iterations of the form   plot for [i=start:*] ...
  * FIX handle in-line range limits for linked or nonlinear axes
  * FIX restore pre-5.2 interpretation of logscaled tic increment as a multiplier
  * FIX logscale tic placement is closer to that of versions before 5.2.0
  * FIX recheck inrange/outrange points after spline or bezier smoothing
  * FIX sampling on x2 if linked to x1;  e.g. plot sample [t=1:5:1] '+' axes x2y1
  * FIX empty range on logscale y axis is handled by auto-extending the range
  * FIX autoscaling xrange of stacked histograms
- Add now missed TEXDIR at configure time which now includes also
  the sub path tex/latex/gnuplot/ below /usr/share/texmf/ (could
  become removed with some of the next version updates?)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518436800">- Do not use xorg-x11-* as buildrequires
- Fix broken GD libs detection (gnuplot-gd.patch)
- Remove unneeded buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Do not miss gpic and mif
- Even if pulled by other packages do explicite require for the build
  * pkgconfig(freetype2)
  * pkgconfig(libjpeg)
  * pkgconfig(libpng16)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1543406400">- Add patch gnuplot-e3cc539c.patch from upstream commit e3cc539c
  Fix the bugs boo#1117463 (CVE-2018-19492), boo#1117464 (CVE-2018-19491),
  and boo#1117465 (CVE-2018-19490)</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1613044800">- Add patch 052cbd17.patch and 1f36c4fb.patch
  * Fix boo#1176689:
    VUL-0: CVE-2020-25559: gnuplot: double free when executing print_set_output</changelog>
</package>
<package pkgid="fffa44c2e2462c3a088936c5d9afe7cac94f466ed8b8c09d6c57a6be4755631f" name="gnutls-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="326cdf80a75909c7a9f59c5de87ffab580008edf8c192d7ed953da70385c0ab1" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="ac343106c717d8ebff9a4a185a612c26928c5e6566a72219b14200ff2bf7623f" name="gnutls-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="003edc92342c83b160fc9fe4ee6bbd166e98ed1388fa8756885bc6bbe5e025bc" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="7fd5579f63e42ab8efd41b86399aa3a3303a12087dfbe525cebb7c37fb8433a3" name="gnutls-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="29c7e5e10a0cd74e5ed73c6cbb10a3446a8e1af8870b47d15ef4c556b7fb05e6" name="gnutls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="bfccaca1c74979d0a5faf35cad4ab72beaaf13a2c210c2452e5fe89c8fb756ba" name="gnutls-debugsource" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="23a95cbabb1b1e85ee9571dd99dd7a7e995dd968227a7b9da581c99e35396348" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="62f789e908425a5ea6aab4d8e4b2506dacd226e52f30e9de71874812b87d2964" name="gnutls-debugsource" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="ae02eb0c0667157b32222d0de7a2ab36a41f539e7d2f26453788f917b3cb9faf" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="633f94c32657a3a55500822ae0492ee9bbad36d19277de9e7d049a41ba8316c8" name="gnutls-debugsource" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="e149a73027db879ceb6632f2e615c0a31f793f02832f5d1491f39b536c52e145" name="gnutls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="37997353bca89ecb80c87b26de0e61b16a7b9ab0f10666f79b784f393f94ce69" name="gnutls-guile-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="3507723fa9c6421cf7e42a9518e0ac93a1ca1e1b58990c0d204bd40a9a2863f8" name="gnutls-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.3.2"/>
  <changelog author="jengelh@inai.de" date="1522065600">- Adjust RPM groups. Drop %if..%endif guards that are idempotent.</changelog>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
</package>
<package pkgid="c654c79579bbf9211413817eb009a01c6961266d646d324bae81605248c6360a" name="gnutls-guile-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="cceefaa198ac1812dac0a478c8e034fccc446956f68fcfece2ccb4dab557d7ca" name="gnutls-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.6.1"/>
  <changelog author="vcizek@suse.com" date="1522324800">- Simplify the DANE support %ifdef condition
  * build with DANE on openSUSE only</changelog>
  <changelog author="vcizek@suse.com" date="1535976000">- Security update
  Improve mitigations against Lucky 13 class of attacks
  * "Just in Time" PRIME + PROBE cache-based side channel attack
    can lead to plaintext recovery (CVE-2018-10846, bsc#1105460)
  * HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of
    wrong constant (CVE-2018-10845, bsc#1105459)
  * HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not
    enough dummy function calls (CVE-2018-10844, bsc#1105437)
  * add patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
</package>
<package pkgid="57a5306b6ab43429a3b675c7a41376154f733f2572d9d15378f3068f35ef3310" name="gnutls-guile-debuginfo" arch="i586">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="fba77bd6175c075455a7d264e404cdbee145c3688988bb07f3ee9acf55b92d8c" name="gnutls-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp152.9.9.1"/>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1553083200">- FATE#327114 - Update gnutls to 3.6.6 to support TLS 1.3
  * * libgnutls: gnutls_pubkey_import_ecc_raw() was fixed to set the number bits
    on the public key (#640).
  * * libgnutls: Added support for raw public-key authentication as defined in RFC7250.
    Raw public-keys can be negotiated by enabling the corresponding certificate
    types via the priority strings. The raw public-key mechanism must be explicitly
    enabled via the GNUTLS_ENABLE_RAWPK init flag (#26, #280).
  * * libgnutls: When on server or client side we are sending no extensions we do
    not set an empty extensions field but we rather remove that field competely.
    This solves a regression since 3.5.x and improves compatibility of the server
    side with certain clients.
  * * libgnutls: We no longer mark RSA keys in PKCS#11 tokens as RSA-PSS capable if
    the CKA_SIGN is not set (#667).
  * * libgnutls: The priority string option %NO_EXTENSIONS was improved to completely
    disable extensions at all cases, while providing a functional session. This
    also implies that when specified, TLS1.3 is disabled.
  * * libgnutls: GNUTLS_X509_NO_WELL_DEFINED_EXPIRATION was marked as deprecated.
    The previous definition was non-functional (#609).
  * Removed patches:
    0001-dummy_wait-correctly-account-the-length-field-in-SHA.patch
    0002-dummy_wait-always-hash-the-same-amount-of-blocks-tha.patch
    0003-cbc_mac_verify-require-minimum-padding-under-SSL3.0.patch
    0004-hmac-sha384-and-sha256-ciphersuites-were-removed-fro.patch
  * Added Patches:
  * * disable failing psk-file test (race condition):
    disable-psk-file-test.patch
  * * Patch configure script to accept specific versions of autotools and guile
    that are present in SUSE-SLE15. (A bug prevents configure from accepting
    a range of compatible versions. Upstream's solution is to hardwire for
    the most current versions.)
    gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  * Modified:
  * * gnutls-3.6.0-disable-flaky-dtls_resume-test.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1554206400">- Update gnutls to 3.6.7
  * * libgnutls, gnutls tools: Every gnutls_free() will automatically set
    the free'd pointer to NULL. This prevents possible use-after-free and
    double free issues. Use-after-free will be turned into NULL dereference.
    The counter-measure does not extend to applications using gnutls_free().
  * * libgnutls: Fixed a memory corruption (double free) vulnerability in the
    certificate verification API. Reported by Tavis Ormandy; addressed with
    the change above. [GNUTLS-SA-2019-03-27, #694] [bsc#1130681] (CVE-2019-3829)
  * * libgnutls: Fixed an invalid pointer access via malformed TLS1.3 async messages;
    Found using tlsfuzzer. [GNUTLS-SA-2019-03-27, #704] [bsc#1130682] (CVE-2019-3836)
  * * libgnutls: enforce key usage limitations on certificates more actively.
    Previously we would enforce it for TLS1.2 protocol, now we enforce it
    even when TLS1.3 is negotiated, or on client certificates as well. When
    an inappropriate for TLS1.3 certificate is seen on the credentials structure
    GnuTLS will disable TLS1.3 support for that session (#690).
  * * libgnutls: the default number of tickets sent under TLS 1.3 was increased to
    two. This makes it easier for clients which perform multiple connections
    to the server to use the tickets sent by a default server.
  * * libgnutls: enforce the equality of the two signature parameters fields in
    a certificate. We were already enforcing the signature algorithm, but there
    was a bug in parameter checking code.
  * * libgnutls: fixed issue preventing sending and receiving from different
    threads when false start was enabled (#713).
  * * libgnutls: the flag GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO now implies a writable
    session, as non-writeable security officer sessions are undefined in PKCS#11
    (#721).
  * * libgnutls: no longer send downgrade sentinel in TLS 1.3.
    Previously the sentinel value was embedded to early in version
    negotiation and was sent even on TLS 1.3. It is now sent only when
    TLS 1.2 or earlier is negotiated (#689).
  * * gnutls-cli: Added option --logfile to redirect informational messages output.
- Disabled dane support since dane is not shipped with SLE-15
- Changed configure script to hardware guile site directory since command-line
  option '--with-guile-site-dir=' was removed from the configure script in 3.6.7.
  * * Modified gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
- Modified gnutls-3.6.0-disable-flaky-dtls_resume-test.patch to fix
  compilation issues on PPC
- Fixed Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification
  and padding oracle verification (in 3.6.5) [bsc#1118087] (CVE-2018-16868)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.de&gt;" date="1555416000">- Restored autoreconf in build.
- Removed gnutls-3.6.6-SUSE_SLE15_congruent_version_requirements.patch
  since the version requirements of required libraries are once again
  automatically determined.
- Added gnutls-3.6.7-SUSE_SLE15_guile_site_directory.patch because it is a
  better patch name for handling the '--with-guile-site-dir=' problem in
  3.6.7.</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1558008000">- Explicitly require libnettle 3.4.1 (bsc#1134856)
  * The RSA decryption code was rewritten in GnuTLS 3.6.5 in order
    to fix CVE-2018-16868, the new implementation makes use of a new
    rsa_sec_decrypt() function introduced in libnettle 3.4.1
  * libnettle was recently updated to the 3.4.1 version but we need
    to add explicit dependency on it to prevent missing symbol errors
    with the older versions</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1569326400">- Install checksums for binary integrity verification which are
  required when running in FIPS mode (bsc#1152692, jsc#SLE-9518)</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964800">- bsc#1155327 jira#SLE-9518 - FIPS: add DH key test
  * Added Diffie Hellman public key verification test.
  * gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="Jason Sikes &lt;jsikes@suse.com&gt;" date="1584964801">- bsc#1166881 - FIPS: gnutls: cfb8 decryption issue
  * No longer truncate output IV if input is shorter than block size.
  * Added gnutls-3.6.7-fips-backport_dont_truncate_output_IV.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585569600">- Split off FIPS checksums into a separate libgnutls30-hmac
  subpackage (bsc#1152692)
  * update baselibs.conf</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1585828800">- Fix zero random value in DTLS client hello
  (CVE-2020-11501, bsc#1168345)
  * add gnutls-CVE-2020-11501.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1586260800">- Backport AES XTS support (bsc#1168835)
  * add 0001-Vendor-in-XTS-functionality-from-Nettle.patch
  * add gnutls-fips_XTS_key_check.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1587470400">- Don't check for /etc/system-fips which we don't have (bsc#1169992)
  * add gnutls-fips_mode_enabled.patch</changelog>
  <changelog author="Alexander Bergmann &lt;abergmann@suse.com&gt;" date="1589198400">- Add RSA 4096 key generation support in FIPS mode (bsc#1171422)
  * add gnutls-3.6.7-fips-rsa-4096.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1591272000">- GNUTLS-SA-2020-06-03 (Fixed insecure session ticket key construction)
  The TLS server would not bind the session ticket encryption key with a
  value supplied by the application until the initial key rotation, allowing
  attacker to bypass authentication in TLS 1.3 and recover previous
  conversations in TLS 1.2 (#1011). (bsc#1172506, CVE-2020-13777)
  * add patches:
    + gnutls-CVE-2020-13777.patch
- Fixed handling of certificate chain with cross-signed intermediate
  CA certificates (#1008). (bsc#1172461)
  * add patches:
    +  0001-_gnutls_verify_crt_status-apply-algorithm-checks-to-.patch
    +  0002-_gnutls_pkcs11_verify_crt_status-check-validity-agai.patch
    +  0003-x509-trigger-fallback-verification-path-when-cert-is.patch
    +  0004-tests-add-test-case-for-certificate-chain-supersedin.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084800">- FIPS: Implement (EC)DH requirements from SP800-56Arev3 (bsc#1176086)
- add patches
  * 0001-Add-Full-Public-Key-Check-for-DH.patch
  * 0001-Add-test-to-ensure-DH-exchange-behaves-correctly.patch
  * 0002-Add-test-to-ensure-ECDH-exchange-behaves-correctly.patch
  * 0003-Add-plumbing-to-handle-Q-parameter-in-DH-exchanges.patch
  * 0004-Always-pass-in-and-check-Q-in-TLS-1.3.patch
  * 0005-Check-Q-for-FFDHE-primes-in-prime-check.patch
  * 0006-Pass-down-Q-for-FFDHE-in-al-pre-TLS1.3-as-well.patch
  * 0001-dh-primes-add-MODP-primes-from-RFC-3526.patch
  * 0002-dhe-check-if-DH-params-in-SKE-match-the-FIPS-approve.patch
  * 0001-dh-check-validity-of-Z-before-export.patch
  * 0002-ecdh-check-validity-of-P-before-export.patch
  * 0003-dh-primes-make-the-FIPS-approved-check-return-Q-valu.patch
  * 0004-dh-perform-SP800-56A-rev3-full-pubkey-validation-on-.patch
  * 0005-ecdh-perform-SP800-56A-rev3-full-pubkey-validation-o.patch
- drop obsolete gnutls-3.6.7-fips_DH_ECDH_key_tests.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600084801">- Fix heap buffer overflow in handshake with no_renegotiation alert sent
  * CVE-2020-24659 (bsc#1176181)
- add gnutls-CVE-2020-24659.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600344000">- FIPS: Add TLS KDF selftest (bsc#1176671)
  * add gnutls-FIPS-TLS_KDF_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1600430400">- FIPS: Use 2048 bit prime in DH selftest (bsc#1176086)
  * add gnutls-FIPS-use_2048_bit_prime_in_DH_selftest.patch</changelog>
  <changelog author="V&#xED;t?zslav ?&#xED;?ek &lt;vcizek@suse.com&gt;" date="1605873600">- Avoid spurious audit messages about incompatible signature algorithms
  (bsc#1172695)
  * add 0001-pubkey-avoid-spurious-audit-messages-from-_gnutls_pu.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809600">- Security fix: [bsc#1183457, CVE-2021-20231]
  * A use after free issue in client sending key_share extension
    may lead to memory corruption and other consequences.
- Add gnutls-CVE-2021-20231.patch</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1615809601">- Security fix: [bsc#1183456, CVE-2021-20232]
  * A use after free issue in client_send_params
    in lib/ext/pre_shared_key.c may lead to memory
    corruption and other potential consequences.
- Add gnutls-CVE-2021-20232.patch</changelog>
</package>
<package pkgid="66509425251b621514b32a08e7fc5451863fe7a7cc5ff92563b9d410c9b1d86a" name="google-compute-engine-debugsource" arch="i586">
  <version epoch="0" ver="20190801" rel="lp152.5.4.1"/>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add gcei-waitlimit-dns.patch (bsc#1151398)
  + Add a wait limit to retrying DNS resolution to avoid a forever loop</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1586347200">- Rename the sysctl file that applies the GCE network settings (bsc#1167810)
  + The file 11-gce-network-security.conf applies network configuration
    settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
    part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
    the default setting was applied, instead of the desired setting. As
    50-default is processed after 11-gce-network-security.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1588075200">- Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592654400">- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)</changelog>
</package>
<package pkgid="1ff1abdf552b9a2d12f66782282f4c3d11a1ac5a02d7353750064fef1c599ac5" name="google-compute-engine-debugsource" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp152.5.4.1"/>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add gcei-waitlimit-dns.patch (bsc#1151398)
  + Add a wait limit to retrying DNS resolution to avoid a forever loop</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1586347200">- Rename the sysctl file that applies the GCE network settings (bsc#1167810)
  + The file 11-gce-network-security.conf applies network configuration
    settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
    part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
    the default setting was applied, instead of the desired setting. As
    50-default is processed after 11-gce-network-security.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1588075200">- Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592654400">- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)</changelog>
</package>
<package pkgid="62288368dd8a1b82708b5cff426d8f15ee85133700cb623e92d9084524873414" name="google-compute-engine-oslogin-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp152.5.4.1"/>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add gcei-waitlimit-dns.patch (bsc#1151398)
  + Add a wait limit to retrying DNS resolution to avoid a forever loop</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1586347200">- Rename the sysctl file that applies the GCE network settings (bsc#1167810)
  + The file 11-gce-network-security.conf applies network configuration
    settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
    part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
    the default setting was applied, instead of the desired setting. As
    50-default is processed after 11-gce-network-security.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1588075200">- Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592654400">- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)</changelog>
</package>
<package pkgid="0d2346579b5d6630de0cc2adb17ed5210a33129ec7f00a07b112b04b1cfbb1b1" name="google-compute-engine-oslogin-debuginfo" arch="i586">
  <version epoch="0" ver="20190801" rel="lp152.5.4.1"/>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add gcei-waitlimit-dns.patch (bsc#1151398)
  + Add a wait limit to retrying DNS resolution to avoid a forever loop</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1586347200">- Rename the sysctl file that applies the GCE network settings (bsc#1167810)
  + The file 11-gce-network-security.conf applies network configuration
    settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
    part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
    the default setting was applied, instead of the desired setting. As
    50-default is processed after 11-gce-network-security.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1588075200">- Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592654400">- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)</changelog>
</package>
<package pkgid="8f1912d59f75095434f3369a0cfae262ffb246c800d373740567f802107c8a3d" name="google-compute-engine-oslogin-debuginfo" arch="x86_64">
  <version epoch="0" ver="20190801" rel="lp152.5.4.1"/>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1539345600">- Update to version 20181011
  + Google Compute Engine
  * Revert: Remove users from sudoers group on account removal.
- from version 20181008
  + Google Compute Engine
  * Remove users from sudoers group on account removal.
  * Remove gsutil dependency for metadata scripts.
- from version 20180905
  + Google Compute Engine
  * Remove ntp package dependency.
  * Support Debian 10 Buster.
  * Restart the network daemon if networking is restarted.
  * Prevent setup of the default ethernet interface.
  * Accounts daemon verifies username is 32 characters or less.
  + Google Compute Engine OS Login
  * Add user name validation to pam modules.
  * Return false on failed final load.
  * Support FreeBSD.
  * Support Debian 10 Buster.
- from version 20180611
  + Google Compute Engine
  * Prevent IP forwarding daemon log spam.
  * Make default shell configurable when executing metadata scripts.
  * Rename distro directory to distro_lib.
- Refresh patches for new version
  + gcei-set-run_dir.patch</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1543147200">- Remove conditions for distributions older than Leap 42.3 and SLE 12
  + Delete init scripts google-accounts-daemon.suse,
    google-clock-skew-daemon.suse, google-instance-setup.suse,
    google-network-daemon.suse, google-shutdown-scripts.suse,
    google-startup-scripts.suse
- Fix build for distributions with gcc version less than 4.9
  + Add new dependency on boost</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1544529600">- Update to version 20181206 (bsc#1119029, bsc#1119110)
  + Google Compute Engine
  * Support enabling OS Login two factor authentication.
  * Improve accounts support for FreeBSD.
  + Google Compute Engine OS Login
  * Support OS Login two factor authentication (Alpha).
  * Improve SELinux support.
- from version 20181023
  + Google Compute Engine
  * Fix: Update sudoer group membership without overriding local groups.
- from version 20181018
  + Google Compute Engine
  * Fix: Remove users from sudoers group on account removal.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1548072000">- Remove dropped service from systemd setup macros (bsc#1122172)
- Drop use of restart_on_update, force service restart with  -f option
  on service_del_preun and service_del_postun
- Detect and handle removed services in pre rather than post</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1548849600">- Update to version 20190124 (bsc#1123671, bsc#1123672)
  + Google Compute Engine
  * Fix metadata script retrieval to support Python 3.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558008000">- Update to version 20190416 (bsc#1128392, bsc#1134179)
  + Google Compute Engine
  * FreeBSD fixes: syslog socket location and OS detection.
  * Upstart systems: only run startup scripts at boot.
  + Google Compute Engine OS Login
  * Fix pam_group ordering detection.
  * Restart cron from the OS Login control file.
  * Add PAM entry to su:account stack.
- from version 20190315
  + Google Compute Engine OS Login
  * Fix alternate challenge section for two factor authentication.
  * Fix FreeBSD compatibility issues in the control file.
- from version 20190304
  + Google Compute Engine
  * Set oom_score_adjust for google_accounts_daemon.
  + Google Compute Engine OS Login
  * Use pam_group to provide users with default groups.
  * Add compat.h to support FreeBSD.
  * Exit immediately after a two factor authentication failure.
  * Add support for Google phone prompt challenges.
- Adjust paths for new upstream directory layout in %build and %install
- Include systemd service file to run google_optimize_local_ssd command
  + google-optimize-local-ssd.service
- Include systemd service file to run google_set_multiqueue command
  + google-set-multiqueue.service
- Install journald configuration files into /usr/lib/systemd/journald.conf.d
- Refresh patches for new version
  + gcei-hide-py-deps.patch
  + gcei-scripts-after-reg.patch
  + gcei-set-run_dir.patch</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1558958400">- Update to version 20190522 (bsc#1136266, bsc#1136267)
  + Google Compute Engine
  * Fix guest attributes flow in Python 3.
  + Google Compute Engine OS Login
  * Update OS Login control file for FreeBSD support.
- from version 20190521
  + Google Compute Engine
  * Retry download for metadata scripts.
  * Fix script retrieval in Python 3.
  * Disable boto config in Python 3.
  * Update SSH host keys in guest attributes.
  * Fix XPS settings with more than 64 vCPUs.</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565006400">- Update to version 20190801 (bsc#1144092, bsc#1144170)
  + Google Compute Engine
  * Re-enable boto config without plugin.
  * Fix metadata script retrieval for python 2 and 3.
  + Google Compute Engine OS Login
  * Fix for 2FA on RHEL 8.
- from version 20190730
  + Google Compute Engine
  * Support for Debian 10.
  * New package versioning.
  * Support for Google Private Access over IPv6.
  * Support root disk expansion in RHEL 8 and Debian 10.
  + Google Compute Engine OS Login
  * Bug fixes for sudoers.
  * Initial groups support (not yet enabled).
- Add patch to explicitly link NSS and PAM shared
  libraries against libboost_regex on SLE-12
  + gcei-link-boost_regex.patch
- Refresh patches for new version
  + gcei-scripts-after-reg.patch
- Set StandardOutput=journal+console in custom systemd service files
  + google-optimize-local-ssd.service
  + google-set-multiqueue.service
- Stop installing configuration file for systemd-journald
  + Logging is now configured through systemd service files
- Update file matching patterns in %files section for new version</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1565092800">- Add patch to normalize setup version of Python code
  + gcei-normalize-python-version.patch
- Fix file matching patterns in %files section for oslogin package</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1566302400">- Fix install location of NSS and PAM shared libraries (bsc#1146172)
- Switch RPM group for oslogin package from Hardware to System/Daemons</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568203200">- Add gcei_disableipv6.patch (bsc#1150058)
  + Upstream introduced an interface named "DisableIpv6" but the
    implementation was incomplete and the interface was missing for SUSE
    distros</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1568721600">- Fix file list
  + On i586 Python code is also under _libdir thus creating a conflict between
    the packages.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1571745600">- Add gcei-waitlimit-dns.patch (bsc#1151398)
  + Add a wait limit to retrying DNS resolution to avoid a forever loop</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1586347200">- Rename the sysctl file that applies the GCE network settings (bsc#1167810)
  + The file 11-gce-network-security.conf applies network configuration
    settings. Specifically the value for net.ipv4.conf.all.rp_filter is also
    part of the system defaults in /usr/lib/sysctl.d/50-default.conf and thus
    the default setting was applied, instead of the desired setting. As
    50-default is processed after 11-gce-network-security.</changelog>
  <changelog author="Robert Schweikert &lt;rjschwei@suse.com&gt;" date="1588075200">- Add gceosl-no-def-sysgrps.patch (bsc#1170719, bsc#1170720)
  + Do not add the created user to the adm (CVE-2020-8903),
    docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups
    if they exist (bsc#1173258)</changelog>
  <changelog author="John Paul Adrian Glaubitz &lt;adrian.glaubitz@suse.com&gt;" date="1592654400">- Don't enable and start google-network-daemon.service when it's
  already installed (bsc#1169978)</changelog>
</package>
<package pkgid="936923d159efe8fa6913ada66bb59912ad204abf74e20a525a1a5ab912c42537" name="gpgme-debuginfo" arch="i586">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="5c494e1dd1e0b31fcee2d1d1e105519ab65d78bbd70ba5f94fdc5dfb1b7ff587" name="gpgme-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="287e172fa6d69f640a8366570f3f1a6bc6d0fc9e0e2da98f7d60c4c78228167d" name="gpgme-debugsource" arch="i586">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="d7ed0b42b5aae0d6191ab19bf0ca5238426fce1e339e0e3786906c242b96380a" name="gpgme-debugsource" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="b019f7903b094c867af7580343cc6630b6654ba9a6856c3fd3cdb89bcc455307" name="gpgmeqt-debugsource" arch="i586">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="99f236f2c415da644da6860b870ac9682207d80559205da5707bfc04912cc3aa" name="gpgmeqt-debugsource" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="lp152.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1479816000">- Add remove-a-forgotten-instance-of-libsuffix.diff: fix CMake
  files for gpgmepp (or they won't work with KDE software)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1486468800">- gpgme-include_functional.patch: include &lt;functional&gt; where
  needed, fix GCC7 build</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Do not condition around the qt version as it breaks baselibs validator</changelog>
  <changelog author="jengelh@inai.de" date="1486987201">- Fix RPM groups</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Unconditionalize python and python3 builds
- Unconditionalize c++ build</changelog>
  <changelog author="lbeltrame@kde.org" date="1490270400">- Re-conditionalize python builds, to allow gpgme to build on
  Leap 42.3 (python tests fail with an older gpg, see
  gpg issue 3008)
- Enable Qt build also on Leap 42.3 (needed for KDE PIM)</changelog>
  <changelog author="astieger@suse.com" date="1490702400">- gpgme 1.9.0:
  * Clarified meaning of the 'expire' parameter of gpgme_op_createkey
  and gpgme_op_createsubkey.  New flag to force a key without an
  expiration date.
  * New function gpgme_op_keylist_from_data_start to list keys from
  data objects without importing them.
  * New function gpgme_op_set_uid_flag to flag a key as primary.
  * New function gpgme_op_decrypt_ext to run decryption with special
  flags.  This can for example be used to unwrap keys (remove only
  the encryption layer).
  * New encryption flags to wrap a key (adding an encryption layer to
  an OpenPGP message) or to create anonymously encrypted messages.
  * Support for adduid and revuid operations in the C++ bindings.
  * Support for smartcard key generation in the C++ bindings.
  * Several new functions for the Python binding.
  * Many smaller bug fixes.
  * Interface changes relative to the 1.8.0 release:
  gpgme_op_createkey          CHANGED: Meaning of 'expire' parameter.
  gpgme_op_createsubkey       CHANGED: Meaning of 'expire' parameter.
  GPGME_CREATE_NOEXPIRE       NEW.
  gpgme_key_t                 EXTENDED: New field 'origin'.
  gpgme_key_t                 EXTENDED: New field 'last_update'.
  gpgme_subkey_t              EXTENDED: New field 'is_de_vs'.
  gpgme_user_id_t             EXTENDED: New field 'origin'.
  gpgme_user_id_t             EXTENDED: New field 'last_update'.
  gpgme_op_keylist_from_data_start NEW.
  gpgme_op_set_uid_flag_start      NEW.
  gpgme_op_set_uid_flag            NEW.
  gpgme_op_decrypt_ext_start       NEW.
  gpgme_op_decrypt_ext             NEW.
  GPGME_ENCRYPT_THROW_KEYIDS       NEW.
  GPGME_ENCRYPT_WRAP               NEW.
  GPGME_DECRYPT_VERIFY             NEW.
  GPGME_DECRYPT_UNWRAP             NEW.
  gpgme_data_rewind                UN-DEPRECATE.
  cpp: Context::revUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startRevUid(const Key&amp;, const char*) NEW.
  cpp: Context::addUid(const Key&amp;, const char*)      NEW.
  cpp: Context::startAddUid(const Key&amp;, const char*) NEW.
  cpp: Key::UserID::revoke()                         NEW.
  cpp: Key::addUid()                                 NEW.
  cpp: Key::isDeVs                                   NEW.
  cpp: GpgGenCardKeyInteractor                       NEW.
  cpp: Subkey::keyGrip                               NEW.
  cpp: Subkey::isDeVs                                NEW.
  cpp: Data::toKeys                                  NEW.
  cpp: Context::setDecryptFlags                      NEW.
  cpp: Context::decrypt                         EXTENDED: Flags added.
  cpp: Context::startDecrypt                    EXTENDED: Flags added.
  cpp: Context::decryptAndVerify                EXTENDED: Flags added.
  cpp: Context::startCombinedDecryptionAndVerification EXTENDED: Flags.
  cpp: Context::encryptFlags                    EXTENDED: New flags.
  qt: CryptoConfig::stringValueList()                NEW.
  py: Context.__init__        EXTENDED: New keyword arg home_dir.
  py: Context.home_dir        NEW.
  py: Context.keylist         EXTENDED: New keyword arg mode.
  py: Context.keylist         EXTENDED: New keyword arg source.
  py: Context.create_key      NEW.
  py: Context.create_subkey   NEW.
  py: Context.key_add_uid     NEW.
  py: Context.key_revoke_uid  NEW.
  py: Context.key_sign        NEW.
  py: Context.key_tofu_policy NEW.
  py: core.pubkey_algo_string NEW.
  py: core.addrspec_from_uid  NEW.
- drop upstreamed patches:
  * gpgme-include_functional.patch
  * remove-a-forgotten-instance-of-libsuffix.diff</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Make python package naming consistent with python singlespec</changelog>
  <changelog author="astieger@suse.com" date="1513080000">- gpgme 1.10.0:
  * Now returns more specific error codes for decryption to distinguish
    between bad passphrase, user canceled, and no secret key.
  * Now returns key origin information if available.
  * Added context flag "auto-key-retrieve" to selectively enable the
    corresponding gpg option.
  * Added flag is_de_vs to decryption and verify results.
  * py: Use SEEK_SET as default for data.seek.
  * cpp: Various new APIs.
  * Reduced spawn overhead on Linux again.  Added new configure option
  - -disable-linux-getdents to disable this feature for very old
    Linux versions.
  * Improved the Python bindings build system.
  * Made the test suite less fragile.
  * Interface changes relative to the 1.9.0 release:
    gpgme_decrypt_result_t      EXTENDED: New field 'is_de_vs'.
    gpgme_signature_t           EXTENDED: New field 'is_de_vs'.
    gpgme_keyorg_t              NEW.
    gpgme_op_delete_ext         NEW.
    gpgme_op_delete_ext_start   NEW.
    GPGME_DELETE_ALLOW_SECRET   NEW.
    GPGME_DELETE_FORCE          NEW.
    gpgme_op_conf_dir           NEW.
    gpgme_set_ctx_flag          EXTENDED: New flag 'auto-key-retrieve'.
    cpp: DecryptionResult::isDeVs         NEW.
    cpp: Signature::isDeVs                NEW.
    cpp: EngineInfo::Version::operator&gt;   NEW.
    cpp: Context::createKey               NEW.
    cpp: Context::startCreateKey          NEW.
    cpp: Context::createSubkey            NEW.
    cpp: Context::startCreateSubkey       NEW.
    qt: QuickJob                          NEW.
    py: DecryptResult           EXTENDED: New boolean field 'is_de_vs'.
    py: Signature               EXTENDED: New boolean field 'is_de_vs'.
    py: GpgError                EXTENDED: Partial results in 'results'.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Tweak up the python conditional to allow us finegraining and
  selecting only py2 or py3 if needed</changelog>
  <changelog author="astieger@suse.com" date="1523880000">- bsc#1089497: Address failure handling issues when using gpg 2.2.6
  via gpgme, as used by libzypp
  Add 0001-core-Tweak-STATUS_FAILURE-handling.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1524139200">- Update to 1.11
  * New encryption API to support direct key specification including
  hidden recipients option and taking keys from a file.  This also
  allows to enforce the use of a subkey.
  * New encryption flag for the new API to enforce the use of plain
  mail addresses (addr-spec).
  * The import API can now tell whether v3 keys are skipped. These
  old and basically broken keys are not anymore supported by GnuPG
  2.1.
  * The decrypt and verify API will now return the MIME flag as
  specified by RFC-4880bis.
  * The offline mode now has an effect on gpg by disabling all
  network access.
  * A failed OpenPGP verification how returns the fingerprint of the
  intended key if a recent gpg version was used for signature
  creation.
  * Various minor fixes.
- Dropped patch 0001-core-Tweak-STATUS_FAILURE-handling.patch, since
  it is included upstream now.
- add gpgme-1.11-fix-gpgme-json-rpath.patch to remove rpath
- add gpgme-1.11-fix-tests.patch to fix tests</changelog>
  <changelog author="astieger@suse.com" date="1524225600">- update to 1.11.1:
  * Fixed build problems in the 1.11.0 releas
    drop gpgme-1.11-fix-gpgme-json-rpath.patch,
    drop gpgme-1.11-fix-tests.patch
  * Added C++ interfaces which were planned for 1.11.0</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539000000">- Update to 1.12.0:
  * Enhanced the JSON based interface tool gpgme-json to support Native
  Messaging as well as new Javascript code to support the browser
  site.  See lang/js/README for details.
  * Major overhaul of the Python language bindings documentation
  * Even for old versions of gpg a missing MDC will now lead to a
  decryption failure
  * Added context flag "auto-key-locate" to control the
  behavior of GPGME_KEYLIST_MODE_LOCATE
  * New data function to create a data object from an estream
  * Add more interfaces to the C++ binding
  * Improved error codes on decryption failure
  * Lots of minor fixes
  * Interface changes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1539086400">- Fix the build on ix86 as we disable one test there that should
  not work, sadly just sed is employed as the infrastructure for
  testing is not smart enough for comfy test filtering</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1547035200">- Regen keys in Qt tests to not expire bsc#1121051:
  * gpgme-key-expirity.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1554033600">- gpgme 1.13.0:
  * Support GPGME_AUDITLOG_DIAG for gpgsm
  * New context flag "trust-model".
  * Aligned the gpgrt-config code with our other libaries
  * Auto-check for all installed Python versions
  * Fixed generating card key in the C++ bindings
  * Fixed a segv due to bad parameters in genkey
  * Fixed crash if the plaintext is ignored in a CMS verify
  * Fixed test suite problems related to dtags
  * Fixed bunch of python bugs
  * Several fixes to the Common Lisp bindings
  * Fixed minor bugs in gpgme-json
  * Require trace level 8 to dump all I/O data
  * The compiler must now support variadic macros
- drop gpgme-key-expirity.patch, included upstream</changelog>
  <changelog author="Pedro Monreal Gonzalez &lt;pmonrealgonzalez@suse.com&gt;" date="1560513600">- gpgme 1.13.1:
  * core: At debug levels up to 9 print only an ascii dump.
  * core: Add commented debug helper to posix-io.c.
  * core: Fix error return value of _gpgme_run_io_cb.
  * core: Prettify _gpgme_io_select debug output again and fix TRACE_SYSRES.
  * core: Improve the debug messages even more.
  * core: Avoid explicit locks in the debug code.
  * json: Print "nan", "-inf", "inf" if needed.
  * json: Improve handling of large exponents in the JSON parsor.
  * core: Implement recpstring option parsing for gpgsm.
  * core: Make gpgme_op_encrypt_ext work for CMS.
  * python: Fix typo in DecryptionError exception.
  * python: Make EXTRA_DIST files explicit.
  * Python, doc: Minor style improvement.
  * Always use maintainer mode -Wno cflags.
  * cpp: Fix initialization warning.
  * python: stop raising BadSignatures from decrypt(verify=True)
  * cpp: Add wrapper for gpgme_set_global_flag.
  * core: Fix duplication of close_notify_handler for gpgsm.</changelog>
  <changelog author="Michael Gorse &lt;mgorse@suse.com&gt;" date="1571227200">- Build qt bindings separately to avoid build cycle with
  samba/libsoup.</changelog>
  <changelog author="Pedro Monreal &lt;pmonreal@suse.com&gt;" date="1617192000">- Fix t-json test in SP3: https://dev.gnupg.org/T4820 [bsc#1183801]
  * tests/json: Bravo key does not have secret key material
  * tests/json: Do not check for keygrip of pubkeys
  * core: Make sure the keygrip is available in WITH_SECRET mode
- Add gpgme-test-json.patch</changelog>
</package>
<package pkgid="ac37203a0559f41b9bf7e9fd44bdd3554d5d2e9a865a18eb14477474aa9e4475" name="grafana-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1571227200">- Update to 6.4.3
  * Bug Fixes
  - Alerting: All notification channels should send even if one fails to send. #19807, @jan25
  - AzureMonitor: Fix slate interference with dropdowns. #19799, @aocenas
  - ContextMenu: make ContextMenu positioning aware of the viewport width. #19699, @krvajal
  - DataLinks: Fix context menu not showing in singlestat-ish visualisations. #19809, @dprokop
  - DataLinks: Fix url field not releasing focus. #19804, @aocenas
  - Datasource: Fixes clicking outside of some query editors required 2 clicks. #19822, @aocenas
  - Panels: Fixes default tab for visualizations without Queries Tab. #19803, @hugohaggmark
  - Singlestat: Fixed issue with mapping null to text. #19689, @torkelo
  - @grafana/toolkit: Don't fail plugin creation when git user.name config is not set. #19821, @dprokop
  - @grafana/toolkit: TSLint line number off by 1. #19782, @fredwangwang</changelog>
  <changelog author="witold.bedyk@suse.com" date="1575374400">- Revert the spec file and make script
- Remove PhantomJS dependency</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409600">- add obs-service-go_modules to download required modules into vendor.tar.gz
- adjusted spec file to use vendor.tar.gz
- adjusted Makefile to work with new filenames
- BuildRequire go1.14
- Update to version 6.4.4:
  * DataLinks: Fix blur issues. #19883, @aocenas
  * Docker: Makes it possible to parse timezones in the docker image. #20081, @xlson
  * LDAP: All LDAP servers should be tried even if one of them returns a connection error. #20077, @jongyllen
  * LDAP: No longer shows incorrectly matching groups based on role in debug page. #20018, @xlson
  * Singlestat: Fix no data / null value mapping . #19951, @ryantxu</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409601">- Update to version 6.4.5:
  * Create version 6.4.5
  * CloudWatch: Fix high CPU load (#20579)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409602">- Update to version 6.5.0
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409603">- Update to version 6.5.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409604">- Update to version 6.5.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409605">- Update to version 6.5.3:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409606">- Update to version 6.6.0:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496000">- Update to version 6.6.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496001">- Update to version 6.6.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
</package>
<package pkgid="1c776cb9e36cef8c29e21982a5efbc62ec1bfb2039e14fd2792f5b3805126978" name="grafana-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.1.5" rel="lp152.2.7.1"/>
  <changelog author="witold.bedyk@suse.com" date="1575374400">- Revert the spec file and make script
- Remove PhantomJS dependency</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409600">- add obs-service-go_modules to download required modules into vendor.tar.gz
- adjusted spec file to use vendor.tar.gz
- adjusted Makefile to work with new filenames
- BuildRequire go1.14
- Update to version 6.4.4:
  * DataLinks: Fix blur issues. #19883, @aocenas
  * Docker: Makes it possible to parse timezones in the docker image. #20081, @xlson
  * LDAP: All LDAP servers should be tried even if one of them returns a connection error. #20077, @jongyllen
  * LDAP: No longer shows incorrectly matching groups based on role in debug page. #20018, @xlson
  * Singlestat: Fix no data / null value mapping . #19951, @ryantxu</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409601">- Update to version 6.4.5:
  * Create version 6.4.5
  * CloudWatch: Fix high CPU load (#20579)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409602">- Update to version 6.5.0
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409603">- Update to version 6.5.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409604">- Update to version 6.5.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409605">- Update to version 6.5.3:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583409606">- Update to version 6.6.0:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496000">- Update to version 6.6.1:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="kastl@b1-systems.de" date="1583496001">- Update to version 6.6.2:
  (see installed changelog for the full list of changes)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705600">- update to 6.7.0:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - AngularPanels: Fixed inner height calculation for angular panels . #22796, @torkelo
  - BackendSrv: makes sure provided headers are correctly recognized and set. #22778, @hugohaggmark
  - Forms: Fix input suffix position (caret-down in Select) . #22780, @torkelo
  - Graphite: Fixed issue with query editor and next select metric now showing after selecting metric node . #22856, @torkelo
  - Rich History: UX adjustments and fixes. #22729, @ivanahuckova
- update to 6.7.0-beta1:
  Breaking changes
  - Slack: Removed Mention setting and instead introduce Mention Users, Mention Groups, and Mention Channel. The first two settings require user and group IDs, respectively. This change was necessary because the way of mentioning via the Slack API changed and mentions in Slack notifications no longer worked.
  - Alerting: Reverts the behavior of diff and percent_diff to not always be absolute. Something we introduced by mistake in 6.1.0. Alerting now support diff(), diff_abs(), percent_diff() and percent_diff_abs(). #21338
  - Notice about changes in backendSrv for plugin authors
    In our mission to migrate away from AngularJS to React we have removed all AngularJS dependencies in the core data retrieval service backendSrv.
    Removing the AngularJS dependencies in backendSrv has the unfortunate side effect of AngularJS digest no longer being triggered for any request made with backendSrv. Because of this, external plugins using backendSrv directly may suffer from strange behaviour in the UI.
    To remedy this issue, as a plugin author you need to trigger the digest after a direct call to backendSrv.
  Bug Fixes
    API: Fix redirect issues. #22285, @papagian
    Alerting: Don't include image_url field with Slack message if empty. #22372, @aknuds1
    Alerting: Fixed bad background color for default notifications in alert tab . #22660, @krvajal
    Annotations: In table panel when setting transform to annotation, they will now show up right away without a manual refresh. #22323, @krvajal
    Azure Monitor: Fix app insights source to allow for new __timeFrom and __timeTo. #21879, @ChadNedzlek
    BackendSrv: Fixes POST body for form data. #21714, @hugohaggmark
    CloudWatch: Credentials cache invalidation fix. #22473, @sunker
    CloudWatch: Expand alias variables when query yields no result. #22695, @sunker
    Dashboard: Fix bug with NaN in alerting. #22053, @a-melnyk
    Explore: Fix display of multiline logs in log panel and explore. #22057, @thomasdraebing
    Heatmap: Legend color range is incorrect when using custom min/max. #21748, @sv5d
    Security: Fixed XSS issue in dashboard history diff . #22680, @torkelo
    StatPanel: Fixes base color is being used for null values .
    [#22646], @torkelo</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1584705601">- update to 6.7.1:
  (see installed changelog for the full list of changes)
  Bug Fixes
  - Azure: Fixed dropdowns not showing current value. #22914, @torkelo
  - BackendSrv: only add content-type on POST, PUT requests. #22910, @hugohaggmark
  - Panels: Fixed size issue with panel internal size when exiting panel edit mode. #22912, @torkelo
  - Reporting: fixes migrations compatibility with mysql (Enterprise)
  - Reporting: Reduce default concurrency limit to 4 (Enterprise)</changelog>
  <changelog author="egotthold@suse.com" date="1586174400">- Update to version 6.7.2:
  (see installed changelog for the full list of changes)
  - BackendSrv: Adds config to response to fix issue for external plugins that used this property . #23032, @torkelo
  - Dashboard: Fixed issue with saving new dashboard after changing title . #23104, @dprokop
  - DataLinks: make sure we use the correct datapoint when dataset contains null value.. #22981, @mckn
  - Plugins: Fixed issue for plugins that imported dateMath util . #23069, @mckn
  - Security: Fix for dashboard snapshot original dashboard link could contain XSS vulnerability in url. #23254, @torkelo
  - Variables: Fixes issue with too many queries being issued for nested template variables after value change. #23220, @torkelo
  - Plugins: Expose promiseToDigest. #23249, @torkelo
  - Reporting (Enterprise): Fixes issue updating a report created by someone else</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1588075200">- Update to version 6.7.3
  - This version fixes bsc#1170557 and its corresponding CVE-2020-12245
  - Admin: Fix Synced via LDAP message for non-LDAP external users. #23477, @alexanderzobnin
  - Alerting: Fixes notifications for alerts with empty message in Google Hangouts notifier. #23559, @hugohaggmark
  - AuthProxy: Fixes bug where long username could not be cached.. #22926, @jcmcken
  - Dashboard: Fix saving dashboard when editing raw dashboard JSON model. #23314, @peterholmberg
  - Dashboard: Try to parse 8 and 15 digit numbers as timestamps if parsing of time range as date fails. #21694, @jessetan
  - DashboardListPanel: Fixed problem with empty panel after going into edit mode (General folder filter being automatically added) . #23426, @torkelo
  - Data source: Handle datasource withCredentials option properly. #23380, @hvtuananh
  - Security: Fix annotation popup XSS vulnerability. #23813, @torkelo
  - Server: Exit Grafana with status code 0 if no error. #23312, @aknuds1
  - TablePanel: Fix XSS issue in header column rename (backport). #23814, @torkelo
  - Variables: Fixes error when setting adhoc variable values. #23580, @hugohaggmark</changelog>
  <changelog author="Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;" date="1588680000">- BuildRequires golang(API) instead of go metapackage version range
  * BuildRequires:  golang(API) &gt;= 1.14   from
    BuildRequires:  ( go &gt;= 1.14 with go &lt; 1.15 )</changelog>
  <changelog author="Enno Gotthold &lt;egotthold@suse.com&gt;" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="Joao Cavalheiro &lt;jcavalheiro@suse.com&gt;" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
</package>
<package pkgid="82d7a375eaec98472c83e32755e1138bb93bf60ba3205447aa0936daf959e54f" name="graphviz-addons-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="cea4fb1c7eaf2b70f7440946c7417a163e5e29221c92e51a62513232af31ddc7" name="graphviz-addons-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5d884a53783ec9b6754eb7c85c387e641eccf01e7c4fce7c8ecf0b9ca6014888" name="graphviz-addons-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="1bce5b931a744b0a1661682ea75033aa657475c4cc6f21bfdb2a44e6f7b06f8f" name="graphviz-addons-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="15a024fd397afd9b14797ae9b9a14581b8b49d40aa35dea688f99e2850f64185" name="graphviz-addons-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e85f43d73c88978411fb4899a5b1c09fc7882c6ff1106545ecad1f418c1ff293" name="graphviz-addons-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="251cb540bfd3cb890799ceacfca048da4f08f28da99ca3c2a5131f8b64eebb2e" name="graphviz-addons-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f8d70e1533e60dc6d4a5c230a72cd5f6805d062f636231ade1d853bf0b990174" name="graphviz-addons-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a91ffeb0a53c6f3c0b3d670eb41aa7865ed4213a85eb901817ab151f2f2098fb" name="graphviz-addons-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5a261cd7a30fdec51b87e87e3cec201247ac3bfd3ad9900e887de107262bc45a" name="graphviz-addons-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3e3ca3e3d659f34529f8de08978b0669f9bcc92124980ac164000d27fa0cb6ff" name="graphviz-addons-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b5aaa82511b6bf72fd93d3252c92f5542ee5ac7c14c537484638391c3f5fa18a" name="graphviz-addons-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="875fb84d37c2f914f5326fba2c9963147d8bc8faae15a8c1669778927bcde6bf" name="graphviz-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="7f602673e8a509ddfd2e057d38acbbd54457cdb5e317dee298281b65c3a871b4" name="graphviz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="fa8ca722b9e4dc10a6a3501def9c240a9d63d1be885229a9dc6b058ffd003e8f" name="graphviz-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5f29fa01848125e31c6381eeb9f3c3f6c9dd39517577eafb8b5ac379dd1d7f1a" name="graphviz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="01903da0c57232675e483bdbb195992fb3c2680cbdf1ab541dee56656e2f889a" name="graphviz-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5fb93b51fc8d273560615d72b5b3171e00879e23d80febec8929f7b0268d127b" name="graphviz-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="22d75e7c71b8adc1c41b58a0362578e13d521c3fdd0a5d14da6ae9ba6a63d685" name="graphviz-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="4b507b961628821e8459bfe371af29625cf17996199e4d51a968b9a0b24ffc30" name="graphviz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="decbd3b49610556695be535e7eac107b117e06bee5e59a6319fce5be7280c66c" name="graphviz-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ad51c755c56d7aa17e3f2f49ab8667ead7b475a395b42771ed60cd662a37f75c" name="graphviz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="06b522b0297eedb3f46a2db21c1c9830109f1cba3ea57cc16c9b5af1b9849278" name="graphviz-debugsource" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="77d060820de6d5371bf65bb7082aa0fcc2f1fe6a32b45c14ec2c8fefaf4f277e" name="graphviz-debugsource" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e5d9430d39852150ed95eb856e72494694033d385262d98706efb4262d4ce491" name="graphviz-gd-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="4f9a67621d9a7fc21a862ce14d827263d1341d8d426a5cf2403f210a5ec77456" name="graphviz-gd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="98e19dd394ce2f88607ab028f58ee5871cb9f76b92d4288bf52e094efcf93805" name="graphviz-gd-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="7e428933935617d60b6b8516c069ec114a146d09d8470a3abf22fa4ff05aaff9" name="graphviz-gd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="d158945d21f06a53b84d31633eeb8fcbc6d07d2aaebda7cfe00451d525ad1fe0" name="graphviz-gd-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="fa31969090b7a89d94eeee1b341c9104b90d6f720572775edfe8a07907aa7aa7" name="graphviz-gd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="625de94e9fbfad53475ea53719fabef44c967a43a7bb34ea55133f7ab3316e52" name="graphviz-gnome-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9b64ddad09985e7da6e70a5c18321975c5475b9afd11499ccf45a403040ce4ce" name="graphviz-gnome-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="08d1628d4d65017cc0b9ecc5b293e2325bf6fd44bfa4cb230bed2b9e9d311869" name="graphviz-gnome-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9284c838d45fe74a8fb95ac4aa1f1635f6e466d28459776432c9d6212b6f60b0" name="graphviz-gnome-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="187ad48714092e0d0c1e072303edfcebc3942d9f041d0c20ad5e0dfee6713572" name="graphviz-gnome-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="c7695c7393b5cadb45daad422bd61ac1b4ae9e30d849354a09e4495c4fe84ca7" name="graphviz-gnome-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="21dee305fc7bcb03681dd0ac944be8ac3e5f614c7831299e6f67a8a3d480dceb" name="graphviz-guile-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="eaf141307606c4d2c4604f7f59f652682dc6c450b947ad252980d92bd4bc008d" name="graphviz-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="39f1058c42fd4b483651c88e9d61d5ca95fe5e409901730d497e5b984a660ccb" name="graphviz-guile-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="bb061cabc8f578093c23bf3beff6df80645e1ee391094ee160e0847ec839a8ba" name="graphviz-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ee285fb4dd99039c1a5a08c36696b5150a3923e688715e90126b431ecdb77c3b" name="graphviz-guile-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="821df60b2b91a68bdc031cc71e35961f1bfc4f71d4be353a5d550a4fdf4db9cf" name="graphviz-guile-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="9cc22ea6feb8f89dd3f5aa4cf5fc52238955d62c08edf08e8208ecfd548b41a5" name="graphviz-gvedit-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="bad612e9804c3f274c7d1570cd0b525274883f1f9a3c244ddb1983014fa70fbe" name="graphviz-gvedit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="ee9cd079a66012d3c0384d84206b94b1cdd9e224570d976bdb63126cbe592e76" name="graphviz-gvedit-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="1dc81351b617a628d052a083d5e0c1e18204bc7ad6e1069df4625b078cf44c9f" name="graphviz-gvedit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a1c9e2ed15e258effda1229b00bc87eb896cf0bacb73ce9bed191beabe8da1d4" name="graphviz-gvedit-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="f1de4087a43fccc10fe0b07116b7f67166fa2e37dfbbd291471f2d7cea0629d5" name="graphviz-gvedit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4165a05578f977e01262532e2191f56667bb3968aab640ab0de4cf79720cf70f" name="graphviz-java-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="77c9e50704a908ff05e895d089451d918e89bdd34cc0af8a5173eb8a715eec5e" name="graphviz-java-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="2b53591073b015323cb0e704c67c35189b155f5452bbaa46a711663778cc1dc8" name="graphviz-java-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3a49caf50c8466bc1e78c76ec7bf62dd0a19e850e7aa167be4eb0e107c6a8240" name="graphviz-java-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="d4f5c46638f7a2d3afc43ba6552575b8fac113bf75d1e62d519edb314a230a1c" name="graphviz-java-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="3032818c49cdc9df52e22ede48c31eb2d75933ab21caee43cb56534a2414b538" name="graphviz-java-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a13316574f83fa17cf4aae55d87aa1a0a42dcb6cf5cd48083d10ee6700f28520" name="graphviz-lua-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="bf21ee3d17de42e450cdfe1e69852f9b6ffcc637b648c0265cb572ee0a725387" name="graphviz-lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="c5f5cd44b99968e70983aa200bbe2068c161b6e3ff78c52948df77d19f20f621" name="graphviz-lua-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="59509a0bf4c6f2f3de80895b2a92cc89eb9d74052dd6bc37d3227559daa7e4e9" name="graphviz-lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="8eaff962c054be99bfb251f9f8857085cbc7ad9e86aef203e566e02973da5b82" name="graphviz-lua-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="ac59fe2b8e1d04cd28118ed1fc2bde127b2074e89a5ebfd2b0916734c83cb1b2" name="graphviz-lua-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="1df9d64706620c68119a0bc2542c2c7563f5bc4a396be5beb517fff6e1fe8b88" name="graphviz-perl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0b871460d9d41c543c7cb0889277d9a67d0d5c499a47354922858673ee2b1178" name="graphviz-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="faa5e2ea02e3792336d85fc5b47f79ed23b242917a65d1e4702929f426c8a8ec" name="graphviz-perl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="4706feddcb48f12dd8c42a5cd832c00b2c4bebafe0a9a2bbcff842a478bb5c3b" name="graphviz-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="767af04dee539983539d3372a4d797d2879565f02d339b7cba94630513c063c1" name="graphviz-perl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="37ead5fed6fef7b49228463cf00ee736d6a326c09fbdda041ac23a49aa90b6c6" name="graphviz-perl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="257d7b5971aae5794eef55ca58efd0523d8104e71cf25d67832b31e8ce0c0e2d" name="graphviz-php-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9ea8a4c04f4de71a12acf2bccfc4fc517232546a62c924485edb14352e1d5315" name="graphviz-php-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0d48f7ae9773e32b27a53597ad701b414057a5cc27ee0de9549d5f4abd170140" name="graphviz-php-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="11f658658343d390fb4fafad3f6d1ba3fddff92adca20d7a02d9a236eda762aa" name="graphviz-php-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="308b98f00ddaf2b4cbc4c218d461935ffb3b591cd3c7d7e715ed2a872a5d6e71" name="graphviz-php-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="c007d3c9068917a8ace8abb16f1aedd38ae6f551810b8e2d17870e0ddfadfa26" name="graphviz-php-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b2bb092740138a4a01e3e95e173490e0a7783d537548df395f96f5a5dc3f9d10" name="graphviz-plugins-core-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="5dd139a4a5ba67c1709f4c4b1605705d2b1b361caf5fdc96d7f5876d7040a9d7" name="graphviz-plugins-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.2.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
</package>
<package pkgid="6346f2c3104c01a59b0cad867d84f6d7c8f1c7357d1e502b55ab7e3bfa18e8a2" name="graphviz-plugins-core-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="33eb123aee3696cab2eaae1138dea42cd7502aba64294c14b2eef526c61af73f" name="graphviz-plugins-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="1ea8554206074f8f6b89df58b76490dede31e643bea39346e12a3560c1499a08" name="graphviz-plugins-core-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="ffdd909b64620c4812cb5fc7f25164765317331a45d41ab7ffe9489be3f191ad" name="graphviz-plugins-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="36e329b7313fe86cd14d2cf70b29204b0ec2db5ed5ad3990b9ab55db58e83739" name="graphviz-python-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="14ebd8d374121bd93237ab2a821fc5f281f52bef1578a85d0c624ec4581411ee" name="graphviz-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3654d8f29043e4a419f623470e3502f69c66dcbb353082dd77cf81e492231d8f" name="graphviz-python-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5cdf80e146a18882b228a2243860e4e34158f4c0585a1830cac991467b3d34bd" name="graphviz-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="51777d3d41fa159ade55dc112686dc5b11183cd51f4783c784da521b35d59738" name="graphviz-python-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6848e69d0d1c95ceefcf72945ee6be89cf2596a2d6655ba2aa4e02044375d9bc" name="graphviz-python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="cd75115bda82e3c796c093daa61031ab77470d695691b62ab1e4b7304c4b50e3" name="graphviz-ruby-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="00419e05f6ad91e0be3926f3e67d6bc7e4ce434b8f3713a394aa75cc3e7d7a65" name="graphviz-ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9c13ec851c90923028c8311d77edde526b46bf4abf15ccd9a05276ad00e808ac" name="graphviz-ruby-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="9b3abf85364bbf8fd50b1310a48d9cb5821dde6437b778a9d991a8439096dc4b" name="graphviz-ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="f8b1eb624d79bcbd2dbf247036a72fabce959d4c2a2476b6ea21d51e55f5eee9" name="graphviz-ruby-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="712b0c6ce31e29d73a9299f71a73c51803912f760e43e7459a77319da155ae22" name="graphviz-ruby-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="93cb1aab3dab9450e67ac17964f4b604de70756fe717539793dfba438daf6152" name="graphviz-smyrna-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="09d2c2c20117564778ae0b463be17fecdf1dd77a8a9c63a3cb7381b941fefdf2" name="graphviz-smyrna-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="650a29101f6d1974bf7710ac8b2a258c472283f714424187a9638418a50e45ab" name="graphviz-smyrna-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="3c7af1ae2e3236a1052644a73201a1e859c8e0a8679b49e0326c3837dadc1fed" name="graphviz-smyrna-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="a7769dc3a68f570227e19fdbf90c0abab24d1a9b4c904b50e0454e6bf9c2c037" name="graphviz-smyrna-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="45e133487d3f17fbcd5a9071c272e809c3d172df9657e7186b345411a6acedb0" name="graphviz-smyrna-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5bc1c439f1bef71285cdbd41abfbe03a025939bd019f7626af2d0f33c546451c" name="graphviz-tcl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="0af81b7201e841cabd51a5893353363a117c4f4960a7b28f8d8176d0ac19609c" name="graphviz-tcl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="918bfe6086aba9cb2c77239dd8cb637c27a4700c65fb59c17106250faf522434" name="graphviz-tcl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="6c621f5bd161daa58f97720f74abc40fdb73a0418f43f891af2d818eabb17544" name="graphviz-tcl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.4.2"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
</package>
<package pkgid="5e2e0c65e6e3562a9df35fb399066bf170ed0554eab772b2df915073be77e7ea" name="graphviz-tcl-debuginfo" arch="i586">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="294707faec808b78ea54b6740054e3800ceb6c07a21c113cb37c116d052902e1" name="graphviz-tcl-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="lp152.7.7.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416225600">- fix ksh-specific constrictions in gvmap.sh script
- add patches:
  + graphviz-2.38.0-fix-gvmap.patch</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1428580800">- Build with pangocairo and lasi support.</changelog>
  <changelog author="mpluskal@suse.com" date="1433937600">- Remove pangocairo and lasi support as it introduces build cycle</changelog>
  <changelog author="bwiedemann@suse.com" date="1495972800">- Add reproducible.patch to not have binaries depend on build system timings</changelog>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="Christian V&#xF6;gl &lt;christian.voegl@suse.com&gt;" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="bef7a02d16fc36d3cee359e828436650c915f98747147c275cfed34672031e80" name="groff-debuginfo" arch="i586">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="104309f233c95748f72c46f90a1dd092503278ba4eac56f2ae2c958b20a03317" name="groff-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="151065013412f118261282d799b81f9941db32b17d5008a5e611cb23b16716cd" name="groff-debugsource" arch="i586">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="63ead882729dccf96a6d45c77d27a5a9f8fb7d16dcba1b109e7dd40d65bfc0e6" name="groff-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="1e05e8acbc32e272e1ee9351d4e5db409f8043578d287d762a9c582d3f149347" name="groff-full-debuginfo" arch="i586">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="bf2eed6a027e7a75fdbfef4b0a1418c47327bbef4f704eb37d0d01dfa69420a4" name="groff-full-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="dc5eb9c23b2584726a7d6842a80afce1ed832178f1953d5f60696d979d43b5ff" name="groff-full-debugsource" arch="i586">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="48eba49067a8b4f06080d9b72261fa0de61014c34dd3223e29933b2e84c66201" name="groff-full-debugsource" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="82d5ea1276eb96291e6c983b4123d3a5f49921b9f51c5a9b60847c883556a8a1" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
</package>
<package pkgid="15190468fdd34d6fa48a81486ae2c7031a02953715273b43b913c00024902103" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
</package>
<package pkgid="63beb15bf150765ea3c69e70efa08ddd7fef87624bc93a1bdf55ce0e643f605b" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.15.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
</package>
<package pkgid="880b72ed67b81cd4ce2da8d290dc4685a4c6326ac0db5f6ed4f53cacf51b1062" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.15.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
</package>
<package pkgid="c3c09ef6177953fc8f1c22b6c401ea94424276ea120f88d7ec46204ee6028d07" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.18.2"/>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
</package>
<package pkgid="c2aa6013c671913d8e6379266d5957d7e3b16de25139c0b1ca6836b92bd82f66" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.18.2"/>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
</package>
<package pkgid="fcefd28d03646ec3b84d21beda1e33de9b5b192e042f3c593e361a0cc6bde681" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.22.7"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
</package>
<package pkgid="24ace501b533e76c395670afeab1cc0dffebdd6e15d8771357733c9fdef69eca" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.22.7"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
</package>
<package pkgid="c96c3a9ed87edbd448f4c948d4e597c3797adb07dcc15b2775f1eaaa3973e990" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.25.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
</package>
<package pkgid="8617c19a35211472a13b3bda890abe826164f81b3df055544782cb6c869fdda4" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.25.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
</package>
<package pkgid="9101b98eb52bb89109ded3873951bc0138ceb7488d350956b2a894133989074d" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.3.4"/>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
</package>
<package pkgid="5de4d6302d397520e97d3a14de6fbe0312d7631dbaa9fb04adeba7547975097d" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.3.4"/>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
</package>
<package pkgid="602ed05a919c35c175d0ecc527d8242d17992ea436c78e60723ed0b680094e90" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.6.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
</package>
<package pkgid="e58e4141c92c85eed4d08f130e48553431f0ec5d51198a36be0aa088c9edab37" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.6.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
</package>
<package pkgid="907ac11b1a640d3b998c5cd46509545ef0094da676a87703b388edb866c77c7b" name="grub2-debuginfo" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.9.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
</package>
<package pkgid="d40a0cce172bea3264d8431014bddce65b1096c813e7e5a6c6a21c5874dfbc64" name="grub2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.9.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
</package>
<package pkgid="59a147c00c4579dd66dcc2f971ec4d9638ced73c36ef95757a81a1d9d6ab63ca" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
</package>
<package pkgid="263acb1737669b27c76160c108f8245eec7003e72c8c0a9587f474deef800084" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.12.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
</package>
<package pkgid="de314cd0c532d011d96f9274b25b810a083416a9a2df090cacd760cb11711922" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.15.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
</package>
<package pkgid="d7f56b2863feb37c9f2599d943a814b60b3e10162db7e5a470017b58660eea4d" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.15.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
</package>
<package pkgid="a0617a3ff914356496e82ae675ce9e33eada7562d32ccb0f8eb6bf8d9a1472e7" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.18.2"/>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
</package>
<package pkgid="57585cb2d6f925331743c7af2578380c10a758ecb5ffd0ad012076c461f3849f" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.18.2"/>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
</package>
<package pkgid="fba4c2f103b744ea0dca3fa1a77b13fa3c587ad36761d08fe695de86dbc8da90" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.22.7"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
</package>
<package pkgid="01b3de6fb90ca841b52cb5205888f1d0e9e8daaec18edd3d5d4192cef0e9a3c6" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.22.7"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
</package>
<package pkgid="28b18325287ce837507edaf103a9e94515128d37019a8cc88b2d7b9bb2f6f162" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.25.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
</package>
<package pkgid="93d32e5ab3525318546b215bb1881c7b9efee23739b20cd7d1f221e86ef1430b" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.25.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598097600">- Make consistent check to enable relative path on btrfs (bsc#1174567)
  * 0001-Unify-the-check-to-enable-btrfs-relative-path.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598529600">- Fix verification requested but nobody cares error when loading external
  module in secure boot off (bsc#1175766)
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="Oliver Kurz &lt;okurz@suse.com&gt;" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
</package>
<package pkgid="6a517190d6983ac988771d237637556a52ebf1999543e38edd1171c8fcd19013" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.3.4"/>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
</package>
<package pkgid="36884a58e54221b0a6fa6ad7d5eff7193dcc770807f5fe58bcb7ed6555b0d43b" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.3.4"/>
  <changelog author="mchang@suse.com" date="1563451200">- Revert grub2-ieee1275-FCP-methods-for-WWPN-and-LUNs.patch until merged by
  upstream (bsc#1134287, bsc#1139345, LTC#177836, LTC#174229).</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
</package>
<package pkgid="8af20f0f0a7c220a78c99d0c02d227af57cda5924a489e7db8a8d6015c887bdd" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.6.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
</package>
<package pkgid="6a33c9cbc7fcdfb6d4b2a9efd8cee8d5aee507dbd2699b505796b10a90d50543" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.6.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1565956800">- Fix fallback embed doesn't work when no post mbr gap at all (boo#1142229)
  * Refresh grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch</changelog>
  <changelog author="rw@suse.com" date="1571140800">- Consistently find btrfs snapshots on s390x.  (bsc#1136970)
  * grub2-s390x-04-grub2-install.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
</package>
<package pkgid="33e99a3111f4e71e8c490bf0232e99aa0a167324cf00f595840cb16d01562feb" name="grub2-debugsource" arch="i586">
  <version epoch="0" ver="2.04" rel="lp152.7.9.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
</package>
<package pkgid="2111485add332fd85203c42a76e86bc1205c10768a1353f9647b3f034b766eea" name="grub2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.04" rel="lp152.7.9.1"/>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1571313600">- Version bump to 2.04
  * removed
  - translations-20170427.tar.xz
  * grub2.spec
  - Make signed grub-tpm.efi specific to x86_64-efi build, the platform
    currently shipped with tpm module from upstream codebase
  - Add shim_lock to signed grub.efi in x86_64-efi build
  - x86_64: linuxefi now depends on linux, both will verify kernel via
    shim_lock
  - Remove translation tarball and po file hacks as it's been included in
    upstream tarball
  * rediff
  - grub2-setup-try-fs-embed-if-mbr-gap-too-small.patch
  - grub2-commands-introduce-read_file-subcommand.patch
  - grub2-secureboot-add-linuxefi.patch
  - 0001-add-support-for-UEFI-network-protocols.patch
  - grub2-efi-HP-workaround.patch
  - grub2-secureboot-install-signed-grub.patch
  - grub2-linux.patch
  - use-grub2-as-a-package-name.patch
  - grub2-pass-corret-root-for-nfsroot.patch
  - grub2-secureboot-use-linuxefi-on-uefi.patch
  - grub2-secureboot-no-insmod-on-sb.patch
  - grub2-secureboot-provide-linuxefi-config.patch
  - grub2-secureboot-chainloader.patch
  - grub2-s390x-01-Changes-made-and-files-added-in-order-to-allow-s390x.patch
  - grub2-s390x-02-kexec-module-added-to-emu.patch
  - grub2-s390x-04-grub2-install.patch
  - grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  - grub2-efi-chainloader-root.patch
  - grub2-ppc64le-disable-video.patch
  - grub2-ppc64-cas-reboot-support.patch
  - grub2-Fix-incorrect-netmask-on-ppc64.patch
  - 0003-bootp-New-net_bootp6-command.patch
  - 0006-bootp-Add-processing-DHCPACK-packet-from-HTTP-Boot.patch
  - 0012-tpm-Build-tpm-as-module.patch
  - grub2-emu-4-all.patch
  - grub2-btrfs-09-get-default-subvolume.patch
  - grub2-ppc64le-memory-map.patch
  - grub2-ppc64-cas-fix-double-free.patch
  - 0008-efinet-Setting-DNS-server-from-UEFI-protocol.patch
  * drop upstream patches
  - grub2-fix-locale-en.mo.gz-not-found-error-message.patch
  - grub2-fix-build-with-flex-2.6.4.patch
  - grub2-accept-empty-module.patch
  - 0001-Fix-packed-not-aligned-error-on-GCC-8.patch
  - 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch
  - unix-exec-avoid-atexit-handlers-when-child-exits.patch
  - 0001-xfs-Accept-filesystem-with-sparse-inodes.patch
  - grub2-binutils2.31.patch
  - grub2-msdos-fix-overflow.patch
  - 0001-tsc-Change-default-tsc-calibration-method-to-pmtimer.patch
  - grub2-efi-Move-grub_reboot-into-kernel.patch
  - grub2-efi-Free-malloc-regions-on-exit.patch
  - grub2-move-initrd-upper.patch
  - 0002-Add-Virtual-LAN-support.patch
  - 0001-ofnet-Initialize-structs-in-bootpath-parser.patch
  - 0001-misc-fix-invalid-character-recongition-in-strto-l.patch
  - 0001-tpm-Core-TPM-support.patch
  - 0002-tpm-Measure-kernel-initrd.patch
  - 0003-tpm-Add-BIOS-boot-measurement.patch
  - 0004-tpm-Rework-linux-command.patch
  - 0005-tpm-Rework-linux16-command.patch
  - 0006-tpm-Measure-kernel-and-initrd-on-BIOS-systems.patch
  - 0007-tpm-Measure-the-kernel-commandline.patch
  - 0008-tpm-Measure-commands.patch
  - 0009-tpm-Measure-multiboot-images-and-modules.patch
  - 0010-tpm-Fix-boot-when-there-s-no-TPM.patch
  - 0011-tpm-Fix-build-error.patch
  - 0013-tpm-i386-pc-diskboot-img.patch
  - grub2-freetype-pkgconfig.patch
  - 0001-cpio-Disable-gcc9-Waddress-of-packed-member.patch
  - 0002-jfs-Disable-gcc9-Waddress-of-packed-member.patch
  - 0003-hfs-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0004-hfsplus-Fix-gcc9-error-with-Waddress-of-packed-membe.patch
  - 0005-acpi-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0006-usbtest-Disable-gcc9-Waddress-of-packed-member.patch
  - 0007-chainloader-Fix-gcc9-error-Waddress-of-packed-member.patch
  - 0008-efi-Fix-gcc9-error-Waddress-of-packed-member.patch</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1571745600">- Enable support for riscv64
- Backports from upstream:
  * risc-v-fix-computation-of-pc-relative-relocation-offset.patch
  * risc-v-add-clzdi2-symbol.patch
  * grub-install-define-default-platform-for-risc-v.patch</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1572264000">- Fix grub2.sleep to load old kernel after hibernation (boo#1154783)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1572436800">- Disable btrfs zstd support for i386-pc to workaround core.img too large to be
  embedded in btrfs bootloader area or MBR gap (boo#1154809)
  * 0001-btrfs-disable-zstd-support-for-i386-pc.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1574856000">- Correct awk pattern in 20_linux_xen (bsc#900418, bsc#1157912)
- Correct linux and initrd handling in 20_linux_xen (bsc#1157912)
  M grub2-efi-xen-cfg-unquote.patch
  M grub2-efi-xen-chainload.patch
  M grub2-efi-xen-cmdline.patch
  M grub2-efi-xen-removable.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1580817600">- From Stefan Seyfried &lt;seife@novell.slipkontur.de&gt; : Fix grub2-install fails
  with "not a directory" error (boo#1161641, bsc#1162403)
  * grub2-install-fix-not-a-directory-error.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1582027200">- Fix grub hangs after loading rogue image without valid signature for uefi
  secure boot (bsc#1159102)
  * grub2-verifiers-fix-system-freeze-if-verify-failed.patch</changelog>
  <changelog author="rw@suse.com" date="1582891200">- Add secure boot support for s390x.  (jsc#SLE-9425)
  * grub2-s390x-11-secureboot.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1583841600">- Downgrade mtools to Suggests for consistency with xorriso (boo#1165839)
- remove info requirements, file triggers are used now (boo#1152105)</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1584014400">- Fix EFI console detection to make it a runtime decision (bsc#1164385)
  * grub2-SUSE-Add-the-t-hotkey.patch</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1584360000">- move *.module files to separate -debug subpackage (boo#1166578)</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1584705600">- Backport to support searching for specific config files for netboot
  (bsc#1166409)
  * 0001-normal-Move-common-datetime-functions-out-of-the-nor.patch
  * 0002-kern-Add-X-option-to-printf-functions.patch
  * 0003-normal-main-Search-for-specific-config-files-for-net.patch
  * 0004-datetime-Enable-the-datetime-module-for-the-emu-plat.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1585051200">- Fix GCC 10 build fail (bsc#1158189)
  * 0001-mdraid1x_linux-Fix-gcc10-error-Werror-array-bounds.patch
  * 0002-zfs-Fix-gcc10-error-Werror-zero-length-bounds.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1587038400">- Fix executable stack in grub-probe and other grub utility (bsc#1169137)
  * grub2-btrfs-06-subvol-mount.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1588680000">- Fix boot failure as journaled data not get drained due to abrupt power
  off after grub-install (bsc#1167756)
  * grub-install-force-journal-draining-to-ensure-data-i.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1589803200">- Skip zfcpdump kernel from the grub boot menu (bsc#1166513)
  * grub2-s390x-skip-zfcpdump-image.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1593777600">- Fix for CVE-2020-10713 (bsc#1168994)
  * 0001-yylex-Make-lexer-fatal-errors-actually-be-fatal.patch
- Fix for CVE-2020-14308 CVE-2020-14309, CVE-2020-14310, CVE-2020-14311
  (bsc#1173812)
  * 0002-safemath-Add-some-arithmetic-primitives-that-check-f.patch
  * 0003-calloc-Make-sure-we-always-have-an-overflow-checking.patch
  * 0004-calloc-Use-calloc-at-most-places.patch
  * 0005-malloc-Use-overflow-checking-primitives-where-we-do-.patch
  * 0006-iso9660-Don-t-leak-memory-on-realloc-failures.patch
  * 0007-font-Do-not-load-more-than-one-NAME-section.patch
- Fix CVE-2020-15706 (bsc#1174463)
  * 0008-script-Remove-unused-fields-from-grub_script_functio.patch
  * 0009-script-Avoid-a-use-after-free-when-redefining-a-func.patch
- Fix CVE-2020-15707 (bsc#1174570)
  * 0010-linux-Fix-integer-overflows-in-initrd-size-handling.patch
- Use overflow checking primitives where the arithmetic expression for buffer
  allocations may include unvalidated data
- Use grub_calloc for overflow check and return NULL when it would occur
  * 0001-add-support-for-UEFI-network-protocols.patch
  * 0003-bootp-New-net_bootp6-command.patch
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch
  * grub2-gfxmenu-support-scrolling-menu-entry-s-text.patch
  * grub2-grubenv-in-btrfs-header.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597320000">- Make grub-calloc inline to avoid symbol not found error as the system may not
  use updated grub to boot the system (bsc#1174782) (bsc#1175060) (bsc#1175036)
  * 0001-kern-mm.c-Make-grub_calloc-inline.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1597752000">- Fix for CVE-2020-15705 (bsc#1174421)
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0002-cmdline-Provide-cmdline-functions-as-module.patch</changelog>
  <changelog author="Michael Chang &lt;mchang@suse.com&gt;" date="1598011200">- Add fibre channel device's ofpath support to grub-ofpathname and search hint
  to speed up root device discovery (bsc#1172745)
  * 0001-ieee1275-powerpc-implements-fibre-channel-discovery-.patch
  * 0002-ieee1275-powerpc-enables-device-mapper-discovery.patch</changelog>
</package>
<package pkgid="f1575af6f61bccd4f4d6273873c8935f353ba64723e51f424a0b81473412d1ae" name="gsoap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.102" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556020800">- Update to new upstream release 2.8.83
  * Added wsdl2h optimization options `-Ow2`, `-Ow3`, and `-Ow4`
    to optimize the generated source code by schema slicing,
    while retaining all derived extensions of base types.
  * Added wsdl2h option `-Q` to make `xsd__anySimpleType` equal
    to `xsd__anyType` to use as the base type for derived types,
    so that elements of type `xsd:anySimpleType` can be
    serialized with a derived type, using inheritance in C++ and
    by using simulated inheritance in C using wsdl2h option `-F`.
  * Updated wsdl2h options `-p` and `-F` to generate additional
    wrappers for primitive types that aren't XSD primitive types,
    such as `SOAP-ENC:base64`.
  * Improved wsdl2h output for the infrequently-used
    `SOAP-ENC:Array` type.
  * Fixed an issue with soapcpp2 option `-A` that resulted in
    error 13 `SOAP_NO_METHOD`.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1558008000">- Update to new upstream release 2.8.84
  * Unspecific minor fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550400">- Update to new upstream release 2.8.86
  * Added `soap::client_addr` string to specify a IPv4 or IPv6 or
    a host address to bind to before connecting. This can be used
    at the client side to bind to an address before connecting to
    a server endpoint, similar to `soap::client_port`.
  * Fixed wsdl2h compilation issue with C++17.
  * Fixed a problem with the `SOAP_SSL_DEFAULT` settings
    parameter used with `soap_ssl_client_context` and
    `soap_ssl_server_context` that may lead to a weaker setting
    than specified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550401">- Update to new upstream release 2.8.87
  * Added `soap::connect_retry` to specify a number of retries at
    the client side when connecting to a server fails, with
    exponential backoff of 2^n seconds between retries.
    Zero by default, meaning no retries.
  * Added `soap::client_addr_ipv6` to optionally specify a IPv6 or
    host address to bind to at the client side, when the
    destination is a IPv6 server. Otherwise uses
    `soap::client_addr` to bind.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565524800">- Update to new upstream release 2.8.89
  * Added wsdl2h option `-X` to do not qualify part names in
    order to disambiguate document/literal wrapped patterns (as
    the other choice to disambiguate instead of the default
    qualification with schema namespaces).
  * Added wsdl2h option `-z8` for backward compatibility with
    2.8.74 and earlier: don't qualify part names to disambiguate
    doc/lit wrapped patterns and revert to the old wrapper
    class/struct naming used for `xs:anyType` inheritance.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565784000">- Update to new upstream release 2.8.90
  * Internal changes related to gsoap's own build only.
- Add revert-z.diff to counter a regression in handling the
  soapcpp2 "-z" option introduced in 2.8.89.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565870400">- Update to new upstream release 2.8.91
  * Correction to fix soapcpp2 2.8.90 `-z#` flag enforcement
    problem.
- Removed revert-z.diff (solved upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 2.8.92
  * Fixed soapcpp2-generated call to `soap_DELETE` for REST
    DELETE operations.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1569499200">- Update to release 2.8.93
  * Fixed a wsdl2h schema import/include issue when a `./` occurs
    in schemaLocation` and schema import/include dependencies are
    cyclic, causing wsdl2h to not be able to locate and read
    schema files.
  * Removed empty substitutionGroup and duplicate
    substitutionGroup elements in wsdl2h-generated
    `SUBSTITUTIONS` sections.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1571400000">- Update to release 2.8.94
  * Fixed a wsdl2h issue that caused it to omit names for local
    simpleType restrictions in the generated `enum` types of
    struct/class members; improved soapcpp2 to avoid `enum`
    symbol numbering clashes in the generated source code.
  * Removed unnecessary namespace prefixes from some class/struct
    members in the source code generated by wsdl2h in a specific
    case, to prevent XML validation issues.
  * Added wsdl2h option `-z9` for backward compatibility of
    2.8.94 and greater to versions 2.8.93 and lesser, which
    reverts the namespace change.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1574164800">- Update to release 2.8.95
  * Upgraded smdevp.c to replace deprecated OpenSSL API function.
  * Updated WS-Security WSSE plugin, documentation, and demo.
  * Improved soapcpp2 execution speed to generate WSDL and
    XSD files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576152000">- Update to release 2.8.96
  * Improved `soap_check_mime_attachments()` and
    `soap_recv_mime_attachment()` functions and documentation,
    ensure proper close when MIME/MTOM errors occur.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578484800">- Update to release 2.8.97
  * Fixed wsdl2h processing of schemas with a cyclic schema
    `&lt;xs:include&gt;` that may cause wsdl2h to hang when schemas
    have no `targetNamespace` attribute.
  * Improved wsdl2h code generation of unqualified types and
    names defined in imported schemas (with `&lt;xs:import&gt;`) when
    these schemas have no `targetNamespace`. Use wsdl2h option
    `-z10` or lesser to revert to the code generation behavior of
    versions prior to 2.8.97.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Temporarily work around -fno-common build failure [boo#1160267].</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582459200">- Update to release 2.8.98
  * Updated the WS-Security and WS-Trust APIs that use SAML with
    higher precision timestamps in microseconds, using the
    `custom/struct_timeval.h` serializer for `xsd__dateTime`. The
    WS-Security and WS-Trust updates require compiling and
    linking with `custom/struct_timeval.c`.
  * Fixed an issue with soapcpp2 code generation of `wchar_t*`
    serializers when combined with a custom serializer with base
    type `wchar_t*`, i.e. when `extern typedef wchar_t* name` is
    declared.
  * Fixed an issue with soapcpp2 code generation when an element
    tag names starts with an underscore and the element is
    namespace qualified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584532800">- Update to release 2.8.99
  * Improved performance of the soapcpp2 tool.
  * Improved proxy connectivity on the client side with
    `soap::proxy_host`, `soap::proxy_port`, and NTLM, to maintain
    HTTP headers, e.g. `soap::http_content` and
    `soap::http_extra_header`.
  * Fixed a bug in HTTP cookie handling when the optional
    `-DWITH_COOKIES` flag is used. Note that cookie support is
    disabled by default or has no effect when deploying robust
    services with the gSOAP Apache modules and ISAPI extensions
    that handle cookies differently.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586347200">- Update to release 2.8.100
  * Improved proxy connectivity on the client side to handle bearer
    authentication.
  * Improved soapcpp2 handling of the `#module` directive.
  * Fixed an MTOM flag clearing issue hampering MTOM usability.
- Add gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586433600">- Update to release 2.8.101
  * Fix read beyond end-of-buffer in soap_accept
  * Other unspecified improvements
- Drop gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589544000">- Update to release 2.8.102
  * Improved HTTP digest authentication plugin to cover
    additional HTTP methods.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619438400">- Add gsoap-plugins-hardening.patch,
  gsoap-url-parse-hardening.patch, gsoap-wsse.patch
  [boo#1182098, CVE-2020-13576]</changelog>
</package>
<package pkgid="6a1b158c90526ca8fc516eba48cab06ce4fb15b6cd6d38f64bcc91e3f54857a2" name="gsoap-debugsource" arch="x86_64">
  <version epoch="0" ver="2.8.102" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556020800">- Update to new upstream release 2.8.83
  * Added wsdl2h optimization options `-Ow2`, `-Ow3`, and `-Ow4`
    to optimize the generated source code by schema slicing,
    while retaining all derived extensions of base types.
  * Added wsdl2h option `-Q` to make `xsd__anySimpleType` equal
    to `xsd__anyType` to use as the base type for derived types,
    so that elements of type `xsd:anySimpleType` can be
    serialized with a derived type, using inheritance in C++ and
    by using simulated inheritance in C using wsdl2h option `-F`.
  * Updated wsdl2h options `-p` and `-F` to generate additional
    wrappers for primitive types that aren't XSD primitive types,
    such as `SOAP-ENC:base64`.
  * Improved wsdl2h output for the infrequently-used
    `SOAP-ENC:Array` type.
  * Fixed an issue with soapcpp2 option `-A` that resulted in
    error 13 `SOAP_NO_METHOD`.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1558008000">- Update to new upstream release 2.8.84
  * Unspecific minor fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550400">- Update to new upstream release 2.8.86
  * Added `soap::client_addr` string to specify a IPv4 or IPv6 or
    a host address to bind to before connecting. This can be used
    at the client side to bind to an address before connecting to
    a server endpoint, similar to `soap::client_port`.
  * Fixed wsdl2h compilation issue with C++17.
  * Fixed a problem with the `SOAP_SSL_DEFAULT` settings
    parameter used with `soap_ssl_client_context` and
    `soap_ssl_server_context` that may lead to a weaker setting
    than specified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550401">- Update to new upstream release 2.8.87
  * Added `soap::connect_retry` to specify a number of retries at
    the client side when connecting to a server fails, with
    exponential backoff of 2^n seconds between retries.
    Zero by default, meaning no retries.
  * Added `soap::client_addr_ipv6` to optionally specify a IPv6 or
    host address to bind to at the client side, when the
    destination is a IPv6 server. Otherwise uses
    `soap::client_addr` to bind.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565524800">- Update to new upstream release 2.8.89
  * Added wsdl2h option `-X` to do not qualify part names in
    order to disambiguate document/literal wrapped patterns (as
    the other choice to disambiguate instead of the default
    qualification with schema namespaces).
  * Added wsdl2h option `-z8` for backward compatibility with
    2.8.74 and earlier: don't qualify part names to disambiguate
    doc/lit wrapped patterns and revert to the old wrapper
    class/struct naming used for `xs:anyType` inheritance.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565784000">- Update to new upstream release 2.8.90
  * Internal changes related to gsoap's own build only.
- Add revert-z.diff to counter a regression in handling the
  soapcpp2 "-z" option introduced in 2.8.89.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565870400">- Update to new upstream release 2.8.91
  * Correction to fix soapcpp2 2.8.90 `-z#` flag enforcement
    problem.
- Removed revert-z.diff (solved upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 2.8.92
  * Fixed soapcpp2-generated call to `soap_DELETE` for REST
    DELETE operations.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1569499200">- Update to release 2.8.93
  * Fixed a wsdl2h schema import/include issue when a `./` occurs
    in schemaLocation` and schema import/include dependencies are
    cyclic, causing wsdl2h to not be able to locate and read
    schema files.
  * Removed empty substitutionGroup and duplicate
    substitutionGroup elements in wsdl2h-generated
    `SUBSTITUTIONS` sections.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1571400000">- Update to release 2.8.94
  * Fixed a wsdl2h issue that caused it to omit names for local
    simpleType restrictions in the generated `enum` types of
    struct/class members; improved soapcpp2 to avoid `enum`
    symbol numbering clashes in the generated source code.
  * Removed unnecessary namespace prefixes from some class/struct
    members in the source code generated by wsdl2h in a specific
    case, to prevent XML validation issues.
  * Added wsdl2h option `-z9` for backward compatibility of
    2.8.94 and greater to versions 2.8.93 and lesser, which
    reverts the namespace change.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1574164800">- Update to release 2.8.95
  * Upgraded smdevp.c to replace deprecated OpenSSL API function.
  * Updated WS-Security WSSE plugin, documentation, and demo.
  * Improved soapcpp2 execution speed to generate WSDL and
    XSD files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576152000">- Update to release 2.8.96
  * Improved `soap_check_mime_attachments()` and
    `soap_recv_mime_attachment()` functions and documentation,
    ensure proper close when MIME/MTOM errors occur.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578484800">- Update to release 2.8.97
  * Fixed wsdl2h processing of schemas with a cyclic schema
    `&lt;xs:include&gt;` that may cause wsdl2h to hang when schemas
    have no `targetNamespace` attribute.
  * Improved wsdl2h code generation of unqualified types and
    names defined in imported schemas (with `&lt;xs:import&gt;`) when
    these schemas have no `targetNamespace`. Use wsdl2h option
    `-z10` or lesser to revert to the code generation behavior of
    versions prior to 2.8.97.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Temporarily work around -fno-common build failure [boo#1160267].</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582459200">- Update to release 2.8.98
  * Updated the WS-Security and WS-Trust APIs that use SAML with
    higher precision timestamps in microseconds, using the
    `custom/struct_timeval.h` serializer for `xsd__dateTime`. The
    WS-Security and WS-Trust updates require compiling and
    linking with `custom/struct_timeval.c`.
  * Fixed an issue with soapcpp2 code generation of `wchar_t*`
    serializers when combined with a custom serializer with base
    type `wchar_t*`, i.e. when `extern typedef wchar_t* name` is
    declared.
  * Fixed an issue with soapcpp2 code generation when an element
    tag names starts with an underscore and the element is
    namespace qualified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584532800">- Update to release 2.8.99
  * Improved performance of the soapcpp2 tool.
  * Improved proxy connectivity on the client side with
    `soap::proxy_host`, `soap::proxy_port`, and NTLM, to maintain
    HTTP headers, e.g. `soap::http_content` and
    `soap::http_extra_header`.
  * Fixed a bug in HTTP cookie handling when the optional
    `-DWITH_COOKIES` flag is used. Note that cookie support is
    disabled by default or has no effect when deploying robust
    services with the gSOAP Apache modules and ISAPI extensions
    that handle cookies differently.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586347200">- Update to release 2.8.100
  * Improved proxy connectivity on the client side to handle bearer
    authentication.
  * Improved soapcpp2 handling of the `#module` directive.
  * Fixed an MTOM flag clearing issue hampering MTOM usability.
- Add gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586433600">- Update to release 2.8.101
  * Fix read beyond end-of-buffer in soap_accept
  * Other unspecified improvements
- Drop gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589544000">- Update to release 2.8.102
  * Improved HTTP digest authentication plugin to cover
    additional HTTP methods.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619438400">- Add gsoap-plugins-hardening.patch,
  gsoap-url-parse-hardening.patch, gsoap-wsse.patch
  [boo#1182098, CVE-2020-13576]</changelog>
</package>
<package pkgid="ddfcb6c3850a49982d1d0846b41d5af3bd41aeb8184b69a525410b0cf4cc3862" name="gsoap-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.102" rel="lp152.2.3.1"/>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1556020800">- Update to new upstream release 2.8.83
  * Added wsdl2h optimization options `-Ow2`, `-Ow3`, and `-Ow4`
    to optimize the generated source code by schema slicing,
    while retaining all derived extensions of base types.
  * Added wsdl2h option `-Q` to make `xsd__anySimpleType` equal
    to `xsd__anyType` to use as the base type for derived types,
    so that elements of type `xsd:anySimpleType` can be
    serialized with a derived type, using inheritance in C++ and
    by using simulated inheritance in C using wsdl2h option `-F`.
  * Updated wsdl2h options `-p` and `-F` to generate additional
    wrappers for primitive types that aren't XSD primitive types,
    such as `SOAP-ENC:base64`.
  * Improved wsdl2h output for the infrequently-used
    `SOAP-ENC:Array` type.
  * Fixed an issue with soapcpp2 option `-A` that resulted in
    error 13 `SOAP_NO_METHOD`.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1558008000">- Update to new upstream release 2.8.84
  * Unspecific minor fixes.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550400">- Update to new upstream release 2.8.86
  * Added `soap::client_addr` string to specify a IPv4 or IPv6 or
    a host address to bind to before connecting. This can be used
    at the client side to bind to an address before connecting to
    a server endpoint, similar to `soap::client_port`.
  * Fixed wsdl2h compilation issue with C++17.
  * Fixed a problem with the `SOAP_SSL_DEFAULT` settings
    parameter used with `soap_ssl_client_context` and
    `soap_ssl_server_context` that may lead to a weaker setting
    than specified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1561550401">- Update to new upstream release 2.8.87
  * Added `soap::connect_retry` to specify a number of retries at
    the client side when connecting to a server fails, with
    exponential backoff of 2^n seconds between retries.
    Zero by default, meaning no retries.
  * Added `soap::client_addr_ipv6` to optionally specify a IPv6 or
    host address to bind to at the client side, when the
    destination is a IPv6 server. Otherwise uses
    `soap::client_addr` to bind.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565524800">- Update to new upstream release 2.8.89
  * Added wsdl2h option `-X` to do not qualify part names in
    order to disambiguate document/literal wrapped patterns (as
    the other choice to disambiguate instead of the default
    qualification with schema namespaces).
  * Added wsdl2h option `-z8` for backward compatibility with
    2.8.74 and earlier: don't qualify part names to disambiguate
    doc/lit wrapped patterns and revert to the old wrapper
    class/struct naming used for `xs:anyType` inheritance.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565784000">- Update to new upstream release 2.8.90
  * Internal changes related to gsoap's own build only.
- Add revert-z.diff to counter a regression in handling the
  soapcpp2 "-z" option introduced in 2.8.89.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1565870400">- Update to new upstream release 2.8.91
  * Correction to fix soapcpp2 2.8.90 `-z#` flag enforcement
    problem.
- Removed revert-z.diff (solved upstream)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1568721600">- Update to release 2.8.92
  * Fixed soapcpp2-generated call to `soap_DELETE` for REST
    DELETE operations.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1569499200">- Update to release 2.8.93
  * Fixed a wsdl2h schema import/include issue when a `./` occurs
    in schemaLocation` and schema import/include dependencies are
    cyclic, causing wsdl2h to not be able to locate and read
    schema files.
  * Removed empty substitutionGroup and duplicate
    substitutionGroup elements in wsdl2h-generated
    `SUBSTITUTIONS` sections.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1571400000">- Update to release 2.8.94
  * Fixed a wsdl2h issue that caused it to omit names for local
    simpleType restrictions in the generated `enum` types of
    struct/class members; improved soapcpp2 to avoid `enum`
    symbol numbering clashes in the generated source code.
  * Removed unnecessary namespace prefixes from some class/struct
    members in the source code generated by wsdl2h in a specific
    case, to prevent XML validation issues.
  * Added wsdl2h option `-z9` for backward compatibility of
    2.8.94 and greater to versions 2.8.93 and lesser, which
    reverts the namespace change.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1574164800">- Update to release 2.8.95
  * Upgraded smdevp.c to replace deprecated OpenSSL API function.
  * Updated WS-Security WSSE plugin, documentation, and demo.
  * Improved soapcpp2 execution speed to generate WSDL and
    XSD files.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1576152000">- Update to release 2.8.96
  * Improved `soap_check_mime_attachments()` and
    `soap_recv_mime_attachment()` functions and documentation,
    ensure proper close when MIME/MTOM errors occur.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578484800">- Update to release 2.8.97
  * Fixed wsdl2h processing of schemas with a cyclic schema
    `&lt;xs:include&gt;` that may cause wsdl2h to hang when schemas
    have no `targetNamespace` attribute.
  * Improved wsdl2h code generation of unqualified types and
    names defined in imported schemas (with `&lt;xs:import&gt;`) when
    these schemas have no `targetNamespace`. Use wsdl2h option
    `-z10` or lesser to revert to the code generation behavior of
    versions prior to 2.8.97.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1578830400">- Temporarily work around -fno-common build failure [boo#1160267].</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1582459200">- Update to release 2.8.98
  * Updated the WS-Security and WS-Trust APIs that use SAML with
    higher precision timestamps in microseconds, using the
    `custom/struct_timeval.h` serializer for `xsd__dateTime`. The
    WS-Security and WS-Trust updates require compiling and
    linking with `custom/struct_timeval.c`.
  * Fixed an issue with soapcpp2 code generation of `wchar_t*`
    serializers when combined with a custom serializer with base
    type `wchar_t*`, i.e. when `extern typedef wchar_t* name` is
    declared.
  * Fixed an issue with soapcpp2 code generation when an element
    tag names starts with an underscore and the element is
    namespace qualified.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1584532800">- Update to release 2.8.99
  * Improved performance of the soapcpp2 tool.
  * Improved proxy connectivity on the client side with
    `soap::proxy_host`, `soap::proxy_port`, and NTLM, to maintain
    HTTP headers, e.g. `soap::http_content` and
    `soap::http_extra_header`.
  * Fixed a bug in HTTP cookie handling when the optional
    `-DWITH_COOKIES` flag is used. Note that cookie support is
    disabled by default or has no effect when deploying robust
    services with the gSOAP Apache modules and ISAPI extensions
    that handle cookies differently.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586347200">- Update to release 2.8.100
  * Improved proxy connectivity on the client side to handle bearer
    authentication.
  * Improved soapcpp2 handling of the `#module` directive.
  * Fixed an MTOM flag clearing issue hampering MTOM usability.
- Add gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1586433600">- Update to release 2.8.101
  * Fix read beyond end-of-buffer in soap_accept
  * Other unspecified improvements
- Drop gs99-overrun.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1589544000">- Update to release 2.8.102
  * Improved HTTP digest authentication plugin to cover
    additional HTTP methods.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1619438400">- Add gsoap-plugins-hardening.patch,
  gsoap-url-parse-hardening.patch, gsoap-wsse.patch
  [boo#1182098, CVE-2020-13576]</changelog>
</package>
<package pkgid="7f28df80699fe08338c5fd60c0f3fa7fe30c0a56d5b628eb0e30e528856e5170" name="gssproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.2.3.1"/>
  <changelog author="nfbrown@suse.com" date="1489060800">- Initial check-in of version 0.7.0
  gssproxy is needed on the NFS server if krb5 is used for NFS
  authentication using an AD directory server.
  /etc/krb5.conf may need "auth_to_local = RULE:[1:$1@$0]" on
  the "realms" section when "winbind" is used for nsswitch.conf.
  (bsc#1024309)(FATE#322526)
- gp_config.fix
  0001-Add-support-for-the-NO_CI_FLAG-credentials-option.REVERT
  0002-Add-test-to-check-setting-cred-options.REVERT
  Conditionally allow compilation on older releases.</changelog>
  <changelog author="nfbrown@suse.com" date="1490011200">- gssproxy.spec - lots of tidy up, particularly using
  pkgconfig() for BuildRequires</changelog>
  <changelog author="nfbrown@suse.com" date="1507464000">- 0003-Include-header-for-writev.patch
  upstream patch to fix build error</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558526400">- Update to 0.8.2:
  * no actual changelog, many bugfixes and friends
- Remove no longer appplicable stuff:
  * 0001-Add-support-for-the-NO_CI_FLAG-credentials-option.REVERT
  * 0002-Add-test-to-check-setting-cred-options.REVERT
  * 0003-Include-header-for-writev.patch
  * gp_config.fix
- Remove localy created .pc files</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Add patch to disable one test that fails in OBS only:
  * disable-failing-test.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix paths in tests and replace python's f-string usage
- Test are passing in OBS, drop patch disable-failing-test.patch
- Added patches:
  * 0001-Fix-runtests.py.patch
- Removed patches:
  * disable-failing-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-12658 [bsc#1180515], unlock cond_mutex issue before pthread exit in gp_worker_main()
  + gssproxy-CVE-2020-12658.patch</changelog>
</package>
<package pkgid="995820fb65687b37f8ff8700e092cd18b4a20ae07b5bc754bd00f2706339c6e3" name="gssproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="lp152.2.3.1"/>
  <changelog author="nfbrown@suse.com" date="1489060800">- Initial check-in of version 0.7.0
  gssproxy is needed on the NFS server if krb5 is used for NFS
  authentication using an AD directory server.
  /etc/krb5.conf may need "auth_to_local = RULE:[1:$1@$0]" on
  the "realms" section when "winbind" is used for nsswitch.conf.
  (bsc#1024309)(FATE#322526)
- gp_config.fix
  0001-Add-support-for-the-NO_CI_FLAG-credentials-option.REVERT
  0002-Add-test-to-check-setting-cred-options.REVERT
  Conditionally allow compilation on older releases.</changelog>
  <changelog author="nfbrown@suse.com" date="1490011200">- gssproxy.spec - lots of tidy up, particularly using
  pkgconfig() for BuildRequires</changelog>
  <changelog author="nfbrown@suse.com" date="1507464000">- 0003-Include-header-for-writev.patch
  upstream patch to fix build error</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1558526400">- Update to 0.8.2:
  * no actual changelog, many bugfixes and friends
- Remove no longer appplicable stuff:
  * 0001-Add-support-for-the-NO_CI_FLAG-credentials-option.REVERT
  * 0002-Add-test-to-check-setting-cred-options.REVERT
  * 0003-Include-header-for-writev.patch
  * gp_config.fix
- Remove localy created .pc files</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1561982400">- Add patch to disable one test that fails in OBS only:
  * disable-failing-test.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1562241600">- Fix paths in tests and replace python's f-string usage
- Test are passing in OBS, drop patch disable-failing-test.patch
- Added patches:
  * 0001-Fix-runtests.py.patch
- Removed patches:
  * disable-failing-test.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-12658 [bsc#1180515], unlock cond_mutex issue before pthread exit in gp_worker_main()
  + gssproxy-CVE-2020-12658.patch</changelog>
</package>
<package pkgid="a854c0a6d7866ed03f816adf1050de7fd38c48c9f2af4aa2c4f02d05f7c84271" name="gstreamer-plugin-pipewire-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp152.2.3.1"/>
  <changelog author="Markus S &lt;kamikazow@opensuse.org&gt;" date="1558526400">- Update to version 0.2.6:
  + Improve error checking for threads.
  + Fix some memory and fd leaks.
  + Fix compilation with C++ compilers and clang.
  + DISABLE_RTKIT should now not try to use dbus at all.
  + Camera Portal fixes:
  - add Camera media.role.
  - Rename module-flatpak to module-portal.
  - Use the portal permissions store for camera checks.
  + Actually use the passed fd in pipewiresrc.
  + Make properties with "pipewire." prefix read-only.
  + Add security label to client object.
  + Enforce link permissions.
  + Permissions of objects are now combined with parent
    permissions.
  + Remove libv4l2 dependency, it is not used.
  + Improve format negotiation in autolink #146.
  + Try to avoid list corruption with event emmission #143.
  + Fix destroy of client-node memory corruption.
  + Various small improvements.
- Remove pkgconfig(libv4l2) BuildRequires: follow upstreams cleanup
  of build dependencies.
- Drop avoid-invalid-conversion-error-with-C++.patch: fixed
  upstream.</changelog>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1573041600">- Update to version 0.2.7:
  + Add support for alsa-lib 1.1.9 which changed the include path
  + Improve error checking and reporting in the protocol
  + deviceprovider: fix probing without starting
  + add sentinel to some functions
  + compiler fixes for musl
  + Revert object tree permission checks that broke things, this is
    probably not a good idea (and the tree of objects is going to
    be removed later)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582200000">- Update to version 0.3.0:
  + The 0.3 release is a major milestone in the developement of
    PipeWire. It features a complete redesign of the scheduling
    mechanisms that make it possible to run a JACK compatibility
    layer with comparable performance to JACK2.
  + The API has been reworked and is declared stable now. All
    developement files and runtime paths are versioned so that
    future incompatible changes can be done without breaking
    exising applications.
  + PipeWire 0.3 also includes a (now mandatory) session manager
    that populates and controls the PipeWire graph. This example
    session manager is very simple and not configurable. It is
    expected that future version will either switch to a more
    flexible session manager (like WirePlumber) or improve the
    configuration options of the example session manager.
  + PipeWire 0.3 includes both PulseAudio, JACK and ALSA
    compatibility libraries that are known to support a wide range
    of applications. The ALSA library is pretty complete at this
    point. The JACK and mostly the PulseAudio compatibility
    libraries need more work. See the Wiki pages for the current
    compatibility problems. We do not yet encourage people to
    switch away from their existing audio solutions (PulseAudio
    or JACK) but we would love to hear from people who try it
    anyways. Future versions will mostly focus on improving
    compatibility further to make PipeWire a drop-in replacement.
    PipeWire comes with some GStreamer plugins to consume and
    produce data for PipeWire. The consumer (pipewiresrc) is
    working well in most cases. The sink (pipewiresink) is known
    to be somewhat problematic for now.
- Add pkgconfig(bluez) and pkgconfig(libpulse) BuildRequires: New
  dependencies.
- Bump libpipewire, apiver and spa_ver define following upstreams
  changes. Also add a new sover define.
- Package new subpackages: libjack-pw0_3_0,
  libpulse-mainloop-glib-pw0_3_0, libpulse-pw0_3_0 and
  libpulse-simple-pw0_3_0, as well as handle them in post(un).
- Adjust options passed to meson following upstreams changes.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1582286400">- Add BuildRequires for pkgconfig(sndfile) and pkgconfig(vulkan)
  so the vulkan plugin is built.
- Version the spa-plugins subpackage so different versions of
  the plugins can be co-installed in the future.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1582286401">- Add patch to build correctly with glibc &lt; 2.27 (like in SLE/Leap):
  * fix-memfd_create-call.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1583755200">- Update to version 0.3.1:
  + This is a bugfix release that is API and ABI compatible
    with previous 0.3.x releases.
  + Don't load the rtkit module by default. It can cause a
    sigkill, which is not desirable for mutter, for example.
    Only enable this for the jack library for now.
  + Don't use pthread cancel by default because it uses a
    signal that might crash some apps. Only use it for
    the jack library because jack clients really expect this.
  + Build fixes for -Werror=suggest-attribute=format
  + improve error messages, don't report harmless errors and
    warnings. Try to send error messages to the proxy that
    started the operation or is the owner of the object.
  + pw-cat: midi improvement, add midi recording and dump
    in verbose mode
  + fix properties when loading spa-nodes from the config
  + Fix and update some examples
  + jack: check arguments and don't crash when invalid
  + Fix buffer memory upload.
  + jack: fix compatibility with zrythm. Fix timemaster
    install, improve sample_rate callback. Fix reposition
    handling.
  + fix crash in port after buffer negotiation error.
  + add support for control ports in pw_filter
  + fix cleanup of the metadata module
  + improve param enumeration.
  + Clear stream buffers when the format is cleared.
  + Add create-object command in the config file to create
    object from a factory.
  + Fix crash after the driver was not removed from unassigned
    nodes. Also properly pause inactive nodes.
  + Use "true" and "false" in properties when we are talking
    about a boolean.
  + pulseaudio: improve compatibility</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584446400">- Switch license to MIT and actually package it.
- Add doxygen, graphviz and xmltoman BuildRequires and pass docs
  and man = true to meson, build documentation. Package docs in a
  new docs sub-package.
- Add check section and run meson_test macro, run tests during
  build.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Switch to source service, update to explicit head, file with
  non-compliant license replaced.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584964800">- Update to version 0.3.1+48:
  + Fix 32bit build.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656000">- Update to version 0.3.2:
  + build fixes
  + Added support for data type negotiation. This makes it
    possible for a client to say that it can handle DMABuf
    and MemFd and then let the server select a compatible
    format.
  + Handle errors when enumerating parameters better.
  + Add support for rate, format, channels and period_bytes
    to the alsa config file to restrict what alsa apps can
    negotiate.
  + Fix JACK midi output.
  + Optimizations in common audio format conversions using
    AVX2. Small optimizations to plugins.
  + Change the vulkan compute example to an MIT licensed
    shader.
  + Remove some hardcoded defaults in the audio and video
    processing and use the values from the processing
    context. This also fixes the vulkan example.
  + Correct the documentation and defaults in the daemon
    config file.
  + Fix alsa and v4l2 buffer recycle. A paused client could
    cause the server to leak all buffers.
  + Remove some warnings that should be ignored.
  + Fix a crash in the bluez5 plugins.
  + Try to select higher quality formats first when
    negotiating a format with an audio device.
  + Fix an infinite loop in udev detection in some cases.
  + Add non-interactive mode to pw-cli. You can now just
    do "pw-cli ls Port" to get a listing of all ports.
    pw-cli will now also connect to the default server by
    default and has options to select a different server.
  + Allow the server to go up to the maximum quantum (8192
    samples or ~=180ms) if a client explicitly wants this.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Use gcc9 to build in SLE-15 / Leap 15, since at least gcc8 is
  needed now.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585742400">- Use the License rpm tag to specify that although most of
  pipewire is licensed under MIT,  the pulseaudio replacement
  library is licensed under LGPL-2.1+.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589889600">- Update to version 0.3.5:
  * Compiler fixes
  * Add pw-midiplay and pw-midirecord aliases
  * Add pw-mididump tool
  * Add pw-metadata tool to inspect, add and remove metadata
    for objects.
  * Docs updates, man pages
  * install alsa config files
  * Fix linked sink/source in pulseaudio
  * ratelimit graph processing warnings
  * improve buffer handling in GStreamer elements
  * Fix power usage by removing the queue for the alsa
    sequencer system announce messages.
  * Fix metadata clear() method dispatch.
  * Improve parameter enumeration, make it possible to detect
    missing parameters vs no-compatible parameters so that we
    can use defaults in the first case and error in the second
    case.
  * Fix cleanup of proxy objects. Stability improvements on
    plug/unplug in session manager.
  * Make it possible to set log level from config file
  * improve debug of param negotiation errors. Log the
    parameters to stderr/journal.
  * Make it possible to configure global logger
    implementation.
  * Fix NEON detection
  * JACK and PulseAudio compatibility improvements
- Update to version 0.3.4:
  * A quick update with some important stability fixes.
- Update to version 0.3.3:
  * NEON optimizations for audio conversion (32 and 64 bits)
  * rework of session manager implementation
  * Add option to disable modules in the session manager
  * Release midi hardware devices when suspended
  * various build fixes
  * Clean up options of various utils
  * Stability improvements
  * Mayor improvements in pulseaudio emulation. Improved
    timings and compatibility.
  * Implementation of drain and flush in pulse and alsa
    emulation.
  * Implement poll on file descriptors.
  * Improvement of metadata for jack emulation.
  * Fix memory and thread problems in jack emulation.
  * Simplification of state changes. Should make more use
    cases work in the jack emulation.
  * Improvements in the gstreamer elements. Removal of
    extra internal queue. pipewiresink can now be used to
    play audio.
  * Add pw-jack and pw-pulse scripts to run pulseaudio and
    jack applications with the right library path.
- Replace libpulse* replacement packages with a single
  pipewire-libpulse-0_3 package that includes all libraries
  installed in the non-standard directory
  %{_libdir}/pipewire-0.3/pulse and a new pw-pulse wrapper script.
  Likewise for the jack replacement libraries in a new
  pipewire-libjack-0_3 package.
- Use update-alternatives for the wrapper scripts.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590062400">- Add patch to fix build in SLE/Leap where alsa doesn't have a
  snd_pcm_ioplug_hw_avail function:
  * do-not-use-snd_pcm_ioplug_hw_avail.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590062401">- Filter out libpulse.so.0 and libjack.so.0 automatic provides so
  this is not considered an alternative when resolving dependencies
  in the distribution.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1592308800">- Update to version 0.3.6 (boo#1171433, jsc#ECO-2308):
  * Extensive memory leak fixing and stress testing was done.
    A big leak in screen sharing with DMA-BUF was fixed.
  * Compile fixes
  * Stability improvements in jack and pulseaudio layers.
  * Added the old portal module to make the Camera portal
    work again. This will be moved to the session manager in
    future versions.
  * Improvements to the GStreamer source and sink shutdown.
  * Fix compatibility with v2 clients again when negotiating
    buffers.
- Disable vulkan if the vulkan package is too old (as in
  SLE 15 SP0 and SP1)
- Add patch to build with meson &gt;= 0.46.0 since 0.50.0 is not
  really needed:
  * fix-meson-required-version.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593777600">- Rebase patches used in SLE/Leap:
  * do-not-use-snd_pcm_ioplug_hw_avail.patch
  * fix-memfd_create-call.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594728000">- Add patches from upstream to fix many issues mainly related to
  memory leaks, crashes and wrong behaviour:
  * 0001-client-node-fix-buffer-size-calculation.patch
  * 0002-gst-fix-proxy-leaks.patch
  * 0003-pulse-fix-pa_card_info-profiles2-array-to-be-NULL-terminated.patch
  * 0004-pulse-fix-size-calculation.patch
  * 0005-jack-fix-crash-on-close-when-metadata-are-not-available.patch
  * 0006-a2dpsink-only-request-new-data-when-buffer-is-done.patch
  * 0007-pulse-fix-counter-while-populating-car_info-profiles.patch
  * 0008-impl-link-reset-state-before-starting-allocation.patch
  * 0009-impl-core-clear-the-mempool.patch
  * 0010-mem-reset-the-map-in-clear.patch
  * 0011-avoid-uninitialized-variables.patch
  * 0012-dlclose-on-errors.patch
  * 0013-stream-handle-NULL-context.patch
  * 0014-state-always-update-state-variables.patch
  * 0015-spa-device-fix-leak-of-properties-in-error-case.patch
  * 0016-alsa-dont-leak-structure-on-error.patch
  * 0017-alsa-dont-leak-properties-on-error.patch
  * 0018-stream-fix-some-more-leaks-in-error-paths.patch
  * 0019-buffers-increase-max-datas-and-metadata-in-buffers.patch
  * 0020-gst-return-NULL-for-unknown-format.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594814400">- Recommend pipewire from libpipewire, so if the library is
  installed the daemon gets pulled in since we want a daemon
  to connect to.
- Require pipewire-spa-plugins from pipewire instead of
  recommending it since the support plugin is actually required
  for most uses (like screen sharing in wayland, which we want to
  support out-of-the-box).
- Enable the pipewire.socket systemd user service in %post
  (using pulseaudio's %post section as an example of how to do it
  since systemd-presets-common-SUSE currently lacks support for
  user services). Also disable it in %preun and %postun.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594814401">- Require pipewire from libpipewire (instead of Recommending it)
  in SLE/Leap, so a zypper update of the system pulls in the
  pipewire daemon. Add a note to change it back to a
  recommendation when the api version changes which would make
  recommendations get reevaluated by zypper (jsc#ECO-2308)</changelog>
</package>
<package pkgid="6955ed570cdad970d9c7ba143a530ee6a1f864d19b576465968f95774d8d60ad" name="gstreamer-plugin-pipewire-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.3.6" rel="lp152.2.6.1"/>
  <changelog author="Fabian Vogt &lt;fvogt@suse.com&gt;" date="1573041600">- Update to version 0.2.7:
  + Add support for alsa-lib 1.1.9 which changed the include path
  + Improve error checking and reporting in the protocol
  + deviceprovider: fix probing without starting
  + add sentinel to some functions
  + compiler fixes for musl
  + Revert object tree permission checks that broke things, this is
    probably not a good idea (and the tree of objects is going to
    be removed later)</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1582200000">- Update to version 0.3.0:
  + The 0.3 release is a major milestone in the developement of
    PipeWire. It features a complete redesign of the scheduling
    mechanisms that make it possible to run a JACK compatibility
    layer with comparable performance to JACK2.
  + The API has been reworked and is declared stable now. All
    developement files and runtime paths are versioned so that
    future incompatible changes can be done without breaking
    exising applications.
  + PipeWire 0.3 also includes a (now mandatory) session manager
    that populates and controls the PipeWire graph. This example
    session manager is very simple and not configurable. It is
    expected that future version will either switch to a more
    flexible session manager (like WirePlumber) or improve the
    configuration options of the example session manager.
  + PipeWire 0.3 includes both PulseAudio, JACK and ALSA
    compatibility libraries that are known to support a wide range
    of applications. The ALSA library is pretty complete at this
    point. The JACK and mostly the PulseAudio compatibility
    libraries need more work. See the Wiki pages for the current
    compatibility problems. We do not yet encourage people to
    switch away from their existing audio solutions (PulseAudio
    or JACK) but we would love to hear from people who try it
    anyways. Future versions will mostly focus on improving
    compatibility further to make PipeWire a drop-in replacement.
    PipeWire comes with some GStreamer plugins to consume and
    produce data for PipeWire. The consumer (pipewiresrc) is
    working well in most cases. The sink (pipewiresink) is known
    to be somewhat problematic for now.
- Add pkgconfig(bluez) and pkgconfig(libpulse) BuildRequires: New
  dependencies.
- Bump libpipewire, apiver and spa_ver define following upstreams
  changes. Also add a new sover define.
- Package new subpackages: libjack-pw0_3_0,
  libpulse-mainloop-glib-pw0_3_0, libpulse-pw0_3_0 and
  libpulse-simple-pw0_3_0, as well as handle them in post(un).
- Adjust options passed to meson following upstreams changes.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1582286400">- Add BuildRequires for pkgconfig(sndfile) and pkgconfig(vulkan)
  so the vulkan plugin is built.
- Version the spa-plugins subpackage so different versions of
  the plugins can be co-installed in the future.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1582286401">- Add patch to build correctly with glibc &lt; 2.27 (like in SLE/Leap):
  * fix-memfd_create-call.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1583755200">- Update to version 0.3.1:
  + This is a bugfix release that is API and ABI compatible
    with previous 0.3.x releases.
  + Don't load the rtkit module by default. It can cause a
    sigkill, which is not desirable for mutter, for example.
    Only enable this for the jack library for now.
  + Don't use pthread cancel by default because it uses a
    signal that might crash some apps. Only use it for
    the jack library because jack clients really expect this.
  + Build fixes for -Werror=suggest-attribute=format
  + improve error messages, don't report harmless errors and
    warnings. Try to send error messages to the proxy that
    started the operation or is the owner of the object.
  + pw-cat: midi improvement, add midi recording and dump
    in verbose mode
  + fix properties when loading spa-nodes from the config
  + Fix and update some examples
  + jack: check arguments and don't crash when invalid
  + Fix buffer memory upload.
  + jack: fix compatibility with zrythm. Fix timemaster
    install, improve sample_rate callback. Fix reposition
    handling.
  + fix crash in port after buffer negotiation error.
  + add support for control ports in pw_filter
  + fix cleanup of the metadata module
  + improve param enumeration.
  + Clear stream buffers when the format is cleared.
  + Add create-object command in the config file to create
    object from a factory.
  + Fix crash after the driver was not removed from unassigned
    nodes. Also properly pause inactive nodes.
  + Use "true" and "false" in properties when we are talking
    about a boolean.
  + pulseaudio: improve compatibility</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584446400">- Switch license to MIT and actually package it.
- Add doxygen, graphviz and xmltoman BuildRequires and pass docs
  and man = true to meson, build documentation. Package docs in a
  new docs sub-package.
- Add check section and run meson_test macro, run tests during
  build.
- Add fdupes BuildRequires and pass fdupes macro, remove duplicate
  files.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584532800">- Switch to source service, update to explicit head, file with
  non-compliant license replaced.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1584964800">- Update to version 0.3.1+48:
  + Fix 32bit build.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656000">- Update to version 0.3.2:
  + build fixes
  + Added support for data type negotiation. This makes it
    possible for a client to say that it can handle DMABuf
    and MemFd and then let the server select a compatible
    format.
  + Handle errors when enumerating parameters better.
  + Add support for rate, format, channels and period_bytes
    to the alsa config file to restrict what alsa apps can
    negotiate.
  + Fix JACK midi output.
  + Optimizations in common audio format conversions using
    AVX2. Small optimizations to plugins.
  + Change the vulkan compute example to an MIT licensed
    shader.
  + Remove some hardcoded defaults in the audio and video
    processing and use the values from the processing
    context. This also fixes the vulkan example.
  + Correct the documentation and defaults in the daemon
    config file.
  + Fix alsa and v4l2 buffer recycle. A paused client could
    cause the server to leak all buffers.
  + Remove some warnings that should be ignored.
  + Fix a crash in the bluez5 plugins.
  + Try to select higher quality formats first when
    negotiating a format with an audio device.
  + Fix an infinite loop in udev detection in some cases.
  + Add non-interactive mode to pw-cli. You can now just
    do "pw-cli ls Port" to get a listing of all ports.
    pw-cli will now also connect to the default server by
    default and has options to select a different server.
  + Allow the server to go up to the maximum quantum (8192
    samples or ~=180ms) if a client explicitly wants this.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585656001">- Use gcc9 to build in SLE-15 / Leap 15, since at least gcc8 is
  needed now.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1585742400">- Use the License rpm tag to specify that although most of
  pipewire is licensed under MIT,  the pulseaudio replacement
  library is licensed under LGPL-2.1+.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589889600">- Update to version 0.3.5:
  * Compiler fixes
  * Add pw-midiplay and pw-midirecord aliases
  * Add pw-mididump tool
  * Add pw-metadata tool to inspect, add and remove metadata
    for objects.
  * Docs updates, man pages
  * install alsa config files
  * Fix linked sink/source in pulseaudio
  * ratelimit graph processing warnings
  * improve buffer handling in GStreamer elements
  * Fix power usage by removing the queue for the alsa
    sequencer system announce messages.
  * Fix metadata clear() method dispatch.
  * Improve parameter enumeration, make it possible to detect
    missing parameters vs no-compatible parameters so that we
    can use defaults in the first case and error in the second
    case.
  * Fix cleanup of proxy objects. Stability improvements on
    plug/unplug in session manager.
  * Make it possible to set log level from config file
  * improve debug of param negotiation errors. Log the
    parameters to stderr/journal.
  * Make it possible to configure global logger
    implementation.
  * Fix NEON detection
  * JACK and PulseAudio compatibility improvements
- Update to version 0.3.4:
  * A quick update with some important stability fixes.
- Update to version 0.3.3:
  * NEON optimizations for audio conversion (32 and 64 bits)
  * rework of session manager implementation
  * Add option to disable modules in the session manager
  * Release midi hardware devices when suspended
  * various build fixes
  * Clean up options of various utils
  * Stability improvements
  * Mayor improvements in pulseaudio emulation. Improved
    timings and compatibility.
  * Implementation of drain and flush in pulse and alsa
    emulation.
  * Implement poll on file descriptors.
  * Improvement of metadata for jack emulation.
  * Fix memory and thread problems in jack emulation.
  * Simplification of state changes. Should make more use
    cases work in the jack emulation.
  * Improvements in the gstreamer elements. Removal of
    extra internal queue. pipewiresink can now be used to
    play audio.
  * Add pw-jack and pw-pulse scripts to run pulseaudio and
    jack applications with the right library path.
- Replace libpulse* replacement packages with a single
  pipewire-libpulse-0_3 package that includes all libraries
  installed in the non-standard directory
  %{_libdir}/pipewire-0.3/pulse and a new pw-pulse wrapper script.
  Likewise for the jack replacement libraries in a new
  pipewire-libjack-0_3 package.
- Use update-alternatives for the wrapper scripts.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590062400">- Add patch to fix build in SLE/Leap where alsa doesn't have a
  snd_pcm_ioplug_hw_avail function:
  * do-not-use-snd_pcm_ioplug_hw_avail.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590062401">- Filter out libpulse.so.0 and libjack.so.0 automatic provides so
  this is not considered an alternative when resolving dependencies
  in the distribution.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1592308800">- Update to version 0.3.6 (boo#1171433, jsc#ECO-2308):
  * Extensive memory leak fixing and stress testing was done.
    A big leak in screen sharing with DMA-BUF was fixed.
  * Compile fixes
  * Stability improvements in jack and pulseaudio layers.
  * Added the old portal module to make the Camera portal
    work again. This will be moved to the session manager in
    future versions.
  * Improvements to the GStreamer source and sink shutdown.
  * Fix compatibility with v2 clients again when negotiating
    buffers.
- Disable vulkan if the vulkan package is too old (as in
  SLE 15 SP0 and SP1)
- Add patch to build with meson &gt;= 0.46.0 since 0.50.0 is not
  really needed:
  * fix-meson-required-version.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1593777600">- Rebase patches used in SLE/Leap:
  * do-not-use-snd_pcm_ioplug_hw_avail.patch
  * fix-memfd_create-call.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594728000">- Add patches from upstream to fix many issues mainly related to
  memory leaks, crashes and wrong behaviour:
  * 0001-client-node-fix-buffer-size-calculation.patch
  * 0002-gst-fix-proxy-leaks.patch
  * 0003-pulse-fix-pa_card_info-profiles2-array-to-be-NULL-terminated.patch
  * 0004-pulse-fix-size-calculation.patch
  * 0005-jack-fix-crash-on-close-when-metadata-are-not-available.patch
  * 0006-a2dpsink-only-request-new-data-when-buffer-is-done.patch
  * 0007-pulse-fix-counter-while-populating-car_info-profiles.patch
  * 0008-impl-link-reset-state-before-starting-allocation.patch
  * 0009-impl-core-clear-the-mempool.patch
  * 0010-mem-reset-the-map-in-clear.patch
  * 0011-avoid-uninitialized-variables.patch
  * 0012-dlclose-on-errors.patch
  * 0013-stream-handle-NULL-context.patch
  * 0014-state-always-update-state-variables.patch
  * 0015-spa-device-fix-leak-of-properties-in-error-case.patch
  * 0016-alsa-dont-leak-structure-on-error.patch
  * 0017-alsa-dont-leak-properties-on-error.patch
  * 0018-stream-fix-some-more-leaks-in-error-paths.patch
  * 0019-buffers-increase-max-datas-and-metadata-in-buffers.patch
  * 0020-gst-return-NULL-for-unknown-format.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594814400">- Recommend pipewire from libpipewire, so if the library is
  installed the daemon gets pulled in since we want a daemon
  to connect to.
- Require pipewire-spa-plugins from pipewire instead of
  recommending it since the support plugin is actually required
  for most uses (like screen sharing in wayland, which we want to
  support out-of-the-box).
- Enable the pipewire.socket systemd user service in %post
  (using pulseaudio's %post section as an example of how to do it
  since systemd-presets-common-SUSE currently lacks support for
  user services). Also disable it in %preun and %postun.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1594814401">- Require pipewire from libpipewire (instead of Recommending it)
  in SLE/Leap, so a zypper update of the system pulls in the
  pipewire daemon. Add a note to change it back to a
  recommendation when the api version changes which would make
  recommendations get reevaluated by zypper (jsc#ECO-2308)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1600776000">- Add patch from upstream to fix a division by 0 error
  (boo#1176515):
  * 0021-alsa-protect-against-SIGPFE.patch</changelog>
</package>
<package pkgid="864a0c85bc99c9fa706252f4d0e54b635daab033f3a666bb746b526f6ca26dec" name="gtk3-debugsource" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="3f8bb32805a21cec5ce43266eca69468b35f22796c84212882f22ce793a267c7" name="gtk3-debugsource" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="0b5b7d58390bc037da84f5c211595a7623d939281a70bc683e48cb376444cd35" name="gtk3-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="6c05b1afdc2dfad8708e750825ba0cdfc6fca3f184ba79b342254777c1c8357e" name="gtk3-devel-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="bc32a820f2f834f45383e93fb358f2bb1b31037c6e92d1e57bd460c2205d3df5" name="gtk3-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="76af4fa44b3ccf6e56d79414ebf6df5e7b5ac2d275037bbcc7087d4069969b99" name="gtk3-immodule-amharic-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="4f66b4c4847512ddf04668f201bf74173cf430d7a97a3468453c07194bac8cab" name="gtk3-immodule-amharic-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="5da22f9426616b99f0e8ae0418e98693894ebacb94b2b2f90e4c5531abd0b2e9" name="gtk3-immodule-amharic-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="050f09b0b84f8b9f3dfc44a42db5a0c7a2e51ef9adadb2a312d7413662bfa26e" name="gtk3-immodule-broadway-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="9d8c7972e57befdcfefc4a04a7f5914b3ff666cf77d8f6faaf4d2619bd43f931" name="gtk3-immodule-broadway-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="98cabf068294aeb68d1d39a5c7136621bf3d35561f79980371ebe867294e7ce0" name="gtk3-immodule-inuktitut-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="71cfb233f1e78d0fecf346c625038c189588e2c624df0d9b2fedc12c59df63be" name="gtk3-immodule-inuktitut-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="a641be90f87cd7052bec222d1f650da2a0fb47d197118ebf87ed9924de1bb2bd" name="gtk3-immodule-inuktitut-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="b5270c0b8e6e08631f4f00ec0dcc3f76fb9653ef5bdb9ffd4424d244186b320e" name="gtk3-immodule-multipress-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="fcfb27461b8b7b40af3b7035d24ce900d55ababd78451bfa5713d376f71115b9" name="gtk3-immodule-multipress-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="2edbb06300e47d14e8ddaaf7cc4dcb7716c60ba9b3967bbf2ed91d2cf5289f49" name="gtk3-immodule-multipress-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="5b520065752b2b6db75462c06f5c170fb087669e349edddbc372227941e44835" name="gtk3-immodule-thai-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="6e8519802628a084c7e334ad7099a0b4742a9d69c290da46379fd137573b3233" name="gtk3-immodule-thai-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="3de475e40606f994b334b3f4dfd7ad8f337be21115787cd4c7c648cd71644d61" name="gtk3-immodule-thai-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="7bdb2d764d3a0f7ae05ce4322b77b3ca5c3219b9db2a617d12c5c84e2e14f01e" name="gtk3-immodule-tigrigna-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="cf87462f5c2cb1e3c69a412ad450decb9a3a08eae3c484e780b4be20dcef9d56" name="gtk3-immodule-tigrigna-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="988aa01ce130076ba54f48ce43792ddcf1ae1c19076146d2d5616a5e8b41b199" name="gtk3-immodule-tigrigna-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="540337fa2f45f59824294288d40e5df74977a763261b2e595ef42567054615c8" name="gtk3-immodule-vietnamese-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="140c2bf718a90bab005359324fbbdda004e605c9cf71b97d49fc251b6babacaf" name="gtk3-immodule-vietnamese-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="057bc9a659f470ed36f71b6682cef3ffa723ba44eb454438b6ef32b3796c625d" name="gtk3-immodule-vietnamese-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="00ce88f7e2ae95a993ac822b674ed3ba1459e4875fc1fbf7c6dd3e66226cfc95" name="gtk3-immodule-wayland-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="5ca0a92ac93b54797efd2bee9259bde9d12760ef70b88858e1709e2ba1912c01" name="gtk3-immodule-wayland-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="596eb8105f1da0e0273b88f7f59ffba4559e7119c04e86550b0f63fa51511869" name="gtk3-immodule-wayland-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="0aa4ac69e0ccef233653529238135c0c853dcf3731fda544b24f944ff10d86ab" name="gtk3-immodule-xim-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="2434d36d604b90349606d45de97d744b7faf734d1a0f1b14d43c70e21584ff9d" name="gtk3-immodule-xim-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="c3eee42fac498730eb5b27e20f74276254ca87a55c1bab1bfa6be528afb5cdfc" name="gtk3-immodule-xim-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="369a8e3143a8f2cb78b1a77018d7ce91a7e87ff799d89c0f567bca2fc819f6f6" name="gtk3-tools-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="b01913af8edab8a61ab46fc64e4c4aeca00965db6a36331d2c1699e430d11f2f" name="gtk3-tools-debuginfo" arch="i586">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="98426586fb2e2d314612288b91ecfed54c8b69a99791ff9496bc602739fed61a" name="gtk3-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.24.20" rel="lp152.2.3.1"/>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1552392000">- Update to version 3.24.7:
  + Undeprecate gtk_window_present.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1554984000">- Update to version 3.24.8:
  + Color editor: don't warn if editing is cancelled.
  + Always redraw on allocate - not doing so is not safe when any
    widget can have a background.
  + Use GLSL 3.30 for shaders.
  + Quartz: add a preliminary GdkGLContext implementation.
  + Win32: Fix a bug that prevented storing printer driver prefs.
  + Wayland: properly place window menus.
  + GtkApplication: support session state changes in sandboxes,
    using the inhibit portal.
  + Fix a problem with autostart notification.
  + Places: Show loop devices as reported by gvfs.
  + Updated translations.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133119).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1557316800">- Move RPM macros to %_rpmmacrodir.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1560859200">- Update to version 3.24.9:
  + GTK can now be built with the meson build system.
  + Wayland:
  - Support the xdg-output protocol for correct monitor sizes
    with scaled displays.
  - Fix handling of cursor hotspots that was reading
    uninitialized memory.
  - Update tablet cursors when scale changes.
  + CSS: Use multiple font-family values (bsc#1134059,
    glgo#GNOME/gtk#1854).
  + Emoji: Populate the Emoji chooser incrementally.
  + Printing: Require CUPS 1.7.
  + Scrolling: Add a gtk-overlay-scrolling setting that can be used
    to force traditional (non-overlay) scrollbars.
  + GtkTreeView:
  - Update rubberband rectangles more often.
  - Remove the pixel cache, to avoid the redraw issues that it
    causes.
  + Tooling: Support sysprof profiling.
  + Themes:
  - Adwaita: Small tweaks to the theme refresh.
  - Adwaita: Update treeview progress bars.
  - HighContrast: Improve notebook tabs.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1562241600">- Update to version 3.24.10:
  + Make gtk_widget_get_action_group behave as documented.
  + Make gdk_screen_get_monitor_plug_name works as before.
  + Adwaita:
  - Update infobar look.
  - Fix some issues with submenus and popovers.
  + Wayland: Use the xdg-output protocol.
  + Fix build issues around cups.
  + Quartz: Build fixes.
  + treeview: Bring the pixel cache back, since its removal was
    causing problems in some applications.
  + Various documentation improvements.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1567598400">- Update to version 3.24.11:
  + Adwaita:
  - Add drop shadow to icons.
  - Small color fixes.
  - Make title buttons round.
  + Wayland:
  - Support xdg-output v3.
  - Fix clipboard ownership handling.
  + X11: Improve monitor metadata.
  + Build: Require GLib 2.57.2.
  + Updated translations.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1570190400">- Update to version 3.24.12:
  + file chooser: allow sorting by file type.
  + dnd: fix pointer offsets under X11 and Wayland.
  + broadway: Fix a font problem.
  + mir Drop this backend.
  + printing: Get PPD from original host if needed.
  + a11y: Fix interference with clutter a11y impl.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 3.24.12+32:
  + gdk: Do not change the windowing selection when cancelling
    source
  + Revert "gdk: Do not call gdk_selection_owner_set() internally
    to the backend"
  + gtkwidget: Ensure to run key controllers in the bubble phase
  + keycontroller: Fix ::key-released signal argument
  + key controller: Don't eat modifier events
  + gdk: Do not call gdk_selection_owner_set() internally to the
    backend
  + gdk: Shuffle the situations where a selection is unset
  + gtkwidget: Forward unhandled scroll events through controllers
- Switch to gitcheckout of stable branch, needed to get fixes for
  copy/paste between Xwayland and wayland programs.
- Following the above, add gtk-doc and libtool BuildRequires and
  pass autogen.sh to bootstrap and --enable-gtk-doc to configure.
- No longer disable LTO, current versions of gtk3 builds fine with
  it enabled.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1572609600">- Don't recommend -lang subpackage</changelog>
  <changelog author="Frederic Crozat &lt;fcrozat@suse.com&gt;" date="1574164800">- Add Obsoletes/Provides to baselibs.conf to ensure
  gtk3-immodules-tigrigna-32bit can be upgraded from old version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574856000">- Update to version 3.24.13+0:
  + Fix a11y test output
  + HighContrast: Add missing color to entry
  + themes: remove various @extend with compound selectors
  + Avoid Broadwayd - GtkEntry popup takes 35s after application
    startup.
  + Hide Objective-C from outside GdkQuartz.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576065600">- Split API doc generation from main package using _multibuild,
  libgtk3 itself only takes a fraction of the time to build.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1578657600">- Move /usr/share/locale/en from the -lang package to the -data
  package: English is installed on all systems. This avoids
  gtk3-lang being triggered for installation on english-only
  systems.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 3.24.14:
  + Fix the opaque region for windows on X11.
  + Theme:
  - Fix flat buttons in backdrop.
  - Make popovers look more similar to menus.
  - Tweak checkbox &amp; radiobutton appearance.
  - Add general typography classes (heading, title-1, etc).
  + Language bindings: Fix annotations for
    gtk_tree_model_sort_new_with_model.
  + Switch: Fix touch support.
  + Infobar: Make clickable for default action.
  + Emojichooser: Respect a no-emoji input hint.
  + Fontchooser: Fix an oversight with hiding the size label.
  + Filechooser: Disable recursive search without a system indexer.
  + Modelbutton: Fix a11y support to reflect button state.
  + Input: Fix touchpad gesture center calculation.
  + X11:
  - Fix root window scaling.
  - Support _GTK_WORKAREAS_Dn property.
  + Wayland:
  - Support a terminal purpose in input methods.
  - Fix preedit cursor positioning.
  - Fix enabling/disabling of text inputs.
  - Support simultaneous selection requests.
  - Require Wayland 1.14.91.
  + Printing: Fix a crash with Avahi.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1585396800">- Update to version 3.24.16:
  + Fix the build.
- Changes from version 3.24.15:
  + filechooser:
  - Fix a crash.
  - Support selecting directories with a new enough file chooser
    portal.
  + textview: Speed up tag handling.
  + wayland:
  - Fix problems with clipboard handling.
  - Fix a crash in the Wayland input method.
  - Support cursor scale of 400%.
  - Fix a crash in glade.
  + css: Support font-feature-settings
  + Adwaita:
  - Use tabular figures where appropriate.
  - Color tweaks for dark mode.
  - Improve rendering of rounded corners.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586001600">- Update to version 3.24.17:
  + GtkFileChooser: Fix some keynav issues.
  + GtkMenuButton: disable focus-on-click.
  + Derive the HighContrast and HighContrastInverse themes from
    Adwaita.
  + Wayland:
  - Fix firefox sizing problems.
  - Prevent Alt lingering after Alt-Tab.
  - Load compose sequences from ~/.Compose.
  - Fix a crash in the Wayland input method.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1586520000">- Update to version 3.24.18:
  + Wayland: Fix more sizing regressions in Epiphany and
    LibreOffice menus, and popups in general.
  + Build: Make resource build reproducible.
  + Updated translations.
- Disable autogeneration of .changes in service, we are currently
  using released tags so it is not needed.</changelog>
  <changelog author="Bj&#xF8;rn Lie &lt;bjorn.lie@gmail.com&gt;" date="1587988800">- Update to version 3.24.20:
  + GtkFileChooser:
  - Prevent selection changes after overwrite confirmation
  - Don't grab focus to the sidebar on click
  - Avoid a use-after-free in GtkFileSystemModel
  + GtkEmojiChooser: Remove blacklist
  + GtkAboutDialog: Add more licenses
  + Adwaita: Lower the contrast of checkboxes
  + HighContrast: Export the same public colors as Adwaita
  + Updated translations.</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1591272000">- Add gtk3-x11-fix-menu-touch-by-pointer-emulation.patch: GtkMenu
  under X11 cannot work with touchscreen because it cannot handle
  touch events properly, this patch disable touch grabbing for it,
  so it will fallback to pointer emulation while touching
  (bsc#1167951, glgo#GNOME/gtk!1794).</changelog>
</package>
<package pkgid="3296370bd237a96e61972426c450d27275e81479b8f9e33c66ba8417c96c0d01" name="gtkiterm-debuginfo" arch="i586">
  <version epoch="0" ver="0.5.20040304" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="88d00a6ae5306a0e9324caf2a300aafa410feaf75919809dbf0cbc4683c84470" name="gtkiterm-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1354017600">- license update: SUSE-CPL-0.5</changelog>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="e744ff2bd24e9c44bb36881eacca4139b8334c554b317b0eed0310885c286ac9" name="gvim-debuginfo" arch="i586">
  <version epoch="0" ver="8.0.1568" rel="lp152.8.3.1"/>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256)
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
</package>
<package pkgid="ed8e735ee58560a17d77c6381c19cea155ca9950d8e4f97adc1be6c689f76211" name="gvim-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp152.8.3.1"/>
  <changelog author="idonmez@suse.com" date="1513339200">- Updated to revision 1390, fixes the following problems
  * Balloon shows when cursor is in WinBar.
  * terminal test hangs, executing abcde. (Stucki)
  * Cannot drag status line or vertical separator of new terminal
    window. (UncleBill)
  * MS-Windows: drawing underline, curl and strike-throw is slow, mFallbackDC
    not properly updated.
  * Channel test for callback is flaky.
  * Shift-Insert doesn't always work in MS-Windows console.
  * Profile log may be truncated halfway a character.
  * No error when settting 'renderoptions' to an invalid value before starting
    the GUI.
  * CTRL-A does not work with an empty line. (Alex)
  * Window size wrong after maximizing with WinBar. (Lifepillar)
  * Cursor in terminal not always updated.
  * Cannot call a dict function in autoloaded dict.
  * Autoload script sources itself when defining function.
  * Configure check for selinux does not check for header file.
  * When recovering a file with "vim -r swapfile" the hit-enter prompt is
    at the top of the window.
  * ch_readraw() waits for NL if channel mode is NL.
  * Get "no write since last change" message if a terminal is open.
  * Local additions in help skips some files. (joshklod)
  * Not enough quickfix help; confusing winid.
  * Python 3.5 is getting old.
  * Cannot select modified buffers with getbufinfo().
  * Wordcount test is old style.
  * Char not overwritten with ambiguous width char, if the ambiguous char
    is single width but we reserve double-width space.
  * getqflist() items are missing if not set, that makes it more difficult
    to handle the values.
  * DirectX scrolling can be slow, vertical positioning is off.</changelog>
  <changelog author="idonmez@suse.com" date="1513771200">- Updated to revision 1417, fixes the following problems
  * Encoding empty string to JSON sometimes gives "null".
  * Build fails with --with-features=huge --disable-channel.
  * Too much highlighting with 'hlsearch' and 'incsearch' set.
  * Cannot intercept a yank command.
  * It is not easy to see if a colorscheme is well written.
  * Memory leak when CTRL-G in search command line fails.
  * Pattern with \&amp; following nothing gives an error.
  * :packadd does not load packages from the "start" directory.
  * Warnings and errors when building tiny version. (Tony Mechelynck)
  * Color scheme check script shows up as color scheme.
  * Cannot build with GTK but without XIM. (Guido)
  * Crash with nasty autocommand. (gy741, Dominique Pelle)
  * Using freed buffer in grep command. (gy741, Dominique Pelle)
  * Invalid memory access on exit when autocommands wipe out a buffer.
  * Duplicated code for getting a typed character. CursorHold is called too
    often in the GUI. (lilydjwg)
  * Difficult to track changes to a quickfix list.
  * GUI: CursorHold may trigger before 'updatetime' when using timers.
  * Crash in setqflist().
  * Buffer overflow in :tags command.
  * Hang when using count() with an empty string.
  * Reading invalid memory with CTRL-W :.
  * Using free memory using setloclist(). (Dominique Pelle)
  * Accessing freed memory in :cbuffer.
  * Accessing freed memory in :lfile.
  * Warning for unused function without timers feature.
  * Crash when searching for a sentence.
  * Test doesn't search for a sentence. Still fails when searching for start
    of sentence. (Dominique Pelle)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256)
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
</package>
<package pkgid="52d4646f91f03d30336c897f1ef9c64ac17f4c35ed933d666e637f7ce355be91" name="gvim-debuginfo" arch="i586">
  <version epoch="0" ver="8.0.1568" rel="lp152.8.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
</package>
<package pkgid="a70324223a8af79b5e1fe774da50dd7b21c9d78f3143daf2bef6ab9c0e72e887" name="gvim-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.0.1568" rel="lp152.8.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1515326400">- Update apparmor.vim (taken from AppArmor 2.12)
  * add support for the "smc" network keyword</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515412800">- ignore make check transient errors for PowerPC
  bypass boo#1072651</changelog>
  <changelog author="idonmez@suse.com" date="1515412801">- Updated to revision 1428, fixes the following problems
  * No test for expanding backticks.
  * Cursor column is not updated after ]s. (Gary Johnson)
  * Accessing freed memory in vimgrep.
  * Accessing invalid memory with overlong byte sequence.
  * No fallback to underline when undercurl is not set. (Ben Jackson)
  * Error in return not caught by try/catch.
  * The timer_pause test is flaky on Travis.
  * execute() does not work in completion of user command. (thinca)
  * "gf" and &lt;cfile&gt; don't accept ? and &amp; in URL. (Dmitrii Tcyganok)
  * The :leftabove modifier doesn't work for :copen.
  * Compiler warning on 64 bit MS-Windows system.</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Sort with spec-cleaner
- Add conditional to build with python2 in order to build with py3
  only enviroment
- Convert dependencies to pkgconfig style</changelog>
  <changelog author="idonmez@suse.com" date="1516795200">- Make vim require vim-data bsc#1077352 bsc#1075541 bsc#1074790</changelog>
  <changelog author="idonmez@suse.com" date="1517400000">- Updated to revision 1442, fixes the following problems
  * Crash when calling term_start() with empty argument.
  * Crash when term_start() fails.
  * MS-Windows: vimtutor fails if %TMP% has special chars.
  * After ":copen" can't get the window-ID of the quickfix
    window. (FalacerSelene)
  * Illegal memory access after undo. (Dominique Pelle)
  * GTK: :promtfind does not put focus on text input. (Adam Novak)
  * Memory leak in test_arabic.
  * Not enough information about what Python version may work.
  * Pkg-config doesn't work with cross compiling.
  * Filetype detection test not updated for change.
  * If cscope fails a search Vim may hang.
  * Terminal window: some vterm responses are delayed.
  * Using ":undo 0" leaves undo in wrong state.
  * Using pointer before it is set.</changelog>
  <changelog author="idonmez@suse.com" date="1518609600">- Split vim-data into vim-data-common package for low-disk usage
  scenarios bsc#1078722 bsc#1078554 bsc#1075541
- Make set mouse= default in suse.vimrc bsc#1079185 bsc#1078564
  bsc#1067890 bsc#1064068 bsc#1062691</changelog>
  <changelog author="idonmez@suse.com" date="1519128000">- Updated to revision 1525, fixes the following problems
  * Compiler complains about uninitialized variable. (Tony Mechelynck)
  * Missing -D_FILE_OFFSET_BITS=64 may cause problems if a library is compiled
    with it.
  * Cannot act on edits in the command line.
  * Acessing freed memory after window command in auto command. (gy741)
  * Still too many old style tests.
  * Segmentation fault when Ruby throws an exception inside :rubyfile command.
  * Slow redrawing with DirectX.
  * Endless loop when gui_mch_stop_blink() is called while blink_state is
    BLINK_OFF. (zdohnal)
  * It is difficult to set the python home directory properly for Python
    2.7 and 3.5 since both use $PYTHONHOME.
  * Terminal test fails on some systems. (jonathonf)
  * Terminal test fails on some slow terminals.
  * When in silent mode too much output is buffered.
  * If $SHELL contains a space then the default value of 'shell' is
    incorrect. (Matthew Horan)
  * Timer test on travis Mac is still flaky.
  * Clojure now supports a shebang line.
  * Filetype detection test does not check all scripts.
  * Cannot handle change of directory.
  * Missing file in patch.
  * Missing another file in patch.
  * Missing yet another file in patch.
  * Test fails without 'autochdir' option.
  * Completing directory after :find does not add slash.
  * Python2 and python3 detection not tested. (Matej Cepl)
  * Older GTK versions don't have gtk_entry_get_text_length().
  * Libvterm doesn't handle illegal byte sequence correctly.
  * Illegal memory access in del_bytes().
  * When package path is a symlink adding it to 'runtimepath' happens at
    the end.
  * Integer overflow when using regexp pattern. (geeknik)
  * On MS-Windows CursorIM highlighting no longer works.
  * MS-Windows: nsis installer is a bit slow.
  * MS-Windows: D&amp;D fails between 32 and 64 bit apps.
  * Visual C 2017 has multiple MSVCVER numbers.
  * Invalid memory access in read_redo(). (gy741)
  * Screen isn't always updated right away.
  * Redraw flicker when moving the mouse outside of terminal window.
  * Unnecessary condition for "len" being zero.
  * Insert mode completion state is confusing.
  * Patch missing change.
  * Clearing a pointer takes two lines.
  * Using feedkeys() does not work to test Insert mode completion. (Lifepillar)
  * Searchpair() might return an invalid value on timeout.
  * Reduntant conditions.
  * Weird autocmd may cause arglist to be changed recursively.
  * Accessing invalid memory with "it". (Dominique Pelle)
  * Test 14 fails.
  * Emacs tags no longer work. (zdohnal)
  * There is no easy way to get the global directory, esp. if some windows
    have a local directory.
  * Number of spell regions is spread out through the code.
  * The minimum width of the popup menu is hard coded.
  * Memory leak in balloon_split().
  * Completion items cannot be annotated.
  * No autocmd triggered in Insert mode with visible popup menu.
  * Having 'pumwidth' default to zero has no merit.
  * Clearing a pointer takes two lines.
  * Getting the jump list requires parsing the output of :jumps.
  * Getjumplist() returns duplicate entries. (lacygoill)
  * Out-of-memory situation not correctly handled. (Coverity)
  * Possible NULL pointer dereference. (Coverity)
  * Out-of-memory situation not correctly handled. (Coverity)
  * In out-of-memory situation character is not restored. (Coverity)
  * Access memory beyond end of string. (Coverity)
  * Win32: the screen may be cleared on startup.
  * Debugger can't break on a condition. (Charles Campbell)
  * New version of HP NonStop (Tandem) doesn't like the default header
    for setenv().
  * Timer test is a bit flaky.
  * The :drop command is not always available.
  * Test for failing drag-n-drop command no longer fails.
  * Cannot test if a command causes a beep.
  * Some code for the debugger watch expression is clumsy.
  * Warning for possibly using NULL pointer. (Coverity)
  * The jumplist is not always properly cleaned up.
  * Getting the list of changes is not easy.
  * BufWinEnter event fired when opening hidden terminal.
  * Errors for job options are not very specific.
  * Invalid memory acces with pattern using look-behind match. (Dominique
    Pelle)
  * Error messages suppressed after ":silent! try". (Ben Reilly)
  * Getchangelist() does not use argument as bufname().
  * Cursor is in the wrong line when using a WinBar in a Terminal window.
  * Shift-Tab does not work in a terminal window.
  * Popup menu is positioned in the wrong place. (Davit Samvelyan, Boris
    Staletic)
  * Cannot write and read terminal screendumps.
  * Compiler warnings for uninitialized variables. (Tony Mechelynck)
  * Using :wqa exits even if a job runs in a terminal window. (Jason Felice)</changelog>
  <changelog author="idonmez@suse.com" date="1519992000">- Recommend vim-data so that colors can work by default</changelog>
  <changelog author="idonmez@suse.com" date="1520251200">- Updated to revision 1568, fixes the following problems
  * No test using a screen dump yet.
  * Screen dump test fails on MS-Windows.
  * Dead code found.
  * Assert_equalfile() does not close file descriptors. (Coverity)
  * Dump test fails when using a shadow directory.
  * Cannot use 24 bit colors in MS-Windows console.
  * Compiler warnings without termguicolors feature.
  * Libterm doesn't support requesting fg and bg color.
  * C syntax test fails when using gvim
  * C syntax test still fails when using gvim.
  * Quotestar test is flaky when using the GUI.
  * Xxd does not skip NUL lines when using ebcdic.
  * Popupmenu is too far left when completion is long. (Linwei)
  * No test for the popup menu positioning.
  * Popup menu positioning fails with longer string.
  * synpat_T is taking too much memory.
  * Terminal screen dump does not include cursor position.
  * With 'termguicolors' Normal color doesn't work correctly.
  * When using 'termguicolors' SpellBad doesn't show.
  * Screen dumps not included in distribution.
  * Using feedkeys() in a terminal window may trigger mappings.
    (Charles Sheridan)
  * Undo in the options window makes it empty.
  * Screen dump test script not included in distribution.
  * Various small problems in test files.
  * Various small problems in source files.
  * On Mac 'maxmemtot' is set to a weird value.
  * May leak file descriptors when executing job.
  * Cannot see what digraph is used to insert a character.
  * Custom plugins loaded with --clean.
  * Build error for some combination of features.
  * May not parse the t_RS response correctly, resulting in wrong characters
    in the input stream.
  * printf() does not work with only one argument. (Daniel Hahler)
  * No right-click menu in a terminal.
  * Build failure without GUI.
  * Build failure without GUI on MS-Windows.
  * Crash with rust syntax highligting. (Edd Barrett)
  * The terminal debugger can't set a breakpoint with the mouse.
  * Timeout of getwinposx() can be too short. (lilydjwg)
  * Too many #ifdefs.
  * Can't build Mac version without GUI.
  * Too many #ifdefs.
  * Cannot build Win32 GUI without IME. (John Marriott)
  * Can't build on older Mac, header file is missing.</changelog>
  <changelog author="idonmez@suse.com" date="1520510400">- Switch to make -j1 clean to see if it fixes random build failures
  on Leap/SLE 15.</changelog>
  <changelog author="lnussel@suse.de" date="1521806400">- instead of explicitly unsetting mouse, remove it from the defaults in the
  first place (boo#1079185, vim-8.0.1568-defaults.patch)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1522843200">- Pre-convert gvim icons, otherwise building vim depends on
  rsvg-convert -&gt; librsvg -&gt; cargo -&gt; Rust -&gt; LLVM
- Cleanup SVG icon, make lines pixel-grid aligned
- Correct RPM Group</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1559822400">- Add source-check-sandbox.patch to fix CVE-2019-12735
  boo#1137443</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1589457600">- introduce vim-small package with reduced requirements for small
  installations (boo#1166602).
- BuildRequire pkg-config(krb5) instead of krb5-mini to be able to
  build against Tumbleweed repo.</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1590753600">- Add restrict-shell-commands.patch to disable using interfaces in
  restricted mode, fixes bsc#1172225 CVE-2019-20807</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1593518400">- stop owning /etc/vimrc so the old, distro provided config actually
  gets removed. Leaving it around leads to a duplicated autocmd for
  * .spec, leading to spec file template inserted twice.
- own some dirs in vim-data-common so installation of vim-small
  doesn't leave not owned directories (boo#1173256).
- Add vi as slave to update-alternatives so that every package
  has a matching "vi" symlink (bsc#1174564, boo#1176549).</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1613649600">- source correct suse.vimrc file (boo#1182324)</changelog>
  <changelog author="Ludwig Nussel &lt;lnussel@suse.de&gt;" date="1614081600">- install suse vimrc in /usr (boo#1182324, vim-8.0.1568-globalvimrc.patch)</changelog>
</package>
<package pkgid="18ebe7aed929e1174f782e762c10a07ad5bfaae19b8746d15e9a1d3f65ce1287" name="gxditview-debuginfo" arch="i586">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="050a4eedc236eeb0b2cc838da5c7b8877ed2d7627778f8d7e70f5a1b0e873a34" name="gxditview-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.22.3" rel="lp152.6.3.1"/>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1608638400">- Add 0001-make-package-build-reproducible.patch
    0002-Implement-SOURCE_DATE_EPOCH-for-reproducible-builds.patch
  to make corosync build reproducibly (bsc#1180276)</changelog>
</package>
<package pkgid="28c274ca93d26d094f32ba74cf39743aab9faaf7b818b2138b54ce9cb11553b1" name="gzip-debuginfo" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
</package>
<package pkgid="4874fe18a2150d9fadd950fbb471f48c82f7d58636f6a594011135c096308f0b" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
</package>
<package pkgid="51d2b6936954a9991d0c5cbfaba0f466183b56eff821009df99c68c05fd60851" name="gzip-debuginfo" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.6.1"/>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
</package>
<package pkgid="d76561d2d68d4d1e61799b4c73be283bd74d6c0e3abb66cce60e91856e955c1a" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.6.1"/>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
</package>
<package pkgid="4e105fc5bd941a0b3aa686a550540b1767512db672882c5bee5da70af75239c5" name="gzip-debuginfo" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="ba7be496e71fbebff93f8be3e7672e4756f726e397d0662da3f6b4d17b1d2654" name="gzip-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="1518fc933d708f84de777f46f2098a077bcd4c2cb86ce9922c696c3dd6adee02" name="gzip-debugsource" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
</package>
<package pkgid="f8b8ece47c732502f45b3472271bd0e84e6fda3ae3754fb65feefeb329661b17" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.3.1"/>
  <changelog author="meissner@suse.com" date="1418990400">- build with PIE</changelog>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
</package>
<package pkgid="e30201127a8dd9190cd7d54e8ded6935bdc0393224b7f3d4ec0f6db5cf7f4025" name="gzip-debugsource" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.6.1"/>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
</package>
<package pkgid="b02748ffe64ab8d37789986820f761a75cb15e00140187af75cf2ade279b65fa" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.6.1"/>
  <changelog author="bwiedemann@suse.com" date="1458475200">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
</package>
<package pkgid="7bd77b8fb62bab9ccf8fb774fb91adde128b6190a6e7c429d3a071641f6501c7" name="gzip-debugsource" arch="i586">
  <version epoch="0" ver="1.10" rel="lp152.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="7f2a6d973362da135c65a91748c9a2f2c7d255091a7eeeb6fc082ca50e268970" name="gzip-debugsource" arch="x86_64">
  <version epoch="0" ver="1.10" rel="lp152.2.9.1"/>
  <changelog author="tchvatal@suse.com" date="1459252800">- Rename reproducible.patch to something actually explanatory:
  * manpage-no-date.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459252801">- Version update to release 1.7:
  * gzip now accepts the --synchronous option
  * gzip now accepts the --rsyncable option
  * The GZIP environment variable is now obsolescent
  * Installed programs like 'zgrep' now use the PATH environment variable as
    usual to find subsidiary programs like 'gzip' and 'grep'
- Remove obsolete patch tempfile.diff
- Remove upstreamed patch gzip-rsyncable.diff
- Rebase manpage-no-date.patch to apply to 1.7 version</changelog>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="Krist&#xFD;na Streitov&#xE1; &lt;kstreitova@suse.com&gt;" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="Kristyna Streitova &lt;kstreitova@suse.com&gt;" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="a7a8c4f77cfc74c2603cd19aa7f224601eb3333b77d2376a22dd24ba45d0eb19" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.2+git.1594886920.d00b94aa" rel="lp152.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1505736000">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
</package>
<package pkgid="d99c9aa77d4ad08ee3359d6274df53e33b302e58ebc7ebe1ab88ec1801b820c9" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.0+git.1603969748.10468582" rel="lp152.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
</package>
<package pkgid="5e06e6dbdd89acb279074f5fb80f2b92e0adfa5c3cf0659e0f05e1826c731348" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.0+git.1603969748.10468582" rel="lp152.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
</package>
<package pkgid="02ed29f3e910796b9821983f9cce01aab0eedd09857a621623b96f1681bbd8fb" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0+git.1611141202.2fe6369e" rel="lp152.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
</package>
<package pkgid="7777272ddd7f1f81a434ed74fb5d7125401487b5c6bcf17b472ed5d58ac51271" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0+git.1613486511.51b6e37d" rel="lp152.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
</package>
<package pkgid="3b847ea7de8003baf4799de7ae3b2febdd3bcf88911747deab86d17a9b27938c" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.3+git.1614684118.af555ad9" rel="lp152.2.18.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1614772800">- Update to version 2.6.3:
  * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459)
  * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314)
  * Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)</changelog>
</package>
<package pkgid="8a8e93d4f08a796238244d42e5b6a8534b0e21c7a8daed955aad1932a36cad1e" name="hawk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.4+git.1618478653.7272e6b6" rel="lp152.2.21.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1614772800">- Update to version 2.6.3:
  * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459)
  * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314)
  * Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1617969600">- Update to version 2.6.4:
  * Fix wizards ui (bsc#1184274)</changelog>
</package>
<package pkgid="03b41e680178dbaca4f4fa02132b4c61777c30d7963ac28f3fb0c170fa9dce78" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.2+git.1594886920.d00b94aa" rel="lp152.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1505736000">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
</package>
<package pkgid="45bd71ead8316dc0f81477e28e10f8e85f52ad5a697cc8122a55965dade58fc1" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.2.0+git.1603969748.10468582" rel="lp152.2.6.1"/>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
</package>
<package pkgid="62d02447146f53fa20b39b1187e5983e9bdf3dedca448ec477f32d69ed98237b" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.0+git.1603969748.10468582" rel="lp152.2.9.1"/>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
</package>
<package pkgid="c1bff12ebd99c65d08e2fe4a257ea06ab35529b84f4becff97c6d8e77ab00556" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0+git.1611141202.2fe6369e" rel="lp152.2.12.1"/>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
</package>
<package pkgid="c1b658b72b73fdcd8b3006ca59aed0b510c5c28441d6f75bfb767a3543afc73f" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0+git.1613486511.51b6e37d" rel="lp152.2.15.1"/>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
</package>
<package pkgid="dfb9e29eab0c4971f8dd9dede30bc44c2468f8ac787f405ba2f2aff97c15fae9" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.3+git.1614684118.af555ad9" rel="lp152.2.18.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1614772800">- Update to version 2.6.3:
  * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459)
  * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314)
  * Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)</changelog>
</package>
<package pkgid="8860497964a886fcf093330a023f8a0482d9baa6a433261fefc2575586fe8954" name="hawk2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.4+git.1618478653.7272e6b6" rel="lp152.2.21.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1563192000">- Added patches:
  - Fix display in case of nameless cluster (bsc#1137891)
  * 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  - Fix utility method for checking ACL version in Hawk (bsc#1089802)
  * 0002-Fix-acl_version-check-bsc-1089802.patch
- Added build dependency nodejs10</changelog>
  <changelog author="Ayoub Belarbi &lt;abelarbi@suse.de&gt;" date="1576584000">- Added patches:
  - Fix the acl_version method when parsing the cib.xml (bsc#1158681)
  * 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch</changelog>
  <changelog author="dmaiocchi@suse.com" date="1585224000">- Update to version 2.1.1+git.1585233369.bea4326a:
  * drop patch 0001-Fix-nameless-cluster-display-bsc-1137891.patch
  * drop patch 0002-Fix-acl_version-check-bsc-1089802.patch
  * drop patch 0003-Fix-cib.xml-parsing-for-acl_version-bsc-1158681.patch
  * drop patch hawk2-nodev.patch
  * Implement mechanism to switch binaries in case (bsc#1165587)
  * Low: Fix omission of built-in stonith attributes (bsc#1165587)
  * Refactor: Obtain the Pacemaker daemon directory during initialization
  * Work around the removal of Dir::Tmpname#make_tmpname (bsc#1162221)
  * Fix cib.xml parsing for acl_version (bsc#1158681)
  * Fix boot.rb
  * Fix Rails.groups issue when requiring the Gemfile
  * Remove Number Precision since it's handled by sassc-rails
  * Dev: Fix sass-rails version
  * Add application/x-bzip2 mime type (bsc#1098637)
  * Fix Sass version for Travis build
  * Fix mime type issue in MS windows (bsc#1098637)
  * preserve CIB_server et al environment variables (connect to remote)
  * Fix nameless cluster display (bsc#1137891)
  * High: Enable invoking new daemon names via hawk_invoke
  * High: Handle new daemon names in CrmConfig
  * Dev: Update Dashboard and fix compatibility issue
  * Dev: Fix provisioning on remote libvirt
  * Dev: Disable Nagios client provisioning
  * Dev: Update Readme
  * Dev: Add webui keys for testing masterless
  * Dev: Fix loading yaml from the pillars
  * Dev: Clean up the yaml config
  * Dev: skip installing grafana for now
  * Dev: get pillars from vagrant.sls
  * Dev: Fix missing dep
  * Dev: Read pillars from vconf.yml
  * Dev: Fix master config
  * Dev: Allow configuring vagrant through external conf
  * Dev: avoid using global variables
  * Dev: Clean up config
  * Dev: Change to yaml config
  * Dev: Fix Master config
  * Dev: Install master using bootstrap script
  * Dev: Update Vagrantfile
  * Dev: accept all  incoming public keys from minions
  * Dev: instruct the minion to look for a master
  * Dev: Update to working bootstrap script
  * Dev: Create pillar defaults
  * Dev: Sync salt root and pillar with nfs and fix path in salt/etc/minion
  * dev: Use Prometheus Formula for configuring prometheus.yml
  * Dev: Configure installation repo using the Formula
  * Dev: Adapt Pillar data to changes in Formula
  * Dev: install prometheus server packages
  * Dev: Disable legacy provisioning
  * Have to use NFS v3 over UDP for it to work
  * connect_via_ssh only if VM_HOST is set
  * Dev: Fixing the prometheus Pillar
  * Dev: Disabling Nagios provisioning
  * Dev: Change to forked Prometheus formula
  * Dev: Use the Prometheus formula and configure it using pillars
  * Dev: configure salt to use Gitfs backend
  * Dev: Install necessary packages for gitfs
  * Dev: Fix constant name conflict
  * Dev: exclude minion_id file from sync
  * Dev: Add configure_minion method and use minion_id
  * Dev: Remove vagrant triggers from Vagrantfile
  * Dev: Remove Virtualbox provider config
  * Dev: Fix minion config file paths
  * Dev: Sync Pillar directory
  * Dev: Rename salt directory to avoid confusion
  * Dev: Deploy Grafana's Datasource and HA Dashboard
  * Dev: Configure Grafana datasource
  * Dev: Disable bundler-audit
  * Dev: Continue when errors with Vagrant Triggers
  * Update SUSE's Copyright
  * Dev: Scrap data from all the nodes and not only localhost
  * Dev: Configure Grafana and change serving port
  * Dev: Configure prometheus for using pacemaker-exporter
  * Dev: fix pacemaker-exporter systemd issue
  * Dev: Install godep and fix pacemaker_exporter build
  * Dev: Install packages and configure go
  * Dev: Use requisites for managing dependencies
  * Dev: Use Salt to configure public ip for nagios
  * Dev: Restart apache using apachectl
  * Dev: Remove accidental log file addition
  * Dev: Restart gracefully nagios and apache2 services
  * Dev: Clean up Nagios scripts
  * Dev: Restart Nagios and apache2 after config
  * Dev: Fix typo in configure_nagios_server.sh
  * Dev: Rename Nagios scripts
  * Dev: Configure the before destroy trigger to run on the host instead of the guest
  * Dev: Fix Nagios server local hostname
  * Dev: Parse nagios_nrpe script with Jinja
  * Dev: Salt config for Nagios
  * Dev: require vagrant 2.1.0
  * Dev: Add public_ip files to .gitignore
  * Dev: Save guests public ips
  * Dev: Disable firewalld using Salt
  * Dev: Support external config for vagrant and Salt
  * Doc: Add Lukas Krause to Authors list and sort Alphabetically
  * Dev: Fix incorrect disk size for DRBD disk
  * High: Set secure flag to enforce https (bsc#1090657)
  * Medium: Improve hawk-server side cookie handling (bsc#1090667)
  * Medium: Set Symmetrical to False when score is Serialize (bsc#1085515)
  * Medium: Make resource stop/start icon dependent on target-role (bsc#1076421)
  * Dev: Update box to leap 15.0 version 1.0.7
  * Dev: Use latest bootstrap script that support Leap 15
  * Api: Fix  undefined method `get_cib' for #&lt;Api::V1::Status&gt; error
  * Api: Add necessary headers for cross-origin resource sharing
  * Api: Add the options method to the /register endpoint
  * Api: Add advance resource type(group|clone|master|bundle) in resource route(fate#323437)
  * Dev: Ignore byebug_history file
  * Dev: Start server using hawk binary instead
  * Dev: Load byebug in dev env
  * Dev: Install byebug by default
  * Dev: Disable hawk-dev-backend service
  * Dev: Enabling hawk dev services
  * Dev: Update dev env using salt
  * Api: Add 'param/meta/op' in resource return value(fate#323437)          To show the parameters/attributes/operations of this ra
  * Api: Add 'script' in resource return value(fate#323437)      To show the class/provider/type of this ra
  * Api: Add 'belong' in resource return value(fate#323437)
  * Api: primitive resource's type should always be primitive(fate#323437)
  * Api: Add 'attributes' and 'utilization' in node return value(fate#323437)
  * Api: Add cors preflight check and enable options method in routes(fate#323437)
  * Api: instance variable should not use here(fate#323437)      will cause NoMethodError
  * Api: get right status when resource is started(fate#323437)
  * Api: change to_hash function more dynamic(fate#323437)
  * Api: implement show method in controller(fate#323437)
  * Api: return nil if elem is nil(fate#323437)      in some case, param in determine_online_status_fencing is nil,      this will cause NoMethodError
  * Testing: Add validation test for order model
  * Testing: Enhance colocation validation tests a little
  * Dev: Prevent error through strip! method on empty score
  * Testing: Add ID to colocation validation test
  * Testing: Add validation test for colocation model
  * Dev: Create validation class for colocation and order model
  * Medium: Fix acl_version check (bsc#1089802)
  * Dev: Move colocation validation to constraint model
  * High: Fetch correct meta data (bsc#1092122)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Update links to release notes and documentation (bsc#1089709)
  * High: Return after redirect in reports (bsc#1090562)
  * Dev: Remove json extension from javascript delete operations
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * Testing: Add tag to tests where cluster env is needed
  * Testing: Create helper for dummy yaml store
  * Testing: Add rspec fixtures and test api endpoints with valid token
  * Api: Implement basic structure for each endpoint (fate#323437)
  * Api: Fix typo (fate#323437)
  * Api: Clean up status structure (fate#323437)
  * Api: Create models' super class (fate#323437)
  * Api: Render basic response from /status (fate#323437)
  * Api: Refactor status.rb (fate#323437)
  * Api: Refactor api models (fate#323437)
  * Api: Set current_user during authentication (fate#323437)
  * Api: Implement models' logic (fate#323437)
  * Api: Add models' structure (fate#323437)
  * Api: Refactor checking expiry method (fate#323437)
  * Api: Fix Struct class name (fate#323437)
  * Api: convert expiry date to unix timestamp (fate#323437)
  * Api: Send back the expiry date as well (fate#323437)
  * Api: Fix missing token issue (fate#323437)
  * Api: Improve error response (fate#323437)
  * Api: Handle authentication cases (fate#323437)
  * Api: Add expiration check for api tokens (fate#323437)
  * Dev: Ignore VS code trash folder
  * Api: Ignore the api_token_entries.store (fate#323437)
  * Testing: Test fake authentication token
  * Api: Check if the store exists when auth (fate#323437)
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Api: Add basic api token comparison for authentication (fate#323437)
  * Api: Add validation for existing yaml store and api tokens
  * Low: Update copyright year in branding
  * Api: Use Yaml store for now (fate#323437)
  * Api: clean up api controller (fate#323437)
  * Api: Add register action (fate#323437)
  * Api: Add registration route (fate#323437)
  * Dev: Clean up vagrant file and hawkdev state file
  * Dev: Change hacluster user's shell in Vagrantfile
  * Dev: Bump version Vagrant box to 1.1.14
  * High: Replace Promoted/Running in dashboard with asterisk icon to avoid overflow issues
  * Dev: Some minor style nits
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Doc: Fix syntax errors in README
  * Doc: Update screenshots in README
  * Doc: Translate README from asciidoc to markdown
  * Dev: Disable bundle feature configuration using Salt
  * Dev: Update ruby to 2.5
  * Dev: update Hawk's readme
  * Dev: Remove Chef provisioning scripts
  * Testing: Test authentication token
  * Api: Implement the structure of http token auth (fate#323437)
  * Api: Create api_controller.rb (fate#323437)
  * Testing: testing the api endpoints routing
  * Testing: Add a cluster_env tag
  * Api: Create the actions for each controller (fate#323437)
  * Api: Create the Api file structure (fate#323437)
  * Api: Add the status resource routes (fate#323437)
  * Dev: Remove vagrant cloud url since it's fetched correctly in Vagrant 2
  * Dev: Bump Vagrant box version to 1.1.12
  * Dev: Clarify wording in testing doc
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Low: Drop errors heading in status to align with dashboard
  * Add minimal bundle model object (fate#324558)
  * UI: Implement icons in left navigation and modify js code
  * UI: Remove test code
  * UI: Implement code for active tab based on the current URl
  * UI: Merge access control menu into configuration menu
  * UI: Implement collapsible side navebar
  * Dev: Force vagrant to download boxes from vagrant cloud instead of atlas
  * High: Fix remote nodes iteration (bsc#1080439)
  * Dev: Fix the state of containers
  * Dev: Fix the state of bundle resources
  * Dev: fetch primitive resource for bundles
  * Dev: append port-mapping and storage-mappping to arrays instead of objects
  * Dev: Fetch the storage element from the cib
  * Dev: Fetch the docker/rkt, network elements from the cib
  * Dev: Define the basic JSON structure for the bundle
  * Dev: Nest the bundle object inside resources
  * Dev: Configure a dummy resource for testing bundle feature
  * Dev: Fix apparmor issue for apache bundle
  * Dev: Add the bundle support in the cib's model
  * Dev: Check if the feature is supported by the current pacemaker version
  * Dev: Configure the bundle using crmsh on the webui machine
  * Dev: Configure the docker host for testing the bundle feature
  * Dev: Fix remote nodes iteration (bsc#1080439)
  * Dev: update the box version with the latest build by packer
  * Dev: solve broken requirement in hawkdev/init.sls
  * Remove non-used state files from init.sls
  * Dev: Remove state files used by packed to build the base image
  * Dev: remove accidentally created files
  * Dev-env: Remove Salt bootstrap scripts since Salt is already installed
  * Dev-env: Update the vagrant box with the image built with packer
  * Dev: Update salt bootstrap script
  * High: Support guest nodes (bsc#1074856)
  * dev: Move to box 1.0.6
  * Ensure certificate/key is group readable (bsc#1071481)
  * Test: fix yet another typo
  * Test: Check for the Travis env variable
  * Dev: Fix typo
  * Dev: Skip running the test for #acl_enabled? in Travis
  * Test: Add test suit for (bsc#1069296)
  * Dev: Fix acl_enabled? (bsc#1069296)
  * Dev: Correct path to Cluster configuration page
  * Test: run rspec tests in Travis
  * Test: Run rspec tests in test container
  * Dasherize available languages map
  * Test: Add model test for Profile
  * Dev: Add scripts for running the test suite in a container
  * Dev: Dev: Handle redirection correctly after renaming resources (bsc#1068942)
  * Dev: Handle redirection correctly after renaming constraints (bsc#1068942)
  * Dev: Dev: split rename action for constraints to edit/update (bsc#1068942)
  * Dev: Refactor resouces.js (bsc#1068942)
  * Dev: Change the rename path for resources (#bsc#1068942)
  * Dev: split rename action to edit/update (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)
  * Dev: Add public key to the vagrant env
  * Dev: Check data-wizard-enable to disable/enable related options
  * Dev: disabled click when wizard apply successfully
  * Permit parameter conversion in history upload dialog
  * Dev: Use /bin/bash in shebang for generate-ssl-cert script
  * Dev: Set target-role default value to Stopped
  * Dev: Remove the jQuery element's key from the attlist-mapping
  * Dev: Convert string keys to symboles in Ticket's creation page.
  * Dev: Move RSC_DEFAULTS/OP_DEFAULTS to tableless.rb for maintain purpose
  * Dev: Use "overflow: inherit" to avoid dropdown creates scrollbar
  * Dev: Use 'M'/'S' tooltip stand for Master/Slave role
  * Dev: Change monitor in oplist for Master/Slave resource
  * Dev: add default value and longdesc for timeout option
  * Dev: add longdesc for enabled in operation defaults
  * Dev: interval-origin should just in operation defaults
  * Dev: 0 instead of INFINITY means disabled for migration-threshold
  * Dev: In wizards, replace chaotic boolean value of params
  * Dev: Let error message shown in group/clone/master page
  * Dev: Strip redundant error messages(from errors.messages[:id])
  * Dev: Let error message shown in location/colocation/order page
  * Dev: Convert hash's key to symbol
  * Dev: Make sure no errors before crm configure verify
  * Dev: Required param's value shouldn't be blank
  * Dev: Move get_meta_data function to util and do some replaces
  * Dev: Wizards resource params missing default value
  * Dev: Required param should not be removed
  * Dev: Replace type="string" to 'type="text" in ra's meta-data   If don't do this, the default value of params will lost after from xml to json
  * Dev: Check whether param's value is blank
  * Show descriptions in cluster config (bsc#1054027)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1594900800">- Update to version 2.1.2+git.1594886920.d00b94aa:
  * update puma rubygem to 4.3.5 requirement for for disabling TLSv1.0 and TLSv1.1 (jsc#SLE-6965)
  * add functional tests in docker
  * various refactoring and cleanup</changelog>
  <changelog author="dmaiocchi@suse.com" date="1604923200">- Update to version 2.2.0+git.1603969748.10468582:
  * Fix server error after authentication if a resource has the same name as a node (bsc#1163381)
  * Allow also users in haclient to view history explorer (jsc#SLE-7358)</changelog>
  <changelog author="Dario Maiocchi &lt;dmaiocchi@suse.com&gt;" date="1608033600">- Update to version 2.3.0+git.1603969748
  * fix bsc#1179998. Handle better input on app controllers (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1611144000">- Update to version 2.4.0+git.1611141202.2fe6369e:
  * Improve further mechanism of controllers to system commands.
  * drop patch 0001-Improve-controllers.patch since merged upstream
  (CVE-2020-35458)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1613649600">- Update to version 2.6.0:
  * Use fullpath of binary (bsc#1181436)
  * remove %x (bsc#1182163)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1614772800">- Update to version 2.6.3:
  * Remove hawk_invoke and use capture3 instead of runas (bsc#1179999)(CVE-2020-35459)
  * Remove unnecessary chmod (bsc#1182166)(CVE-2021-25314)
  * Sanitize filename to contains whitelist of alphanumeric (bsc#1182165)</changelog>
  <changelog author="dmaiocchi@suse.com" date="1617969600">- Update to version 2.6.4:
  * Fix wizards ui (bsc#1184274)</changelog>
</package>
<package pkgid="1a34305dc9abd5a2f885fc24f4e9e87f7d9b6fddd1358b7e66d2ae8f227ea1ba" name="hdjmod-debugsource" arch="x86_64">
  <version epoch="0" ver="1.28" rel="lp152.6.2.1"/>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1552910400">- Fix build with kernel 5.0:
  * hdjmod_kernel_5.0.patch</changelog>
</package>
<package pkgid="0cbc4ed1c2d31d0e6f9f8459c6d0a29661d920f508a9db00ed7fc64a56b68bed" name="hdjmod-kmp-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.28_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1552910400">- Fix build with kernel 5.0:
  * hdjmod_kernel_5.0.patch</changelog>
</package>
<package pkgid="3f1912040f5c87bf6a6ec054504c1d6e9d2729b4bac3e2dcf1317c0c74440625" name="hdjmod-kmp-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.28_k5.3.18_lp152.36" rel="lp152.6.2.1"/>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1529409600">- Use %{?linux_make_arch} when building kernel modules (boo#1098050).</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1552910400">- Fix build with kernel 5.0:
  * hdjmod_kernel_5.0.patch</changelog>
</package>
<package pkgid="094077eea94f7d7182751e2fd2e57b2b3f1458dbfcd8375022bab2f6e01ed88f" name="helm-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.4.1" rel="lp152.2.3.1"/>
  <changelog author="kmacinnes@suse.com" date="1520942400">- Update to version 2.8.2:
  * Tiller should only enforce what we expect from Helm
  * Keepalive config should be independent of TLS
  * Bump client side grpc max msg size
  * Update deprecated grpc dial timeout
  * fix(tiller): Supersede multiple deployments (#3539)
  * replace FAILED deployments with `helm upgrade --install --force`
  * fix(helm): Don't crash in search if upper case chars are encountered.
  * fix helm init --wait
  * fix protoc
  * bump version to v2.8.2</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Make use of %license macro</changelog>
  <changelog author="mmeister@suse.com" date="1533643200">- run spec-cleaner over tthe specfile
  there have been some deprecated macros used</changelog>
  <changelog author="dorf@suse.com" date="1544702400">- Require golang &gt;= 1.10.</changelog>
  <changelog author="clee@suse.com" date="1545220800">- Require golang &gt;= 1.10.6
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="Thomas Bechtold &lt;tbechtold@suse.com&gt;" date="1558008000">- Add README.packaging as Source
- Update to version 2.13.1. See following changelogs for detailed
  descriptions:
  * https://github.com/helm/helm/releases/tag/v2.13.1
  * https://github.com/helm/helm/releases/tag/v2.13.0
  * https://github.com/helm/helm/releases/tag/v2.12.3
  * https://github.com/helm/helm/releases/tag/v2.12.2
  * https://github.com/helm/helm/releases/tag/v2.12.1
  * https://github.com/helm/helm/releases/tag/v2.12.0
  * https://github.com/helm/helm/releases/tag/v2.11.0
  * https://github.com/helm/helm/releases/tag/v2.10.0
  * https://github.com/helm/helm/releases/tag/v2.9.1
  * https://github.com/helm/helm/releases/tag/v2.9.0</changelog>
  <changelog author="jsuchome@suse.com" date="1558094400">- set correct git_commit value so that 'helm version' reports correctly
- build with Go 1.11 to prevent https://github.com/helm/helm/issues/4987
- added service file for helm-serve</changelog>
  <changelog author="mmeister@suse.com" date="1561550400">- Update go to 1.12:
  * strings.ReplaceAll requires 1.12
- Update to version 3.0.0alpha.1:
  * fix(pkg/action): add namespace to release options
  * feat(pkg/chart): support deprecated requirements.yaml
  * ref(pkg/kube): cleanup kube client interface
  * Adding apiVersion guidance to the linting
  * Updatin gthe apiVersion linting for Helm v3
  * Adding lint check for apiVersion which is a required field
  * fix(loader): assume apiVersion is v1 when loading charts
  * update links to get.helm.sh
  * docs(faq): more information on what changed in Helm 3
  * pass debug option to registry client
  * Print manifest output for dry-run option
  * Updating OWERS to remove outdated reviewers and to reflect current case
  * fix(circle): lsb_release does not exist in linuxkit images
  * fix(cmd/helm): set 300s as default on timeout flags
  * Fix scaffold chart label in helper template
  * ref(circle): push assets to Azure
  * ref(*): use time.Duration for timeouts
  * ref(pkg/chartutil): remove k8s version object dependency
  * ref(pkg/kube): extract wait logic from install/update
  * fix(pkg/action): load clients after flags have been parsed (#5681)
  * Updating the labels for consistency
  * Reduce template code duplication. Fixes #5372
  * Add app.kubernetes.io/version label
  * Updating to the k8s label convention
  * Helm 3: registry login/logout (#5597)
  * Change the nginx app version to a set tag
  * Validate library chart files after chart loaded
  * Fix the image field for the scaffold chart application
  * Fix test data
  * Add capability for application charts to be used as library charts
  * Update from source section in install doc
  * docs: Replace reference to k8s.io to helm.sh
  * Feat/schema validation (#5350)
  * fix test command, move test to test run subcmd
  * Change header "APP_VERSION" to "APP VERSION"
  * Add app version to history table
  * ref(create): app version should be 0.1.0
  * fix multi uninstall bug
  * fix(pkg/engine): Style changes on template errors
  * fix(pkg/engine): Catch non-templating errors when rendering templates
  * fix(pkg/engine): Clean up template error messages
  * ref(pkg/chart): add validation method to chart
  * Fix files copyright
  * Fix docs targets
  * Remove docs target and generated docs folder
  * Fix make docs target
  * docs: Update the "Developer Guide"
  * fix(pkg/chartutil): marshal capabilities VersionSet into slice
  * fix(pkg/chartutil): only include external objects in capabilities
  * ref(pkg/action): refactoring dup code and linter fixes
  * chore(dep): bump kubernetes to 1.14.0
  * ref(uninstall): purge release history by default
  * ref(list): move namespaces field closer to the name
  * Remove a trivial TODO comment
  * fix(cmd/template): allow setting release name for template
  * chore(dep): update sprig to 2.19.0 (#5390)
  * ref(circleci): refactor ci setup
  * fix(*): resolve new govet issues
  * fix(pkg/action): action log must be initialized
  * fix(install): fix issue where chart metadata is not being saved on `helm install`
  * docs(faq): list changes since Helm 2
  * feat(*): use vanity import helm.sh/helm
  * ref(action): remove ParseShowOutputFormat
  * style(cmd): go fmt
  * ref(cmd): remove mockTestSuccessTemplate
  * fix(action): remove test.go
  * test(cmd): refactor release_testing_test.go
  * ref(action): move AddFlags functions back to cmd
  * ref(action): remove io.Writers, return string instead
  * fix(helm): fix `helm status` output formatting
  * ref: remove pkg/helm, pkg/hapi, pkg/tiller
  * chore(deps): upgrade dependencies
  * feat(tests): replace gometalinter with golangci-lint
  * Fix #5046 compatible with MacOS (#5406)
  * Fixes #5046, zsh completion (#5072)
  * Remove newline at the start of zsh completion file (#4851)
  * chore(circle): bump go to 1.12 (#5382)
  * remove appveyor (#5413)
  * ref(pkg/engine): make template specific functions private
  * fix(engine): make template rendering thread safe
  * fix(deps): add github sources to gopkg.in dependencies
  * docs: s,kubernetes/helm,helm/helm,g (#5404)
  * docs: consolidate FAQs into one doc (#5402)
  * docs: bring CONTRIBUTING doc up-to-date with current practices (#5401)
  * ref(pkg/helm): refactor out `ReleaseStatus`
  * Update after review
  * Update the docs
  * Add chart type
  * Fix linter warnings
  * feat(Makefile): add formatting target
  * Helm 3: fix "latest" tag bug (#5279)
  * feat(helm): add --plugins flag to 'helm init' (#5109)
  * ref(ci): persist dep cache
  * purge plugin directory on `helm plugin remove plug` (#4068)
  * Helm 3: initial registry support (#5243)
  * ref(*): remove references to chart 'engine'
  * optimize vendor caching on appveyor (#5251)
  * chore(ci): bump golang to 1.11.5
  * fix appveyor builds (#4934)
  * fix(deps): resolve dep warning messages
  * Feature(Plugins): Enable platform specific commands (#5176)
  * ref(*): remove helmVersion chart constraint
  * fix: fix a number of style errors (#5136)
  * feat: add 'pkg/action' for list operations (#5077)
  * feat(Makefile): automate go vendoring and building
  * Changed requirements.yaml references to dependencies section references
  * Updated change from requirements.yaml to dependencies field in Chart.yaml
  * feat(cmd/helm): re-add --history-max option to v3
  * ref(*): kubernetes v1.13 support
  * ref(*): replace byte array with map for Release config
  * ref(pkg/chartutil): simplify chart dependency unit tests
  * ref(pkg/chart): rename Requirements to Dependencies
  * ref(url) update helm's github url (#4962)
  * ref(pkg/repo): rename RepoFile to File
  * ref: rename inspect to show (#4927)
  * ref(pkg/chartutil): attempt to make requirements processing readable
  * ref(pkg/chart): rename files to be consistent with types
  * fix missing formatting character error in wrapf statement (#4881)
  * ref: require name by default on 'helm install' (#4858)
  * remove dirname constraint on `helm package` (#4141)
  * ref(tests): remove broken symlinks in testdata
  * doc(helm): remove Tiller reference from the docs (#4788)
  * ref(*): kubernetes v1.12 support
  * ref(helm): rename fetch to pull (#4714)
  * fix(tests): set mock to generate UTC timestamps (#4716)
  * ref(driver): refactor out function type errors
  * ref(*): rename requirements.lock to Chart.lock
  * ref(*): merge requirement.yaml into Chart.yaml
  * ref(chart): use map for chart.Values
  * change copyright to "Copyright The Helm Authors"
  * ref(*): refactor chart/chartutil
  * ref(*): kubernetes v1.11 support
  * ref(cmd): rename `helm delete` to `helm uninstall`
  * release canary v3 binaries as helm-dev-v3
  * feat(*): remove Time, Namespace, and Revision from template functions
  * ref(cmd): dry up values and chartpath flag options
  * ref(cmd): test template cmd using golden files
  * ref(cmd): refactor argument validation
  * ref(tests): simplify cmd test setup/teardown
  * ref(*): s/tiller/helm/
  * feat(*): print stacktrace on error with debug enabled
  * ref(cmd): consistent naming of cmd variables
  * ref(cmd): remove Writer from Cmd options stucts
  * ref(tests): use golden files for testing command output
  * ref(*): rebuild build version object
  * ref(pkg/tiller): add flag to enable tilling logging in tests
  * ref(*): convert const types to strings
  * ref(cmd): simplify cmd test setup
  * ref(*): remove local repository (dead code)
  * ref(cmd): remove serve command
  * fix(kube): output internal object table
  * feat(cmd): add --all-namespaces to list
  * feat(dep): replace glide with dep
  * ref(*): move kubeconfig flags to helm/environment
  * ref(pkg/tiller): flatten package structure for storage
  * fix(hapi): typo in struct json tags
  * feat(*): store release History in same namespace as release
  * feat(cmd): alias -n to --namespace
  * fix(tests): fix race in releasetesting test
  * chore(hapi): add missing license headers
  * ref(*): replace TillerVersion with HelmVersion
  * ref(*): replace chart.config with []byte
  * ref(pkg/releasetesting): simplify test setup
  * ref(*): cleanup timestamps in tests
  * ref(*): use go conventions for naming types
  * ref(*): remove protobuf any type
  * ref(*): remove protobuf timestamps
  * ref(hapi): convert protobuf to go types
  * ref(pkg/kube): simplify creating versioned objects
  * ref(*): improve initializing helm clients
  * ref(proto): remove unused protobufs
  * ref(pkg/tiller): simplify exported methods
  * ref(*): remove grpc
  * ref(*): refactor release testing
  * docs(generated): remove generated docs
  * ref(*): remove HELM_HOST
  * ref(*): remove pkg/kubernetes from tiller and storage
  * ref(*): bypass grpc for helm client
  * fixup! ref(cmd,pkg/helm): remove server side version
  * ref(pkg/tiller): remove ReleaseModules interface from tiller
  * ref(*): bypass grpc when invoking helm list
  * ref(pkg/tiller): refactor out imports of pkg/helm
  * ref(cmd): remove deprecated command
  * ref(Makefile): cleanup and consolidate
  * ref(cmd/tiller): delete main tiller package
  * ref(pkg/helm): cleanup unused code
  * ref(cmd): remove reset and init tiller commands
  * ref(pkg/helm): allow ReleaseContent to call storage directly
  * ref(cmd,pkg/helm): remove tiller ping
  * ref(cmd,pkg/helm): remove server side version
  * remove proto make targets
  * remove tiller build infra
  * remove rudder build infra</changelog>
  <changelog author="mmeister@suse.com" date="1563969600">- Update to version 3.0.0alpha.2:
  * Fix paths in the ingress template and values file written by helm create
  * docs(CONTRIBUTING): one LGTM for maintainers, remove "always 2 LGTMs" policy
  * chore(docs): move docs to helm-www
  * chore(deps): bump kubernetes to v1.15
  * Added HorizontalPodAutoscaler to sort order.
  * feat(template): introduce --validate
  * fix(kube): remove namespace enforcement
  * ref(getter): change NewHTTPGetter and NewPluginGetter to return type Getter
  * ref(downloader): pass in options to ChartDownloader
  * support writing multiple resources to the same file
  * chartutil.ReadValues is forced to unmarshal numbers into json.Number refs #1707 [dev-v3]
  * fix(client): Fixes a timing issue with reading client flags
  * Add sub-command support to plugin downloader
  * Replaced ghodss/yaml with sigs.k8s.io/yaml
  * feat(action): Refactors unit tests with better fakes
  * feat(*): Adds back --atomic functionality to Helm 3
  * chore: add ValueOptions constructor
  * ref(*): Refactors the history action to return releases instead of formatted output
  * feat(wait): Adds smarter waiting for DaemonSets and StatefulSets
  * Fix linter issuers
  * Helm 3:  set custom manifest config media type on chart push (#5719)
  * fix(pkg/action): Adds back in missing wait functionality
  * fix(pkg/kube): Fixes wait functionality
  * ref(getter): introduce Options for passing in getter parameters
  * Expose the resource types in addition to the api group/version in templates
  * Redo the same fix with #3915 in dev-v3 branch
  * Fix linter issues
  * Updating to newer version of sprig
  * Restoring the Release.Namespace docs
  * Updating to the new Ingress group version
  * Stop Lint from breaking when using required
  * Remove mention of the execute flag
  * Fix the build section in the developer doc
  * fix(resolver): compare hash of lockfile against resolved dependencies
  * ref(version): catch some edge cases
  * Add documentation on registries (#5754)
  * add go version to version cmd output of helm
  * ref(urlutil): remove stripPort
  * ref(downloader): remove ResolveChartVersionAndGetRepo
  * chore(testdata): remove stale test output
  * fix(circle): only upload packages and checksums, not cross-builds
  * fix and add test cases
  * Revert "do not write empty templates to disk"
  * add test for output-dir
  * Add dynamic completion for release names
  * (helm): update Cobra to version 0.0.4
  * fix issue 5792
  * ref(*): expose klog flags
  * do not write empty templates to disk
  * use outputDir instead of hardcoded value
  * docs(faq): add namespace changes for non existing namespaces
  * ref(pkg/chartutil): break up chartutil into logical files
  * support --output-dir option for helm3 template
  * fix missing package name
  * ref(pkg/chart): remove unused chart.RawValues
  * docs(install): fix release links
  * fix(docs): fix `helm install` usage
  * fix ByDate sorter to use Time.Unix()
  * update list tests expected output files
  * fix test cases for list.AllNamespaces
  * remove unnecessary setting of list.All flag
  * add superseded to list filter mask
  * add more releases to list tests
  * fix docs for helm list
  * Remove redundant ByNameAsc enum value. Handled by default sorting
  * handle default list sort order through enum order
  * fix test cases for sort list with options
  * fix sort list with options bug</changelog>
  <changelog author="mmeister@suse.com" date="1569326400">- Update to version 3.0.0beta.3:
  * fix(pkg/cli): do not override users xdg directories
  * Unifity environment variable naming and use
  * Displaying environment variables in alphanum order for env cmd
  * Remove ability to have duplicates in environment variables
  * fix: clear the discovery cache after CRDs are installed (#6332)
  * ref(pkg/engine): cleanup of development `hack`
  * Poposal: Hook to run acceptance tests (#6256)
  * fix BusyBox sed (#6340)
  * Distinct doc strings for repository-cache and repository-config
  * doc(cli): restore help text for helm configuration
  * docs: Add best practices compliance badge (#6320)
  * Move the logic for checking env in pkg/cli and store all envs in a central place
  * Updated to get Helm env Paths and XDG env paths only
  * Logic for the helm env command
  * helm-v3: Dynamic completion for "helm repo" and "helm plugin" (#6263)
  * fix(cmd/helm): user friendly error message when repos are not configured
  * Make the lint cmd output a bit easier to follow
  * Revert "fix(cmd/helm): user friendly error message when repos are not configured"
  * fix(cmd/helm): user friendly error message when repos are not configured
  * return namespace assigned to --namespace
  * fix(cmd/helm): Missing params for dir locations (#6300)
  * fix(cmd/helm): Remove mention of init from help (#6298)
  * Stop multiple error messages in lint results
  * Fix: set config dir in repo update cmd (#6292)
  * Applied check to actions
  * Add IsReachable to /pkg/kube/client to see if connected to the internet
  * chore(*): Add GPG key for Adam
  * ref(cmd/helm): remove init command
  * chore(registry): upgrade to oras v0.7.0 (#6285)
  * chore(OWNERS): sync with master (#6224)
  * feat(cmd/helm): remove need for helm init command
  * Fix Adding Errors from Linter.Messages to result.Errors
  * ref(*): remove dead code
  * Test for Linting multiple charts with the same vals instance
  * Clone the vals map for every path to avoid mutation
  * Remove mention of 'helm update'
  * feat: Add support for a crds/ directory
  * chore(*): Add GPG key for Taylor
  * fix(registry): Updates registry to handle go 1.12.8 changes
  * fix(chartutil): remove executable bits from chartutil generated files
  * ref(test): join all hook manifests before building
  * style(action): fix style tests
  * fix(action): return an error if len &gt; 0
  * fix(test): restore --cleanup
  * Updating the search language and flags for consistency
  * Breaking up the search command into multiple commands based on type
  * Exposing Helm Hub search via the search command
  * ref(internal/experimental/registry): pkg refactor (#6205)
  * ref(cmd/helm): unify log functions
  * fix(pkg/kube): only wait for events from Jobs and Pods
  * Updated upgrade to give more verbose output
  * Updating the httpgetter to use the new user agent function
  * Making the monocular client search path a const
  * Moving monocular client to internal and adding user agent to version pkg
  * Adding a monocular client as a package
  * ref(*): Moves packages to internal
  * ref(cmd/helm): remove helm home command
  * feat(hooks): add Running phase
  * feat(getter): set default User-Agent
  * feat(cmd): use alt dest for chart export (#6193)
  * fix(action): return nil if no errors occurred
  * feat(cmd): put OCI commands behind a feature gate
  * Move KEYS from master to dev-v3
  * fix(helmpath): fix syntax errors for windows tests
  * fix(chartutil): Ensure nested template dir on save (#6177)
  * refactor(hooks): replace hook execution Successful bool with HookPhase
  * Fix make test
  * fix(kube): Fixes nil panic with stateful set waiting
  * chore(cmd): Updates --wait flag help
  * docs(chart): updates APIVersionV2 comment to reflect the proper name
  * pkg/cli/values/options_test.go: re-add MergeValues test with mergeMaps
  * fix(plugin): add HELM_HOME back
  * feat(cli): support XDG base directory specification
  * ref(client): use three-way merge patch strategy
  * Remove the chart lock file as its v1 structure
  * Update linting and checking for apiVersion v1/v2
  * fix(test): wait for pods and record status
  * review: move ValueOptions to SDK
  * cmd/*,pkg/*: move ValueOptions to cmd package and decouple from SDK
  * doc(hooks): note helm 2 test annotation support requirement
  * refactor(release): track test executions via Hook type
  * feat(client): wait for Pods during hook execution
  * feat(test): define tests as Jobs and allow arbitrary supporting resources
  * Fix values being ignored when reusing values on upgrade
  * fix(rollback): fix revision argument not being handled
  * fix(pkg/action): Allow name re-use for helm template
  * Removes clientset method from interface in favor of the configuration struct
  * Fixed object typing for watching Jobs/hooks
  * Fixes issues with delete
  * ref(*): Refactors kube client to be a bit more friendly
  * ref(kube): Renames `Result` type to `ResourceList`
  * Allow missing trailing '/' in --repo url
  * Enable style conformance test in circleci build
  * Fix style conformance issue
  * Switch to a more unique delimiter for template execution errors
  * Fix style conformance issues
  * Update scaffold chart to v2 apiVersion
  * Added List mode for Role, ClusterRole and Bindings
  * Removing the stable repository
  * test: add test
  * fix: use repo default client to download index
  * Fix a parsing issue with command line arguments
  * fix: call chartutil.ProcessDependencies in action.Install
  * ref(action): remove ParseReferenceWithChartDefaults
  * fix(engine): Fix eating too many colons during template execution
  * Use chart version as default tag when saving
  * feat(helm:create): allow absolute paths</changelog>
  <changelog author="Joachim Gleissner &lt;jgleissner@suse.com&gt;" date="1580990400">- Update to version 3.0.3
- Drop obsolete README.packaging</changelog>
  <changelog author="dmueller@suse.com" date="1594123200">- Update to version 3.2.4 (fixes security issue
  - https://github.com/helm/helm/security/advisories/GHSA-q8q8-93cv-v6h8
  - https://github.com/helm/helm/security/advisories/GHSA-cjjc-xp8v-855w
  - https://github.com/helm/helm/security/advisories/GHSA-qq3j-xp49-j73f )
  * Improve the extractor and add tests (#8317)
  * Add checking of length of resourceList before creating of deleting
  * docs: fix capitalization in a few help messages
  * polish to keep the same log style
  * Fix markdown table in helm command doc
  * Add unit test for pkg/chart/chart.go
  * Fixing docs from version to appVersion (#7975)
  * Helm upgrades with --reuse-values and nil user values -- with tests (#7959)
  * fix(pkg/plugin): copy plugins directly to the data directory (#7962)
  * fs_test: use os.Getuid() instead user.Current() to determine if a test is executed with root privileges.
  * fix(helm): allow a previously failed release to be upgraded (#7653)
  * Fixing per gofmt
  * Fix issue with unhandled error on Stat
  * chore(helm): Avoid confusion in command usage
  * Fix unit test
  * Fix repo cache setting
  * Fixing PAX Header handling (#8086)
  * fix: upgrade using --force shoud not run patch logic (#8000)
  * Set DisableCompression to true to disable unwanted httpclient transformation
  * fix: write index.yaml file atomically (#7954)
  * fix linting error with lookup function (#7969)
  * bump version to v3.2
  * fix: removed inaccurate comment (#7937)
  * Migrate SQL storage driver to Helm 3 (#7635)
  * fix: Fixed a regression that was introduced with changed nil handling (#7938)
  * Fix nested null value overrides (#7743)
  * Updating sprig and semver to newer versions
  * add unit test for function FindPlugins
  * fix: rebuild chart after dependency update on install (#7897)
  * Make get script eaiser for helm versions to live side by side (helm3 etc) (#7752)
  * add softonic to adopters (#7918)
  * test: forward-port regression test from Helm 2 (#7927)
  * Add an improved user error message for removed k8s apis
  * fix(tests): fix broken unit tests in storage (#7928)
  * Add unit test for Secrets/ConfigMaps (#7765)
  * docs: Update inline docs on action/upgrade.go (#7834)
  * add unit test for metadata Validate
  * add unit test for ChartFullPath
  * add unit test for ChartPath
  * add unit test for IsRoot
  * updated help text for install --atomic, which was completely inaccurate (#7912)
  * feat(cmd/helm): Update Cobra to 1.0.0 release
  * fix(storage): preserve last deployed revision (#7806)
  * fixed capitalization in a few help messages. (#7898)
  * chore(comp): Remove unnecessary code
  * ref(*): kubernetes v1.18 (#7831)
  * Adding template docs to the version command
  * Implement support for multiple args for repo remove (#7791)
  * fix: fixed bug in Dependency.List() (#7852)
  * Adding notes on semver to create Chart.yaml
  * feat: allow image tag override
  * feat: add pod annotations
  * Avoid downloading same chart multiple times
  * fix(helm): Data race in kube/client Delete func. (#7820)
  * Improve --show-only flag (#7816)
  * Add unit test for pkg/chart/chart.go
  * remove unneeded values files from testchart
  * update test chart to helm3 format
  * fix: update unit test for go 1.14 error string change (#7835)
  * Add fromYamlArray and fromJsonArray template helpers (#7712)
  * Delete unneeded chart output
  * add testing for upgrade --install with subchart notes
  * pass subchart notes option to install client
  * Snapcraft installation instructions added
  * helm create command's templates more consistent
  * Improve error message to check in unit test
  * Add unit test for lint/values.go
  * Fix a bug in Delete() in storage/driver/cfgmaps.go (#7367)
  * Fix a bug in storage/driver/secrets.go Delete() (#7348)
  * fix(cli): Make upgrade check if cluster reachable
  * Correcting links for release notes
  * Add tests
  * Add more detail to error messages and support a non-force mode in metadata visitor
  * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml
  * Fixing issue where archives created on windows have broken paths
  * fix(install): correct append tls config.
  * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml
  * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml
  * Solve the issue #7749 where proper formating was not being done if --short(-q) option was used with other formating options like json, yaml
  * Add unit test
  * Fix stray modules
  * Port --devel flag from v2 to v3
  * Use Create method if no resources need to be adopted
  * chore(go.mod): run `go mod tidy`
  * Make the charts cache safe in presence of several Helm instances
  * fix: add new static linter and fix issues it found (#7655)
  * Add --insecure-skip-tls-verify for repositories (#7254)
  * ref(environment): use string checking instead
  * Save Chart.lock to helm package tar
  * test(helm): fix client update error
  * fix(helm): polish goimport
  * add unit test for RecordsReplace
  * fix(helm): respect resource policy on ungrade Don't delete a resource on upgrade if it is annotated with helm.io/resource-policy=keep. This can cause data loss for users if the annotation is ignored(e.g. for a PVC)
  * add unit test for ConfigMapDelete
  * add unit test for SecretDelete
  * fix(ADOPTERS): alphabetize org list (#7645)
  * Add verification output to the verify command
  * Fixes verification output on pull command
  * fix(helm): stdin values for helm upgrade --install
  * Update README.md
  * Add test for unknown subcommand
  * Return "unknown command" error for unknown subcommands
  * Fix golangci-lint errors.
  * Fix dep build to be compatiable with Helm 2 when requirements use repo alias
  * fix(cmd/helm): upgrade go-shellwords
  * Printing name of chart that do not have requested import value.
  * pkg/storage/records: add unit test for Exists
  * pkg/storage/records: add unit test for Index
  * pkg/storage/records: add unit test for Get
  * fix(helm): add --skipCRDs flag to 'helm upgrade' When 'helm upgrade --install' is run, this will allow to skip installing CRDs Closes #7452
  * feat(tests): Allow to provision memory driver
  * feat(comp): Dynamic completion for plugins
  * feat(comp): Static completion for plugins
  * Alternative: annotation-only solution
  * Adopt resources into release with correct instance and managed-by labels
  * feat(comp): Move kube-context completion to Go
  * feat(install): introduce --create-namespace
  * Fix output of list action when it is failed
  * Pass the apiserver address/port via cli, introduce HELM_KUBEAPISERVER envvar
  * add license headers to release-notes.sh script
  * Adds script to help craft release notes
  * pkg/helmpath: fix unit test for Windows
  * fix golint failure in pkg/action
  * cmd/helm/search_repo: print info to stderr
  * pkg/gates: add unit test for String
  * Fix render error not being propogated
  * IsReachable() needs to give detailed error message.
  * fix(scripts): scrape for the latest v2/v3 release from the releases page
  * feat(upgrade): introduce --disable-openapi-validation: This is a copy of the --disable-openapi-validation flag from the install command as introduced by Matthew Fisher. See commit 67e57a5fbb7b210e534157b8f67c15ffc3445453
  * ref(go.mod): k8s api 0.17.3
  * Making fetch-dist get the sha256sum files
  * Pass kube user token via cli, introduce HELM_KUBETOKEN envvar
  * Place rendering invalid YAML under --debug flag
  * fix(kube): generate k8s native scheme only once
  * fix(kube): use non global Scheme to convert
  * Revert "Do not delete templated CRDs"
  * fix(helm): improved logs
  * Fix shasums to be usable by shasum and sha256sum applications
  * fix(comp): Fix broken completion for --output flag
  * add test for template recursion
  * fix recursion count in templates
  * Fix 'helm template' to also print invalid yaml
  * fixed missing bullet
  * Add ADOPTERS file, per CNCF requirements (#7507)
  * bump version to v3.1
  * fix(version): fix typo in doc comment
  * fix(helm): Reworded logs for clarity
  * chore(*): Removes support for searching the plugin dir
  * chore(postrender): Adds unit tests for exec post renderer
  * Adds post-render support
  * fix(memory_test): rebase master
  * fix(cmd): Specify namespace for template command
  * fix(tests): Add namespace support to memory driver
  * Fixes issue where non-CRDs are read in from the crd directory
  * ref(kind_sorter): use an in-place sort for sortManifestsByKind, reduce code duplication
  * Fix engine.newFiles doc comment
  * Fixes issue where &lt;CHARTNAME&gt; is left in starter values file
  * fix(tests): Ignores tarball that will change on dep update
  * fix(helm): Don't wait for service to be ready when external IP are set
  * fix(chart): lock digest differs when dependency build with Helm 2 and then Helm 3 (#7261)
  * Create a single shasums.txt
  * Create a single shasums.txt
  * ref(go.mod): oras v0.8.1 (#6862)
  * feat(template): Allow template output to use release name (#7503)
  * fix(tests): Make tests pass on MacOS
  * fixed dependencies processing in case of helm install or upgrade for disabled/enabled sub charts
  * fix(test) use newly created index instead of ignoring it
  * Fix tests on arm64 and ppc64le (#7500)
  * style(cmd/lint): removed slash in subcharts fp
  * fix(lookup_func): do not return error when object is not found
  * Fix typo
  * Tidy up go dependencies (#7494)
  * fix(template): helm template "--show-only" flag producing duplicates when flag used more than once (#7204)
  * Fix some spelling errors in comment (#7492)
  * When no resources were created, do not try to clean them up
  * fix(comp): Allow zsh completion to handle -n flag
  * Adding security file
  * maintain backwards compatibility in the api for the CRDs function
  * fix(package): remove --set, --values, etc. flags
  * fix(chartutil): remove empty lines and a space from rendered chart templates (#7455)
  * Friendly error message for non-existent Chart while packaging (#7127)
  * fix(helm): sort hooks by kind for equal weight
  * fix test-style
  * allow limited recursion in templates
  * Render the CRDs to spec files
  * fix(test): Remove invalid subcommand in test
  * fix(kube) only add to scheme.Scheme once
  * Use /usr/bin/env for bash
  * Remove references to protobuf (#7425)
  * Allow tests to run on s390x (#7096)
  * fix(comp): Update based on review comments
  * Add unit test for Reverse() in pkg/releaseutil.go
  * fix: catch one additional discovery client warning (#7176)
  * feat(version): show "unreleased" when built from a branch
  * fix(helm): improve handling of corrupted storage
  * unnecessary import removed
  * Signed-off-by: Ahmad Kazemi &lt;ahmad.kazemi@recordpoint.com&gt; log.Printf replaced to fix the log issue.
  * feat(comp): Isolate go completion framework better
  * feat(comp): Use cached charts file for speed
  * feat(test): add some completion tests
  * feat(comp): Don't use error codes for completion
  * feat(comp): Support completion for --revision flag
  * feat(comp): Support --generate-name in completion
  * feat(comp): Dynamic completion of flags in Go
  * feat(comp): Dynamic completion of arguments in Go
  * go.mod,go.sum: bump to k8s v1.17.1
  * ref(pkg/storage): Refactor Deployed and DeployedAll (#7374)
  * Fix: helm3 - kind sorter incorrectly compares unknown and namespace
  * Fix typo in comment for func IsReachable
  * fix(test): Make resetEnv() properly reset settings
  * Refactored alpine-pod.yaml file to make the example work in accordance to the Values.yaml file
  * feat(comp): Speed up completion of charts
  * feat(chore): Remove unused code
  * Add hpa boilerplate
  * go.mod,go.sum: bump Kubernetes dependencies 1.17.0
  * stop with an error immediately if a file or directory with that name already exists (#7187)
  * add option to bypass kubeconfig namespace
  * [helm create] Include serviceAccount.annotations value (#7246)
  * Add corresponding unit test to the function in parser.go
  * fix(helm): move ServiceAccount before Secret in InstallOrder.
  * chore(go.sum): run `go mod tidy`
  * fix error output
  * fix(tests): use sigs.k8s.io/yaml
  * Fix a typo "update" -&gt; "updates" (#7346)
  * Add unit test for List() of pkg/storage/driver/memory.go
  * fix(cmd): Fixes logging on action conf init error (#6909)
  * Remove duplicated words (#7336)
  * Improve description for `--all` flag (#7144)
  * Add corresponding unit test to the function in resolver.go
  * Fix typo in --values cmd flag
  * Do not delete templated CRDs
  * Fix a typo "the the" -&gt; "the"
  * fix(comp): tail cannot open +2 for reading
  * fix(tests): Use relative path to acceptance tests
  * Add corresponding unit test to the function in resource.go.
  * feat(cmd/lint): added a flag for linting subcharts
  * test(cmd/lint): added test for --with-subcharts flag
  * docs: point users to helm hub
  * fixup! Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release
  * Updated make to create two files sha256/sha256sum Please link sha256sum as checksum file in GIT releases page for future release
  * fix(helm): add .orig as typical backup file
  * feat(checksum): update to get/get-helm-3 to match shasum fix
  * feat(checksum): Generate shasum/sha256sum -c compatible sha256 file
  * Port PR #4161 Fix incorrect timestamp when helm package to Helmv3
  * Add back fix for CRD patch creation
  * Add new Makefile targets
  * Spelling (#7258)
  * add technosophos public key (#7256)
  * fix(kube): Port use of watcher with retries to wait for resources (#7217)
  * fixed golint
  * additional fixes based on @thomastaylor312 comment
  * addressing some feedback from  @thomastaylor312
  * fixed test issue
  * added rest client passed with action configuration
  * added license header
  * fixed circle ci issues
  * added check on namespaced resource
  * first lookup template function implementation
  * doc(helmpath) move licensing info out of godoc
  * fix(install) crd install with apiextensions.k8s.io/v1
  * feat(template): process manifests in file path order, then in order found in each file (before sorting manifests)
  * fix(helm): Validate number of arguments in install client
  * Add missing statuses to the status help text (#7035)
  * Updating to sprig 3.0.2 to bring in a bugfix
  * fix(cmd): Add message about deprecated chart (#6889)
  * ref(pkg/action): split test of filterList (#6875)
  * fix(*): Helm v3 handling of APIVersion v1 charts dependencies (#7009)
  * add Marc Khouzam as a core maintainer
  * feat(install): introduce --disable-openapi-validation
  * chore(testdata): remove stale output
  * fix(tests): Repair tests failures
  * fix(helm): add --description flag to helm (#7074)
  * Repair failing unit tests - failure caused by os.Stat return values for directory size on Linux.
  * Reintroduce --is-upgrade to template command
  * fix: clarified behavior of 'list --deleted' (#6950)
  * improved the error message for failed package signing (#6948)
  * fix this inconsistency in the docs (#7157)
  * Fix godoc badge
  * Restoring fetch-dist and sign Make targets
  * fix(install): use ca file for install (#7140)
  * use sigs.k8s.io/yaml instead of gopkg.in/yaml.v2
  * Fixing the code of conduct pointer
  * fix "Chart.lock is out of sync with Chart.yaml" (#7119)
  * Add a flag to allow template to output CRDs
  * fix(tests): mapfile is not available on MacOS
  * fix(cli): IsReachable check for "get values"
  * fix stack overflow error (#7114)
  * test(pkg): add unit tests for tar file edge cases
  * docs(install): clarify the --replace flag (#7089)
  * fix: ignore pax header files in chart validation
  * fix(plugin): Avoid crash on missing flag
  * chart_downloader: fix lint issue.
  * chart_downloader: avoid overriding TLS options from command flags when not setup in repo config.
  * cli/pull: pass TLS config to chart downloader from flags. (#7055)
  * chart_downloader: add TLS client config to options from repo config. (#7055)
  * chart_downloader: add test to verify that http opts are used correctly. (#7055)
  * fix(plugin): Avoid duplication of flag list
  * fix(plugin): Add missing -n known flag
  * fix(lint): Remove requirement that directory name and chart name match
  * remove unused variable
  * fix(lint): Remove requirement that directory name and chart name match
  * Signed-off-by: Jonathan Meyers &lt;jonathan@cybrary.it&gt;
  * Signed-off-by: Jonathan Meyers &lt;jonathan@cybrary.it&gt;
  * homebrew renamed formula to just helm from kubernetes-helm
  * Add s390x build target
  * fix: change error message to contain correct field name
  * fix(get-helm-3): remove tiller checks, fixup version check
  * fix(get): hard code DESIRED_VERSION when unset
  * fix(wait): Adds support for waiting on v1 apiextensions for CRDs
  * fix(get): install Helm v2.16.1
  * fix(reame):  update links to docs
  * fix(install): log the error when recording the release
  * fix(pkg/downloader): resolve repo alias before checking digests on build
  * fix(pkg/downloader): add failing test for build with repo alias
  * fix(strvals): port #3912, #4142, #4682, and #5151 to Helm 3
  * fix(ci): pin golangci-lint to v1.21.0
  * Used timeout instead of deadline
  * fix(cli): helm list was ignoring some errors
  * ref(tlsutil): remove ServerConfig
  * fix(tlsutil): accept only a CA certificate for validation
  * fix: stop discovery errors from halting chart rendering. (#6908)
  * print gvk information on existing resource conflict
  * fix(cli): Sort output of helm env
  * fix(show): restore comments from raw values
  * Correct spelling mistakes
  * fix(cmd): Standardizes all output to use lower snake_case names
  * Consider namespace when comparing resources
  * fix(version): implement `helm version -c`, mark as hidden
  * fix(getter): set up TLS options during .Get()
  * fix(chart): add JSON tags to chart object
  * fix(comp): Protect against user's aliases
  * fix(cmd): Updates description for template validation flag
  * Updating the usage language for search repo
  * feat(v3): Add shorthand for --all-namespace flag in list command (#6848)
  * fix(action): strip file extensions from name
  * Revert "[Makefile] Support reproducible builds"
  * Add namespace option to example kubectl command
  * fix(kube): return error when object cannot be patched
  * feat(helm): add linting support for '.tar.gz' tarballs for helm charts (#6829)
  * [Makefile] Support reproducible builds
  * fix(comp): helm plugin 'remove' is now 'uninstall'
  * fix(version): lift "unreleased" status
  * Porting fix from commit f5986db184cf6d16dcd48760ac749a20236fb845
  * Fix import
  * fix rename for helm dependency upgrade</changelog>
  <changelog author="manfred.h@gmx.net" date="1594987200">- Add bash and zsh completion sub-packages</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- Update to version 3.3.0:
  * Fix issue with install and upgrade running all hooks
  * bump version to v3.3
  * fix(template):Issue:helm template with --output-dir (#8156)
  * Adding v4 link
  * Updating for today's actual milestone practices
  * fix(cmd): display warnings on stderr
  * Determine chart digest by manifest (#8249)
  * Fix some go-lint warnings
  * Fix golint issue
  * feat(comp): Complete revision for rollback command
  * fix template command use --show-only flags error in windows environment
  * version bump
  * remove s390x arch check
  * feat(comp): Provide completion for --version flag
  * chore(Makefile): Remove unused variable
  * Improve the extractor and add tests (#8317)
  * Add HelmVersion to Capabilities
  * feat(cmd): Subcommands for the completion command
  * fix(chartutil): do not set helpers.tpl filetype for vim
  * Add unit test case
  * feat(comp): Move custom completions to Cobra 1.0
  * fix(doc): generic description for --version/verify
  * Fix description is ignore when installed with upgrade
  * Add unit test for man-in-the-middle attack on pull
  * chore(helm): Avoid confusion in command usage
  * Fix crashing `helm chart list` with large list
  * Show errors when linting for Chart.yaml version and appVersion fields of type non-string
  * ref(tests): localize unit test fixtures to package
  * Fix issue with unhandled error on Stat
  * Removing legacy completions.bash file
  * Using flags instead of persistent flags on status
  * Removing tiller language
  * Added s390x support
  * add kind_sorter support for SecretList
  * Fix unit test
  * Fix repo cache setting
  * Update the Helm version docs
  * Revert "group command for easy read"
  * Catching a potential panic in strval parsing
  * Recovering from panic that can occur with make
  * Fixing error with strvals parsing
  * ref(pkg/chartutil): use minimal in-memory fixtures
  * feat: Detect missing selector during lint
  * Add new line to fix code formatting in doc
  * fix(comp): Prepare plugin completion for Cobra 1.0
  * feat(test): Update golangci-lint to 1.27.0
  * chore(*): Fix formatting
  * Fixing PAX Header handling (#8086)
  * fix: upgrade using --force shoud not run patch logic (#8000)
  * feat(getter): add timeout option (#7950)
  * fix security mailing list address
  * bump DefaultCapabilities to 1.18
  * bump to kubernetes 1.18.2
  * scripts: do not use optional 'which' command in get-helm installation (#8048)
  * feat: make the linter coalesce the passed-in values before running values tests (#7984)
  * Removed scheme
  * Fixes repo parsing
  * Fixes repo parsing
  * Set DisableCompression to true to disable unwanted httpclient transformation
  * Update lint deprecation list
  * refactor: alter constant `pluginFileName` to `PluginFileName`
  * Fixing argument to be lower case
  * docs: fix capitalization in a few help messages
  * bump version to v3.2
  * fix: removed strict template errors in linter (#8017)
  * Add checking of length of resourceList before creating of deleting
  * fix: use correct regular expression for Kubernetes names (#8013)
  * feat: implement deprecation warnings in helm lint (#7986)
  * added option --insecure-skip-tls-verify for helm install, addresses #7875
  * added option --insecure-skip-tls-verify for helm pull, addresses #7875
  * polish to keep the same log style
  * Fix markdown table in helm command doc
  * feat: lint the names of templated resources (#8011)
  * Adding Helm env vars where XDG exposed
  * Fix : Prints empty list in json/yaml is no repositories are present (#7949)
  * Updating CONTRIBUTING to match current practice
  * Adding PR template from dev-v2 branch
  * Add unit test for pkg/chart/chart.go
  * fix: write index.yaml file atomically (#7954)
  * test: add test for bom test data integrity
  * Fixing docs from version to appVersion (#7975)
  * Modify Circle config to use Go 1.14 (#7980)
  * fix(pkg/cli): ensure correct configuration from kubeconfig file
  * fix(cmd/env): make helm env command respect cli flags (#7978)
  * fix(*): remove bom in utf files when loading chart files (#6081)
  * Helm upgrades with --reuse-values and nil user values -- with tests (#7959)
  * fix(pkg/plugin): copy plugins directly to the data directory (#7962)
  * fix linting error with lookup function (#7969)
  * Parse reference templates in predictable order (#7702)
  * group command for easy read
  * fs_test: use os.Getuid() instead user.Current() to determine if a test is executed with root privileges.
  * fix(helm): allow a previously failed release to be upgraded (#7653)
  * Updating get stripts to skip pre-releases
  * fix(pkg/kube): continue deleting objects when one fails
  * Add comments about release Version variable
  * fixed to mirror master
  * removed panic, and replaced with error
  * fix test
  * added config file string
  * Fix a typo "update" -&gt; "updates" (#7346)
  * fix(cmd): Fixes logging on action conf init error (#6909)
  * Remove duplicated words (#7336)</changelog>
  <changelog author="dmueller@suse.com" date="1599652800">- Update to version 3.3.1:
  * Fix spelling in completion.go
  * Fixing linting of templates on Windows
  * Bump Kubernetes to v0.18.8 + Bump jsonpatch
  * Fix Quick Start Guide Link in README.md
  * fix test that modifies the wrong cache data
  * bufix: fix validateNumColons docs
  * Fix typo
  * Enhance readability by extracting bitwise operation
  * Make helm ls return only current releases if providing state filter
  * fix: Allow building in a path containing spaces
  * Alter whitespace in "Update Complete" output
  * Fixing version and spelling errors</changelog>
  <changelog author="Vicente Zepeda Mas &lt;vzepedamas@suse.com&gt;" date="1600689600">- Update to version 3.3.2:
  * fix rebase
  * fix(cmd/helm): add build tags for architecture
  * switched to stricter YAML parsing on plugin metadata files
  * Merge pull request from GHSA-m54r-vrmv-hw33
  * Merge pull request from GHSA-jm56-5h66-w453
  * Merge pull request from GHSA-9vp5-m38w-j776
  * fixed bug that caused helm create to not overwrite modified files
  * replace --no-update with --force-update and invert default. BREAKING.
  * improve the HTTP detection for tar archives
  * handle case where dependency name collisions break dependency resolution
  * validate the name passed in during helm create
  * refactor the release name validation to be consistent across Helm
  * fix: check mode bits on kubeconfig file</changelog>
  <changelog author="Vicente Zepeda Mas &lt;vzepedamas@suse.com&gt;" date="1600689601">- Update to version 3.3.3:
  * fix: allow serverInfo field on index files</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- Update to version 3.3.4:
  * Fixing import package issue
  * use warning function
  * Fixing issue with idempotent repo add</changelog>
  <changelog author="Vicente Zepeda Mas &lt;vzepedamas@suse.com&gt;" date="1604059200">- Update to version 3.4.0:
  * bump version to v3.4.0
  * this rewrites a whole bunch of old repo URLs to the new repo URL (#8902)
  * warn and block old repo URLs (#8903)
  * improved user-facing error messages to explain the underlying problem (#8731)
  * Linking to a more complete list of meeting details.
  * add authentication to CircleCI jobs
  * helm create: make generated YAML indentation more consistent
  * Makefile: check and use GOBIN environment variable first
  * TestCheckPerms: utilize pipe to read stderr
  * Bump github.com/DATA-DOG/go-sqlmock from 1.4.1 to 1.5.0
  * Bump github.com/sirupsen/logrus from 1.6.0 to 1.7.0
  * feat(install): add requested version to error
  * Bump github.com/gofrs/flock from 0.7.1 to 0.8.0
  * Bump github.com/lib/pq from 1.7.0 to 1.8.0
  * Fix wrong function's name in comment
  * ref(cmd): prevent klogs flags from polluting the help text
  * Adding support for k8s 1.19
  * remove redudant time func
  * fix example time format
  * rename to time format flag
  * refactor time formatting
  * fix ls command example
  * add time-format flag to list command
  * Adding annotation to index.yaml file
  * Fixing import package issue
  * Update go version to 1.14 in go.mod
  * use warning function
  * Adding size labels pointer
  * Fixing issue with idempotent repo add
  * support passing signing passphrase from file or stdin (#8394)
  * size/S and larger requiring 2 LGTMs
  * Update docs links in release notes script
  * fix: allow serverInfo field on index files
  * fix(cmd/helm): add build tags for architecture
  * switched to stricter YAML parsing on plugin metadata files
  * Merge pull request from GHSA-m54r-vrmv-hw33
  * Merge pull request from GHSA-jm56-5h66-w453
  * Merge pull request from GHSA-9vp5-m38w-j776
  * go fmt
  * improve the HTTP detection for tar archives
  * replace --no-update with --force-update and invert default. BREAKING.
  * handle case where dependency name collisions break dependency resolution
  * fixed bug that caused helm create to not overwrite modified files
  * refactor the release name validation to be consistent across Helm
  * fix: if not .Values.autoscaling.enabled indent
  * validate the name passed in during helm create
  * fix: check mode bits on kubeconfig file
  * fix incorrect wildcard expand
  * fix(comp): Disable file comp for output formats
  * Makefile: Fix LDFLAGS overriding
  * Add support to install helm
  * Fixing typo in engine comments
  * Use T.cleanup() to cleanup cmdtest_temp file
  * Use RemoveAll to remove a non-empty directory
  * mark NewTempServer as Deprecated
  * Use T.Cleanup() to cleanup temp dir helm-repotest
  * Support impersonation via flags similar to kubectl --as="user"
  * Document all env vars for CLI help
  * Use T.cleanup() to cleanup helm-action-test
  * Add GPG signature verification to install script (#7944)
  * fix: with .Values.podAnnotations indent template
  * Revert PR 8562
  * feat(comp): Add support for fish completion
  * feat: status command display description
  * Remove duplicate variable definition
  * Fixed a variable name collision caused by two PR merges (#8681)
  * Fix/8467 linter failing (#8496)
  * fix name length check on lint (#8543)
  * Fix spelling in completion.go
  * cleanup tempfiles for load_test
  * add checkFileCompletion for env HELM_BIN
  * feat(env): add support of accepting a specific variable for helm env
  * Fixing failing CI for windows
  * pkg/*: Small linting fixes
  * Correct checksum file links
  * Fixing linting of templates on Windows
  * use URL escape codes
  * add v4 to list of exempt labels
  * optimise if condition in service ready logic
  * feat(comp): Disable file completion when not valid
  * Bump Kubernetes to v0.18.8 + Bump jsonpatch
  * release/mock: Ensure conversion from int to string yields a string
  * Update Common Lables template in starter chart
  * chore(deps): add dependabot.yml
  * Fix Quick Start Guide Link in README.md
  * add helm v4 todo comments for FindChartInAuthAndTLSRepoURL.
  * polish the error handler
  * Move selector filtering after latest release version filtering
  * Added testing for list action with selector
  * Added notice about supported backends
  * Fix linting issues
  * Added selector filtering
  * Pass labels from secret/configmap to release object
  * Added selector option to list command
  * fix test that modifies the wrong cache data
  * bufix: fix validateNumColons docs
  * Fix typo
  * darwin-386 and windows-386 are not supported now
  * Fix issue with install and upgrade running all hooks
  * introduce stale issue bot
  * Close gzip reader when done.
  * fix watch error due to elb/proxy timeout
  * Avoid hardcoded container port in default notes
  * add unit tests for FindChartInAuthAndTLSRepoURL.
  * Restoring Build behavior
  * Adding helm v4 todo
  * Make unmanaged repositories version resolvable
  * Locking file URIs to a version in lockfile
  * Enhance readability by extracting bitwise operation
  * fix(sdk): Polish the downloader/manager package error return (#8491)
  * fix insecure-skip-tls-verify flag does't work on helm install, Keep FindChartInRepoURL and FindChartInAuthRepoURL functions signatures intact.
  * fix: Allow building in a path containing spaces
  * Alter whitespace in "Update Complete" output
  * fix(create): update the hook name of test-connection pod
  * polish the help text of flag
  * Reinstating comment that is still accurate
  * Rollback command support for max history
  * fix(helm): Update test during pending install
  * Correct make target in Makefile
  * fix(helm): Added test for concurrent upgrades
  * fix(helm): Avoid corrupting storage via a lock
  * Fixing version and spelling errors
  * Clarify comments to match practice
  * fix the code style error
  * feature(show): support jsonpath output for `helm show value`
  * fix(kube): use logger instead of fmt.Printf
  * fix windows build failure caused by #8431
  * address PR comment, adding whitespace for formatting
  * feat(helm): prompt for password with helm repo add
  * Lint dependencies (#7970)
  * Environment variable for setting the max history for an environment
  * chore(OWNERS): move michelleN to emeritus
  * bump version to v3.3
  * fix conflict
  * add test case
  * fix another extreme case
  * add test case
  * fix #6116
  * Make helm ls return only current releases if providing state filter
  * Report what cause finding chart to fail
  * Simplify chart installable check</changelog>
  <changelog author="jenting.hsiao@suse.com" date="1605182400">- Update to version 3.4.1 (bsc#1179619):
  * add unittes for 'helm dep build' with --skip-refresh flag.
  * Add --skip-refresh option in helm dep build
  * Added tests for PR 8948
  * [#7696] Avoid crash in chart loader on unexpected file sequence
  * [#7696] Avoid crash in chart loader on unexpected file sequence
  * Updating to k8s 1.19.3 based packages
  * lint: lint all documents in a multi-doc yaml file
  * List either incubator or stable.
  * Clarifies action needed to list new stable repo
  * added test for https://github.com/helm/helm/pull/8913 related to https://github.com/helm/helm/issues/8621
  * do not check YAML if nothing was parsed
  * helm search supports semver pre version numbers starting with 0
  * Fix that the invalid version number of the helm package command will escape
  * Update err message to use the regex pattern directly
  * Fix the lint error message for valid names
  * Updating descriptions
  * Adjusted import
  * Reuse kube-client
  * Fixes Error: could not find protocol handler for
  * Add test case for LoadFiles
  * Bugfix: panic when chart contains requirements.lock</changelog>
</package>
<package pkgid="8f454a937f32072924fff96d137c33eabde9e07dc772bbef4a046bf5eb501625" name="highlight-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.59" rel="lp152.4.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1525176000">- Update to version 3.43:
  * Updated astyle code to release 3.1 (Rev. 655).
  * Added webkit reformatting style.
  * Improved several language definitions.
  * Fixed Matlab string recognition (#61).
  * Fixed Autohotkey escape sequence recognition.
  * Added excel.lang (#60).
  * Improved Qt pro file (#59).
  * CLI: Added --reformat-option (#62).
  * CLI: Added --line-range (#64).
  * GUI: Added Bulgarian translation.
- Rebase docdir patch on 3.43:
  * Remove highlight-3.41-fix-doc-dir.patch.
  * Add highlight-3.43-fix-doc-dir.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1525435200">- Make the build of gui subpackage conditional (built by default).
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1532174400">- Update to version 3.44:
  * Fixed gcc 8 compilation warnings.
  * Fixed Ruby string interpolation (gh#andre-simon/higlight#70).
  * Added support for ALAN IF.
  * Added 107 Base16 themes.
  * Updated Rust and Java reserved words lists.
  * Revised documentation.
  * Moved extras/css-themes into extras/themes-resources.
  * Added extras/themes-resources/base16.
  * GUI: added Base16 theme selection checkbox.
  * CLI: added --base16 option to enable the new themes.
  * CLI: accept - as argument to read from stdin
    (gh#andre-simon/highlight#73).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538740800">- Update to version 3.45:
  * Added DocumentHeader and DocumentFooter plug-in hooks.
  * Added RemoveKeyword Lua function for syntax definitions.
  * Added syntax test indicators (see README_TESTCASES).
  * Added support for ISO and R10 variants of Modula2.
  * Fixed R identifiers.
  * Fixed ALAN IF identifiers.
  * Fixed issue with Bash string interpolation.
  * Fixed some bugs found by coverity tool
    (gl#saalen/highlight#82).
  * Added Swift keywords and types.
  * Added filetypes.conf.5 man page (gl#saalen/highlight#83).
  * Added Gradle extension mapping.
- Renamed highlight-3.43-fix-doc-dir.patch to
  highlight-3.45-fix-doc-dir.patch: Rebased patch to 3.45.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538913600">- Update to version 3.46:
  * Fixed xterm256 and truecolor whitespace output
    (gl#saalen/highlight#90).
  * Converted manuals to AsciiDoc.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 3.47:
  * Fixed xterm256 and truecolor whitespace output #2
    (gl#saalen/highlight#90).
  * Fixed LaTeX, TeX, SVG and ODT whitespace output (regression of
    3.45).
  * Added darkplus theme.
  * Converted ChangeLog to AsciiDoc.
  * Allowed state test indicators to match both whitespace (ws) and
    the enclosing state (others).
  * CLI: Default output changed to xterm256 or truecolor if run in
    a terminal with color support and only a single file is
    outputted.
  * GUI: Added checkbox in the clipboard tab to output selected
    lines only.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 3.48:
  * Fixed --list-scripts abortion with Fedora default compilation
    options (gl#saalen/highlight#84).
  * Fixed a problem with syntax test indicators reporting wrong
    states after comments.
  * Improved Verilog syntax.
  * Improved quoted string highlighting for Perl and Ruby.
  * Detection of pkg-config's Lua version in src/makefile.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1549627200">- Update to version 3.49:
  * Fixed more problems with syntax test indicators reporting wrong
    states (gl#saalen/highlight#102).
  * Added support for Meson, Solidity, TOML and Terraform.
  * Improved Perl and Yaml highlighting.
  * Added Categories field to all config files.
  * CLI: added category info in --list-scripts output.
  * CLI: added --list-cat option (gl#saalen/highlight/99).
  * CLI: added optional topic parameter to --help.
  * GUI: added theme category selection.
  * GUI: display categories of selected syntax or theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1553947200">- Update to version 3.50:
  * Added lineno, column parameters to OnStateChange hook.
  * Added support for Crystal.
  * Added support for Slim.
  * Fixed several typos in documentaion and manpages.
  * CLI: Added `--syntax-by-name` option.
  * CLI: Removed deprecated `--list-langs` and`--list-themes`
    options.
  * GUI: Added terminal sequence output options
    (gl#saalen/highlight#110).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1558180800">- Update to version 3.51:
  * SVG output: Added `white-space: pre` in styles.
  * HTML output: Replaced &amp;apos; by &amp;#39; (deb#927410).
  * HTML output: Fixed index file format (missing close tags).
  * CLI: Moved syntax recognition functions to DataDir class.
  * CLI: Added regular expressions and default false values to
  - -verbose output.
  * CLI: Fixed `--list-cat` without `--list-scripts`
    (gl#saalen/highlight#107).
  * CLI: Added optional argument to `--base16`
    (gl#saalen/highlight#113).
  * CLI: Added default base16 themes (gl#saalen/highlight#113).
  * CLI: Added `--isolate` option (gl#saalen/highlight#118).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1559131200">- Update to version 3.52:
  * Added negation `~` to test state indicators
    (gl#saalen/highlight#122).
  * Added support for Hugo.
  * Added 5 duotone themes.
  * CLI: fixed segfault with `--force` (gl#saalen/highlight#125).
  * GUI: limited font selection to monospace fonts
    (gl#saalen/highlight#124).
- Rebase optflags patch:
  * Remove highlight-3.42-use_optflags.patch.
  * Add highlight-3.52-use_optflags.patch.
- Remove obsolete conditionals.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563537600">- Fix build instability (boo#1142155).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565179200">- Update to version 3.53:
  * Fixed out-of-range exception with repeated AddKeyword calls.
  * Added KeywordFormatHints, Priority and Constraints elements to
    syntax definitions.
  * Added Lua function AddPersistentState
    (gl#saalen/highlight#112).
  * Renamed md.lang to markdown.lang.
  * Added Fish syntax definition.
  * Makefile: added _FILE_OFFSET_BITS=64 flag.
  * CLI: added optional fallback syntax to --force
    (gl#saalen/highlight#126).
  * CLI: added option --max-size (gl#saalen/highlight#127).
  * GUI: added multibyte path trace window.
  * GUI: fixed superfluous creation of the same stylesheet file.
- Rebase optflags patch:
  * Remove highlight-3.52-use_optflags.patch.
  * Add highlight-3.53-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565956800">- Use lang_package macro for highlight-gui-lang declaration.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573473600">- Update to version 3.54:
  * Fixed default colour output in BBCode
    (gl#saalen/highlight#134).
  * Fixed corner case in sh.lang.
  * Fixed syntax tests with UTF-8 input (gl#saalen/highlight#123).
  * Added support for Bash in outhtml_codefold.lua plug-in.
  * Added ballerina.lang.
  * Added block strings to java.lang.
  * Added author hints in themes and language definitions.
  * Added C++20 reserved words in c.lang.
  * Added editorconfig file and validated all files accordingly.
  * CLI: Fixed --list-scripts with -d or HIGHLIGHT_DATADIR env
    variable (gl#saalen/highlight#139).
  * GUI: Removed AsciiDoc instruction lines from the README popup
    window.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 3.55:
  * Improved handling of empty files in xterm256 and truecolor
    output (gl#saalen/highlight#147).
  * Added EncodingHint attributes to filetypes.conf and language
    definitions (gl#saalen/highlight#141).
  * CLI: Allowed file paths as --theme and --syntax argument
    (gl#saalen/highlight#145).
  * GUI: Removed deprecated QTime API call.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1586347200">- Update to version 3.56:
  * Added support for Sequence Alignment Maps (SAM files).
  * Added empty-file mode to --no-trailing-nl
    (gl#saalen/highlight#147).
  * Fixed issue with --syntax-by-name waiting for stdin
    (gl#saalen/highlight#151).
  * Fixed issue with --syntax reading matching files in the
    current working directory (gl#saalen/highlight#151).
  * Fixed string parsing in lisp.lang (gl#saalen/highlight#150).
  * Fixed output of UTF-8 text in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed regex in js.lang.
  * Fixed calculation of testcase markers with UTF-8 input.
  * Allowed number literals with underscores in Java, Scala, D,
    Julia, C#, Perl and Ada definitions.
  * Added Nord theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1589544000">- Update to version 3.57:
  * Added support for Haml (gl#saalen/highlight#140).
  * Added support for Wren.
  * Added Lua function `OverrideParam`.
  * Fixed regression in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed `--list-scripts` with read-only language definitions
    (gl#saalen/highlight#154).
  * Improved several language definitions.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1599652800">- Update to version 3.58:
  * Improved `--force` fallback argument handling
    (gl#saalen/highlight#163).
  * Added C++ attribute syntax support.
  * Added Lua fuction `StoreValue` to set and retrieve information
    across Lua states.
  * Added `extras/eclipse-themes/eclipse_color_themes.py` script to
    retrieve themes from eclipsecolorthemes.org.
  * Added support for Web Assembly Text.
  * Updated mark_lines.lua to output 16m terminal sequences
    (gl#saalen/highlight#164).
  * Fixed issues in bash.lang (gl#saalen/highlight#161).
  * Fixed Bash heredoc highlighting in bash_functions.lua
    (gl#saalen/highlight#156).
  * CLI: `highlight --version -q` only prints the version number.
  * GUI: Added theme contrast indicator.
- Rebase optflags patch:
  * Remove highlight-3.53-use_optflags.patch.
  * Add highlight-3.58-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1605355200">- Update to version 3.59:
  * HTML output: Added `white-space: pre-wrap` to pre tag CSS.
  * Updated mark_lines.lua plug-in accept a line range as input
    parameter and output xterm256 terminal sequences.
  * Improved Ruby code folding of the outhtml_codefold plug-in.
  * Updated astyle lib to rev 672.
  * Added support for reStructured Text (gl#saalen/highlight#170).
  * Added support for Rego (openpolicyagent.org).
  * Added `outhtml_copy_clipboard.lua` plugin.
  * CLI: Adapted default xterm256/truecolor theme to terminal
    background colour.
  * CLI: Adapted ANSI line numbers to terminal background colour
    (gl#saalen/highlight#172).
  * CLI: Fixed segfault if the user home directory cannot be
    determined (gl#saalen/highlight#171).
  * GUI: Initial font set to Monospace.
  * GUI: Replaced highlight.xpm by highlight.png icon.
- Rebase optflags patch:
  * Remove highlight-3.58-use_optflags.patch.
  * Add highlight-3.59-use_optflags.patch.
- Add hicolor-icon-themes as build requirement: Required since move
  of highlight-gui icon.</changelog>
</package>
<package pkgid="74d58e0320c0c7b1e8a96ef6be360f90b0f74c887eeb232341514beda9ee02bc" name="highlight-debugsource" arch="x86_64">
  <version epoch="0" ver="3.59" rel="lp152.4.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1525176000">- Update to version 3.43:
  * Updated astyle code to release 3.1 (Rev. 655).
  * Added webkit reformatting style.
  * Improved several language definitions.
  * Fixed Matlab string recognition (#61).
  * Fixed Autohotkey escape sequence recognition.
  * Added excel.lang (#60).
  * Improved Qt pro file (#59).
  * CLI: Added --reformat-option (#62).
  * CLI: Added --line-range (#64).
  * GUI: Added Bulgarian translation.
- Rebase docdir patch on 3.43:
  * Remove highlight-3.41-fix-doc-dir.patch.
  * Add highlight-3.43-fix-doc-dir.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1525435200">- Make the build of gui subpackage conditional (built by default).
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1532174400">- Update to version 3.44:
  * Fixed gcc 8 compilation warnings.
  * Fixed Ruby string interpolation (gh#andre-simon/higlight#70).
  * Added support for ALAN IF.
  * Added 107 Base16 themes.
  * Updated Rust and Java reserved words lists.
  * Revised documentation.
  * Moved extras/css-themes into extras/themes-resources.
  * Added extras/themes-resources/base16.
  * GUI: added Base16 theme selection checkbox.
  * CLI: added --base16 option to enable the new themes.
  * CLI: accept - as argument to read from stdin
    (gh#andre-simon/highlight#73).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538740800">- Update to version 3.45:
  * Added DocumentHeader and DocumentFooter plug-in hooks.
  * Added RemoveKeyword Lua function for syntax definitions.
  * Added syntax test indicators (see README_TESTCASES).
  * Added support for ISO and R10 variants of Modula2.
  * Fixed R identifiers.
  * Fixed ALAN IF identifiers.
  * Fixed issue with Bash string interpolation.
  * Fixed some bugs found by coverity tool
    (gl#saalen/highlight#82).
  * Added Swift keywords and types.
  * Added filetypes.conf.5 man page (gl#saalen/highlight#83).
  * Added Gradle extension mapping.
- Renamed highlight-3.43-fix-doc-dir.patch to
  highlight-3.45-fix-doc-dir.patch: Rebased patch to 3.45.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538913600">- Update to version 3.46:
  * Fixed xterm256 and truecolor whitespace output
    (gl#saalen/highlight#90).
  * Converted manuals to AsciiDoc.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 3.47:
  * Fixed xterm256 and truecolor whitespace output #2
    (gl#saalen/highlight#90).
  * Fixed LaTeX, TeX, SVG and ODT whitespace output (regression of
    3.45).
  * Added darkplus theme.
  * Converted ChangeLog to AsciiDoc.
  * Allowed state test indicators to match both whitespace (ws) and
    the enclosing state (others).
  * CLI: Default output changed to xterm256 or truecolor if run in
    a terminal with color support and only a single file is
    outputted.
  * GUI: Added checkbox in the clipboard tab to output selected
    lines only.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 3.48:
  * Fixed --list-scripts abortion with Fedora default compilation
    options (gl#saalen/highlight#84).
  * Fixed a problem with syntax test indicators reporting wrong
    states after comments.
  * Improved Verilog syntax.
  * Improved quoted string highlighting for Perl and Ruby.
  * Detection of pkg-config's Lua version in src/makefile.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1549627200">- Update to version 3.49:
  * Fixed more problems with syntax test indicators reporting wrong
    states (gl#saalen/highlight#102).
  * Added support for Meson, Solidity, TOML and Terraform.
  * Improved Perl and Yaml highlighting.
  * Added Categories field to all config files.
  * CLI: added category info in --list-scripts output.
  * CLI: added --list-cat option (gl#saalen/highlight/99).
  * CLI: added optional topic parameter to --help.
  * GUI: added theme category selection.
  * GUI: display categories of selected syntax or theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1553947200">- Update to version 3.50:
  * Added lineno, column parameters to OnStateChange hook.
  * Added support for Crystal.
  * Added support for Slim.
  * Fixed several typos in documentaion and manpages.
  * CLI: Added `--syntax-by-name` option.
  * CLI: Removed deprecated `--list-langs` and`--list-themes`
    options.
  * GUI: Added terminal sequence output options
    (gl#saalen/highlight#110).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1558180800">- Update to version 3.51:
  * SVG output: Added `white-space: pre` in styles.
  * HTML output: Replaced &amp;apos; by &amp;#39; (deb#927410).
  * HTML output: Fixed index file format (missing close tags).
  * CLI: Moved syntax recognition functions to DataDir class.
  * CLI: Added regular expressions and default false values to
  - -verbose output.
  * CLI: Fixed `--list-cat` without `--list-scripts`
    (gl#saalen/highlight#107).
  * CLI: Added optional argument to `--base16`
    (gl#saalen/highlight#113).
  * CLI: Added default base16 themes (gl#saalen/highlight#113).
  * CLI: Added `--isolate` option (gl#saalen/highlight#118).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1559131200">- Update to version 3.52:
  * Added negation `~` to test state indicators
    (gl#saalen/highlight#122).
  * Added support for Hugo.
  * Added 5 duotone themes.
  * CLI: fixed segfault with `--force` (gl#saalen/highlight#125).
  * GUI: limited font selection to monospace fonts
    (gl#saalen/highlight#124).
- Rebase optflags patch:
  * Remove highlight-3.42-use_optflags.patch.
  * Add highlight-3.52-use_optflags.patch.
- Remove obsolete conditionals.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563537600">- Fix build instability (boo#1142155).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565179200">- Update to version 3.53:
  * Fixed out-of-range exception with repeated AddKeyword calls.
  * Added KeywordFormatHints, Priority and Constraints elements to
    syntax definitions.
  * Added Lua function AddPersistentState
    (gl#saalen/highlight#112).
  * Renamed md.lang to markdown.lang.
  * Added Fish syntax definition.
  * Makefile: added _FILE_OFFSET_BITS=64 flag.
  * CLI: added optional fallback syntax to --force
    (gl#saalen/highlight#126).
  * CLI: added option --max-size (gl#saalen/highlight#127).
  * GUI: added multibyte path trace window.
  * GUI: fixed superfluous creation of the same stylesheet file.
- Rebase optflags patch:
  * Remove highlight-3.52-use_optflags.patch.
  * Add highlight-3.53-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565956800">- Use lang_package macro for highlight-gui-lang declaration.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573473600">- Update to version 3.54:
  * Fixed default colour output in BBCode
    (gl#saalen/highlight#134).
  * Fixed corner case in sh.lang.
  * Fixed syntax tests with UTF-8 input (gl#saalen/highlight#123).
  * Added support for Bash in outhtml_codefold.lua plug-in.
  * Added ballerina.lang.
  * Added block strings to java.lang.
  * Added author hints in themes and language definitions.
  * Added C++20 reserved words in c.lang.
  * Added editorconfig file and validated all files accordingly.
  * CLI: Fixed --list-scripts with -d or HIGHLIGHT_DATADIR env
    variable (gl#saalen/highlight#139).
  * GUI: Removed AsciiDoc instruction lines from the README popup
    window.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 3.55:
  * Improved handling of empty files in xterm256 and truecolor
    output (gl#saalen/highlight#147).
  * Added EncodingHint attributes to filetypes.conf and language
    definitions (gl#saalen/highlight#141).
  * CLI: Allowed file paths as --theme and --syntax argument
    (gl#saalen/highlight#145).
  * GUI: Removed deprecated QTime API call.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1586347200">- Update to version 3.56:
  * Added support for Sequence Alignment Maps (SAM files).
  * Added empty-file mode to --no-trailing-nl
    (gl#saalen/highlight#147).
  * Fixed issue with --syntax-by-name waiting for stdin
    (gl#saalen/highlight#151).
  * Fixed issue with --syntax reading matching files in the
    current working directory (gl#saalen/highlight#151).
  * Fixed string parsing in lisp.lang (gl#saalen/highlight#150).
  * Fixed output of UTF-8 text in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed regex in js.lang.
  * Fixed calculation of testcase markers with UTF-8 input.
  * Allowed number literals with underscores in Java, Scala, D,
    Julia, C#, Perl and Ada definitions.
  * Added Nord theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1589544000">- Update to version 3.57:
  * Added support for Haml (gl#saalen/highlight#140).
  * Added support for Wren.
  * Added Lua function `OverrideParam`.
  * Fixed regression in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed `--list-scripts` with read-only language definitions
    (gl#saalen/highlight#154).
  * Improved several language definitions.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1599652800">- Update to version 3.58:
  * Improved `--force` fallback argument handling
    (gl#saalen/highlight#163).
  * Added C++ attribute syntax support.
  * Added Lua fuction `StoreValue` to set and retrieve information
    across Lua states.
  * Added `extras/eclipse-themes/eclipse_color_themes.py` script to
    retrieve themes from eclipsecolorthemes.org.
  * Added support for Web Assembly Text.
  * Updated mark_lines.lua to output 16m terminal sequences
    (gl#saalen/highlight#164).
  * Fixed issues in bash.lang (gl#saalen/highlight#161).
  * Fixed Bash heredoc highlighting in bash_functions.lua
    (gl#saalen/highlight#156).
  * CLI: `highlight --version -q` only prints the version number.
  * GUI: Added theme contrast indicator.
- Rebase optflags patch:
  * Remove highlight-3.53-use_optflags.patch.
  * Add highlight-3.58-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1605355200">- Update to version 3.59:
  * HTML output: Added `white-space: pre-wrap` to pre tag CSS.
  * Updated mark_lines.lua plug-in accept a line range as input
    parameter and output xterm256 terminal sequences.
  * Improved Ruby code folding of the outhtml_codefold plug-in.
  * Updated astyle lib to rev 672.
  * Added support for reStructured Text (gl#saalen/highlight#170).
  * Added support for Rego (openpolicyagent.org).
  * Added `outhtml_copy_clipboard.lua` plugin.
  * CLI: Adapted default xterm256/truecolor theme to terminal
    background colour.
  * CLI: Adapted ANSI line numbers to terminal background colour
    (gl#saalen/highlight#172).
  * CLI: Fixed segfault if the user home directory cannot be
    determined (gl#saalen/highlight#171).
  * GUI: Initial font set to Monospace.
  * GUI: Replaced highlight.xpm by highlight.png icon.
- Rebase optflags patch:
  * Remove highlight-3.58-use_optflags.patch.
  * Add highlight-3.59-use_optflags.patch.
- Add hicolor-icon-themes as build requirement: Required since move
  of highlight-gui icon.</changelog>
</package>
<package pkgid="8abf0449d914bf850053e63db487a7d4711aaf265f3929990e1ab1c8d7f4e4e7" name="highlight-gui-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.59" rel="lp152.4.3.1"/>
  <changelog author="antoine.belvire@opensuse.org" date="1525176000">- Update to version 3.43:
  * Updated astyle code to release 3.1 (Rev. 655).
  * Added webkit reformatting style.
  * Improved several language definitions.
  * Fixed Matlab string recognition (#61).
  * Fixed Autohotkey escape sequence recognition.
  * Added excel.lang (#60).
  * Improved Qt pro file (#59).
  * CLI: Added --reformat-option (#62).
  * CLI: Added --line-range (#64).
  * GUI: Added Bulgarian translation.
- Rebase docdir patch on 3.43:
  * Remove highlight-3.41-fix-doc-dir.patch.
  * Add highlight-3.43-fix-doc-dir.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1525435200">- Make the build of gui subpackage conditional (built by default).
- Clean spec file with spec-cleaner.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1532174400">- Update to version 3.44:
  * Fixed gcc 8 compilation warnings.
  * Fixed Ruby string interpolation (gh#andre-simon/higlight#70).
  * Added support for ALAN IF.
  * Added 107 Base16 themes.
  * Updated Rust and Java reserved words lists.
  * Revised documentation.
  * Moved extras/css-themes into extras/themes-resources.
  * Added extras/themes-resources/base16.
  * GUI: added Base16 theme selection checkbox.
  * CLI: added --base16 option to enable the new themes.
  * CLI: accept - as argument to read from stdin
    (gh#andre-simon/highlight#73).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538740800">- Update to version 3.45:
  * Added DocumentHeader and DocumentFooter plug-in hooks.
  * Added RemoveKeyword Lua function for syntax definitions.
  * Added syntax test indicators (see README_TESTCASES).
  * Added support for ISO and R10 variants of Modula2.
  * Fixed R identifiers.
  * Fixed ALAN IF identifiers.
  * Fixed issue with Bash string interpolation.
  * Fixed some bugs found by coverity tool
    (gl#saalen/highlight#82).
  * Added Swift keywords and types.
  * Added filetypes.conf.5 man page (gl#saalen/highlight#83).
  * Added Gradle extension mapping.
- Renamed highlight-3.43-fix-doc-dir.patch to
  highlight-3.45-fix-doc-dir.patch: Rebased patch to 3.45.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1538913600">- Update to version 3.46:
  * Fixed xterm256 and truecolor whitespace output
    (gl#saalen/highlight#90).
  * Converted manuals to AsciiDoc.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1539518400">- Update to version 3.47:
  * Fixed xterm256 and truecolor whitespace output #2
    (gl#saalen/highlight#90).
  * Fixed LaTeX, TeX, SVG and ODT whitespace output (regression of
    3.45).
  * Added darkplus theme.
  * Converted ChangeLog to AsciiDoc.
  * Allowed state test indicators to match both whitespace (ws) and
    the enclosing state (others).
  * CLI: Default output changed to xterm256 or truecolor if run in
    a terminal with color support and only a single file is
    outputted.
  * GUI: Added checkbox in the clipboard tab to output selected
    lines only.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1544788800">- Update to version 3.48:
  * Fixed --list-scripts abortion with Fedora default compilation
    options (gl#saalen/highlight#84).
  * Fixed a problem with syntax test indicators reporting wrong
    states after comments.
  * Improved Verilog syntax.
  * Improved quoted string highlighting for Perl and Ruby.
  * Detection of pkg-config's Lua version in src/makefile.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1549627200">- Update to version 3.49:
  * Fixed more problems with syntax test indicators reporting wrong
    states (gl#saalen/highlight#102).
  * Added support for Meson, Solidity, TOML and Terraform.
  * Improved Perl and Yaml highlighting.
  * Added Categories field to all config files.
  * CLI: added category info in --list-scripts output.
  * CLI: added --list-cat option (gl#saalen/highlight/99).
  * CLI: added optional topic parameter to --help.
  * GUI: added theme category selection.
  * GUI: display categories of selected syntax or theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1553947200">- Update to version 3.50:
  * Added lineno, column parameters to OnStateChange hook.
  * Added support for Crystal.
  * Added support for Slim.
  * Fixed several typos in documentaion and manpages.
  * CLI: Added `--syntax-by-name` option.
  * CLI: Removed deprecated `--list-langs` and`--list-themes`
    options.
  * GUI: Added terminal sequence output options
    (gl#saalen/highlight#110).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1558180800">- Update to version 3.51:
  * SVG output: Added `white-space: pre` in styles.
  * HTML output: Replaced &amp;apos; by &amp;#39; (deb#927410).
  * HTML output: Fixed index file format (missing close tags).
  * CLI: Moved syntax recognition functions to DataDir class.
  * CLI: Added regular expressions and default false values to
  - -verbose output.
  * CLI: Fixed `--list-cat` without `--list-scripts`
    (gl#saalen/highlight#107).
  * CLI: Added optional argument to `--base16`
    (gl#saalen/highlight#113).
  * CLI: Added default base16 themes (gl#saalen/highlight#113).
  * CLI: Added `--isolate` option (gl#saalen/highlight#118).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1559131200">- Update to version 3.52:
  * Added negation `~` to test state indicators
    (gl#saalen/highlight#122).
  * Added support for Hugo.
  * Added 5 duotone themes.
  * CLI: fixed segfault with `--force` (gl#saalen/highlight#125).
  * GUI: limited font selection to monospace fonts
    (gl#saalen/highlight#124).
- Rebase optflags patch:
  * Remove highlight-3.42-use_optflags.patch.
  * Add highlight-3.52-use_optflags.patch.
- Remove obsolete conditionals.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563537600">- Fix build instability (boo#1142155).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565179200">- Update to version 3.53:
  * Fixed out-of-range exception with repeated AddKeyword calls.
  * Added KeywordFormatHints, Priority and Constraints elements to
    syntax definitions.
  * Added Lua function AddPersistentState
    (gl#saalen/highlight#112).
  * Renamed md.lang to markdown.lang.
  * Added Fish syntax definition.
  * Makefile: added _FILE_OFFSET_BITS=64 flag.
  * CLI: added optional fallback syntax to --force
    (gl#saalen/highlight#126).
  * CLI: added option --max-size (gl#saalen/highlight#127).
  * GUI: added multibyte path trace window.
  * GUI: fixed superfluous creation of the same stylesheet file.
- Rebase optflags patch:
  * Remove highlight-3.52-use_optflags.patch.
  * Add highlight-3.53-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565956800">- Use lang_package macro for highlight-gui-lang declaration.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1573473600">- Update to version 3.54:
  * Fixed default colour output in BBCode
    (gl#saalen/highlight#134).
  * Fixed corner case in sh.lang.
  * Fixed syntax tests with UTF-8 input (gl#saalen/highlight#123).
  * Added support for Bash in outhtml_codefold.lua plug-in.
  * Added ballerina.lang.
  * Added block strings to java.lang.
  * Added author hints in themes and language definitions.
  * Added C++20 reserved words in c.lang.
  * Added editorconfig file and validated all files accordingly.
  * CLI: Fixed --list-scripts with -d or HIGHLIGHT_DATADIR env
    variable (gl#saalen/highlight#139).
  * GUI: Removed AsciiDoc instruction lines from the README popup
    window.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1580299200">- Update to version 3.55:
  * Improved handling of empty files in xterm256 and truecolor
    output (gl#saalen/highlight#147).
  * Added EncodingHint attributes to filetypes.conf and language
    definitions (gl#saalen/highlight#141).
  * CLI: Allowed file paths as --theme and --syntax argument
    (gl#saalen/highlight#145).
  * GUI: Removed deprecated QTime API call.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1586347200">- Update to version 3.56:
  * Added support for Sequence Alignment Maps (SAM files).
  * Added empty-file mode to --no-trailing-nl
    (gl#saalen/highlight#147).
  * Fixed issue with --syntax-by-name waiting for stdin
    (gl#saalen/highlight#151).
  * Fixed issue with --syntax reading matching files in the
    current working directory (gl#saalen/highlight#151).
  * Fixed string parsing in lisp.lang (gl#saalen/highlight#150).
  * Fixed output of UTF-8 text in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed regex in js.lang.
  * Fixed calculation of testcase markers with UTF-8 input.
  * Allowed number literals with underscores in Java, Scala, D,
    Julia, C#, Perl and Ada definitions.
  * Added Nord theme.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1589544000">- Update to version 3.57:
  * Added support for Haml (gl#saalen/highlight#140).
  * Added support for Wren.
  * Added Lua function `OverrideParam`.
  * Fixed regression in xterm256 or truecolor output
    (gl#saalen/highlight#152).
  * Fixed `--list-scripts` with read-only language definitions
    (gl#saalen/highlight#154).
  * Improved several language definitions.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1599652800">- Update to version 3.58:
  * Improved `--force` fallback argument handling
    (gl#saalen/highlight#163).
  * Added C++ attribute syntax support.
  * Added Lua fuction `StoreValue` to set and retrieve information
    across Lua states.
  * Added `extras/eclipse-themes/eclipse_color_themes.py` script to
    retrieve themes from eclipsecolorthemes.org.
  * Added support for Web Assembly Text.
  * Updated mark_lines.lua to output 16m terminal sequences
    (gl#saalen/highlight#164).
  * Fixed issues in bash.lang (gl#saalen/highlight#161).
  * Fixed Bash heredoc highlighting in bash_functions.lua
    (gl#saalen/highlight#156).
  * CLI: `highlight --version -q` only prints the version number.
  * GUI: Added theme contrast indicator.
- Rebase optflags patch:
  * Remove highlight-3.53-use_optflags.patch.
  * Add highlight-3.58-use_optflags.patch.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1605355200">- Update to version 3.59:
  * HTML output: Added `white-space: pre-wrap` to pre tag CSS.
  * Updated mark_lines.lua plug-in accept a line range as input
    parameter and output xterm256 terminal sequences.
  * Improved Ruby code folding of the outhtml_codefold plug-in.
  * Updated astyle lib to rev 672.
  * Added support for reStructured Text (gl#saalen/highlight#170).
  * Added support for Rego (openpolicyagent.org).
  * Added `outhtml_copy_clipboard.lua` plugin.
  * CLI: Adapted default xterm256/truecolor theme to terminal
    background colour.
  * CLI: Adapted ANSI line numbers to terminal background colour
    (gl#saalen/highlight#172).
  * CLI: Fixed segfault if the user home directory cannot be
    determined (gl#saalen/highlight#171).
  * GUI: Initial font set to Monospace.
  * GUI: Replaced highlight.xpm by highlight.png icon.
- Rebase optflags patch:
  * Remove highlight-3.58-use_optflags.patch.
  * Add highlight-3.59-use_optflags.patch.
- Add hicolor-icon-themes as build requirement: Required since move
  of highlight-gui icon.</changelog>
</package>
<package pkgid="61a7e4413624e5dfe5f44dd9f8391ae5887fa2886940b13182df90cd2eb3218d" name="hostapd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
</package>
<package pkgid="4641de1f78b99021976e96b9d5dff8909fb1b4ee560428c95a4032dc301a2844" name="hostapd-debugsource" arch="x86_64">
  <version epoch="0" ver="2.9" rel="lp152.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1420459200">- update version 2.3
- removed patch hostapd-2.1-be-host_to_le.patch because it
  seems obsolete
- hostapd-2.1-defconfig.patch rediffed and renamed to hostapd-2.3-defconfig.patch
  ChangeLog for hostapd since 2.1:
  2014-10-09 - v2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed DFS and channel switch operation for multi-BSS cases
  * started to use constant time comparison for various password and hash
  values to reduce possibility of any externally measurable timing
  differences
  * extended explicit clearing of freed memory and expired keys to avoid
  keeping private data in memory longer than necessary
  * added support for number of new RADIUS attributes from RFC 7268
  (Mobility-Domain-Id, WLAN-HESSID, WLAN-Pairwise-Cipher,
  WLAN-Group-Cipher, WLAN-AKM-Suite, WLAN-Group-Mgmt-Pairwise-Cipher)
  * fixed GET_CONFIG wpa_pairwise_cipher value
  * added code to clear bridge FDB entry on station disconnection
  * fixed PMKSA cache timeout from Session-Timeout for WPA/WPA2 cases
  * fixed OKC PMKSA cache entry fetch to avoid a possible infinite loop
  in case the first entry does not match
  * fixed hostapd_cli action script execution to use more robust mechanism
  (CVE-2014-3686)
  2014-06-04 - v2.2
  * fixed SAE confirm-before-commit validation to avoid a potential
  segmentation fault in an unexpected message sequence that could be
  triggered remotely
  * extended VHT support
  - Operating Mode Notification
  - Power Constraint element (local_pwr_constraint)
  - Spectrum management capability (spectrum_mgmt_required=1)
  - fix VHT80 segment picking in ACS
  - fix vht_capab 'Maximum A-MPDU Length Exponent' handling
  - fix VHT20
  * fixed HT40 co-ex scan for some pri/sec channel switches
  * extended HT40 co-ex support to allow dynamic channel width changes
  during the lifetime of the BSS
  * fixed HT40 co-ex support to check for overlapping 20 MHz BSS
  * fixed MSCHAP UTF-8 to UCS-2 conversion for three-byte encoding;
  this fixes password with include UTF-8 characters that use
  three-byte encoding EAP methods that use NtPasswordHash
  * reverted TLS certificate validation step change in v2.1 that rejected
  any AAA server certificate with id-kp-clientAuth even if
  id-kp-serverAuth EKU was included
  * fixed STA validation step for WPS ER commands to prevent a potential
  crash if an ER sends an unexpected PutWLANResponse to a station that
  is disassociated, but not fully removed
  * enforce full EAP authentication after RADIUS Disconnect-Request by
  removing the PMKSA cache entry
  * added support for NAS-IP-Address, NAS-identifier, and NAS-IPv6-Address
  in RADIUS Disconnect-Request
  * added mechanism for removing addresses for MAC ACLs by prefixing an
  entry with "-"
  * Interworking/Hotspot 2.0 enhancements
  - support Hotspot 2.0 Release 2
  * OSEN network for online signup connection
  * subscription remediation (based on RADIUS server request or
  control interface HS20_WNM_NOTIF for testing purposes)
  * Hotspot 2.0 release number indication in WFA RADIUS VSA
  * deauthentication request (based on RADIUS server request or
  control interface WNM_DEAUTH_REQ for testing purposes)
  * Session Info URL RADIUS AVP to trigger ESS Disassociation Imminent
  * hs20_icon config parameter to configure icon files for OSU
  * osu_* config parameters for OSU Providers list
  - do not use Interworking filtering rules on Probe Request if
  Interworking is disabled to avoid interop issues
  * added/fixed nl80211 functionality
  - AP interface teardown optimization
  - support vendor specific driver command
  (VENDOR &lt;vendor id&gt; &lt;sub command id&gt; [&lt;hex formatted data&gt;])
  * fixed PMF protection of Deauthentication frame when this is triggered
  by session timeout
  * internal TLS implementation enhancements/fixes
  - add SHA256-based cipher suites
  - add DHE-RSA cipher suites
  - fix X.509 validation of PKCS#1 signature to check for extra data
  * RADIUS server functionality
  - add minimal RADIUS accounting server support (hostapd-as-server);
  this is mainly to enable testing coverage with hwsim scripts
  - allow authentication log to be written into SQLite databse
  - added option for TLS protocol testing of an EAP peer by simulating
  various misbehaviors/known attacks
  - MAC ACL support for testing purposes
  * fixed PTK derivation for CCMP-256 and GCMP-256
  * extended WPS per-station PSK to support ER case
  * added option to configure the management group cipher
  (group_mgmt_cipher=AES-128-CMAC (default), BIP-GMAC-128, BIP-GMAC-256,
  BIP-CMAC-256)
  * fixed AP mode default TXOP Limit values for AC_VI and AC_VO (these
  were rounded incorrectly)
  * added support for postponing FT response in case PMK-R1 needs to be
  pulled from R0KH
  * added option to advertise 40 MHz intolerant HT capability with
  ht_capab=[40-INTOLERANT]
  * remove WPS 1.0 only support, i.e., WSC 2.0 support is now enabled
  whenever CONFIG_WPS=y is set
  * EAP-pwd fixes
  - fix possible segmentation fault on EAP method deinit if an invalid
  group is negotiated
  * fixed RADIUS client retransmit/failover behavior
  - there was a potential ctash due to freed memory being accessed
  - failover to a backup server mechanism did not work properly
  * fixed a possible crash on double DISABLE command when multiple BSSes
  are enabled
  * fixed a memory leak in SAE random number generation
  * fixed GTK rekeying when the station uses FT protocol
  * fixed off-by-one bounds checking in printf_encode()
  - this could result in deinial of service in some EAP server cases
  * various bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1429790400">- update version 2.4
- added 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  for CVE-2015-1863
- updated URLs
- require pkg-config and libnl3-devel during build
- replaced hostapd-2.3-defconfig.patch by hostapd-2.4-defconfig.patch
  ChangeLog for hostapd since 2.3:
  2015-03-15 - v2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * fixed Accounting-Request to not include duplicated Acct-Session-Id
  * add support for Acct-Multi-Session-Id in RADIUS Accounting messages
  * add support for PMKSA caching with SAE
  * add support for generating BSS Load element (bss_load_update_period)
  * fixed channel switch from VHT to HT
  * add INTERFACE-ENABLED and INTERFACE-DISABLED ctrl_iface events
  * add support for learning STA IPv4/IPv6 addresses and configuring
    ProxyARP support
  * dropped support for the madwifi driver interface
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * fixed a regression with driver=wired
  * extend EAPOL-Key msg 1/4 retry workaround for changing SNonce
  * add BSS_TM_REQ ctrl_iface command to send BSS Transition Management
    Request frames and BSS-TM-RESP event to indicate response to such
    frame
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed AP IE in EAPOL-Key 3/4 when both WPA and FT was enabled
  * fixed a regression in HT 20/40 coex Action frame parsing
  * set stdout to be line-buffered
  * add support for vendor specific VHT extension to enable 256 QAM rates
    (VHT-MCS 8 and 9) on 2.4 GHz band
  * RADIUS DAS:
  - extend Disconnect-Request processing to allow matching of multiple
    sessions
  - support Acct-Multi-Session-Id as an identifier
  - allow PMKSA cache entry to be removed without association
  * expire hostapd STA entry if kernel does not have a matching entry
  * allow chanlist to be used to specify a subset of channels for ACS
  * improve ACS behavior on 2.4 GHz band and allow channel bias to be
    configured with acs_chan_bias parameter
  * do not reply to a Probe Request frame that includes DSS Parameter Set
    element in which the channel does not match the current operating
    channel
  * add UPDATE_BEACON ctrl_iface command; this can be used to force Beacon
    frame contents to be updated and to start beaconing on an interface
    that used start_disabled=1
  * fixed some RADIUS server failover cases</changelog>
  <changelog author="michael@stroeder.com" date="1445169600">- update to upstream release 2.5
- removed 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  (CVE-2015-1863) because it's fixed in upstream release 2.5
- rebased hostapd-2.4-defconfig.patch -&gt; hostapd-2.5-defconfig.patch
  ChangeLog for hostapd since 2.4:
  2015-09-27 - v2.5
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
  [http://w1.fi/security/2015-2/] (CVE-2015-4141 bsc#930077)
  * fixed WMM Action frame parser
  [http://w1.fi/security/2015-3/] (CVE-2015-4142 bsc#930078)
  * fixed EAP-pwd server missing payload length validation
  [http://w1.fi/security/2015-4/]
  (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, bsc#930079)
  * fixed validation of WPS and P2P NFC NDEF record payload length
  [http://w1.fi/security/2015-5/]
  * nl80211:
  - fixed vendor command handling to check OUI properly
  * fixed hlr_auc_gw build with OpenSSL
  * hlr_auc_gw: allow Milenage RES length to be reduced
  * disable HT for a station that does not support WMM/QoS
  * added support for hashed password (NtHash) in EAP-pwd server
  * fixed and extended dynamic VLAN cases
  * added EAP-EKE server support for deriving Session-Id
  * set Acct-Session-Id to a random value to make it more likely to be
  unique even if the device does not have a proper clock
  * added more 2.4 GHz channels for 20/40 MHz HT co-ex scan
  * modified SAE routines to be more robust and PWE generation to be
  stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * increases maximum value accepted for cwmin/cwmax
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * added Fast Session Transfer (FST) module
  * removed optional fields from RSNE when using FT with PMF
  (workaround for interoperability issues with iOS 8.4)
  * added EAP server support for TLS session resumption
  * fixed key derivation for Suite B 192-bit AKM (this breaks
  compatibility with the earlier version)
  * added mechanism to track unconnected stations and do minimal band
  steering
  * number of small fixes</changelog>
  <changelog author="chris@intrbiz.com" date="1475409600">- update to upstream release 2.6
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5314)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476)
  * extended channel switch support for VHT bandwidth changes
  * added support for configuring new ANQP-elements with
    anqp_elem=&lt;InfoID&gt;:&lt;hexdump of payload&gt;
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * added no_probe_resp_if_max_sta=1 parameter to disable Probe Response
    frame sending for not-associated STAs if max_num_sta limit has been
    reached
  * added option (-S as command line argument) to request all interfaces
    to be started at the same time
  * modified rts_threshold and fragm_threshold configuration parameters
    to allow -1 to be used to disable RTS/fragmentation
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * fixed and improved various FST operations
  * TLS server
  - support SHA384 and SHA512 hashes
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * added support for OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * EAP-PEAP: support fast-connect crypto binding
  * RADIUS
  - fix Called-Station-Id to not escape SSID
  - add Event-Timestamp to all Accounting-Request packets
  - add Acct-Session-Id to Accounting-On/Off
  - add Acct-Multi-Session-Id  ton Access-Request packets
  - add Service-Type (= Frames)
  - allow server to provide PSK instead of passphrase for WPA-PSK
    Tunnel_password case
  - update full message for interim accounting updates
  - add Acct-Delay-Time into Accounting messages
  - add require_message_authenticator configuration option to require
    CoA/Disconnect-Request packets to be authenticated
  * started to postpone WNM-Notification frame sending by 100 ms so that
    the STA has some more time to configure the key before this frame is
    received after the 4-way handshake
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * extended VLAN support (per-STA vif, etc.)
  * fixed PMKID derivation with SAE
  * nl80211
  - added support for full station state operations
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added initial functionality for location related operations
  * added assocresp_elements parameter to allow vendor specific elements
    to be added into (Re)Association Response frames
  * improved Public Action frame addressing
  - use Address 3 = wildcard BSSID in GAS response if a query from an
    unassociated STA used that address
  - fix TX status processing for Address 3 = wildcard BSSID
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * added command line parameter -i to override interface parameter in
    hostapd.conf
  * added command completion support to hostapd_cli
  * added passive client taxonomy determination (CONFIG_TAXONOMY=y
    compile option and "SIGNATURE &lt;addr&gt;" control interface command)
  * number of small fixes
- renamed hostapd-2.5-defconfig.patch to hostapd-2.6-defconfig.patch</changelog>
  <changelog author="chris@intrbiz.com" date="1508328000">- Fix KRACK attacks (bsc#1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.com&gt;" date="1539950400">- Added rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
  Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526, bsc#1104205).</changelog>
  <changelog author="mardnh@gmx.de" date="1544184000">- Update to version 2.7
  * fixed WPA packet number reuse with replayed messages and key
    reinstallation
    [http://w1.fi/security/2017-1/] (CVE-2017-13082) (bsc#1056061)
  * added support for FILS (IEEE 802.11ai) shared key authentication
  * added support for OWE (Opportunistic Wireless Encryption, RFC 8110;
    and transition mode defined by WFA)
  * added support for DPP (Wi-Fi Device Provisioning Protocol)
  * FT:
  - added local generation of PMK-R0/PMK-R1 for FT-PSK
    (ft_psk_generate_local=1)
  - replaced inter-AP protocol with a cleaner design that is more
    easily extensible; this breaks backward compatibility and requires
    all APs in the ESS to be updated at the same time to maintain FT
    functionality
  - added support for wildcard R0KH/R1KH
  - replaced r0_key_lifetime (minutes) parameter with
    ft_r0_key_lifetime (seconds)
  - fixed wpa_psk_file use for FT-PSK
  - fixed FT-SAE PMKID matching
  - added expiration to PMK-R0 and PMK-R1 cache
  - added IEEE VLAN support (including tagged VLANs)
  - added support for SHA384 based AKM
  * SAE
  - fixed some PMKSA caching cases with SAE
  - added support for configuring SAE password separately of the
    WPA2 PSK/passphrase
  - added option to require MFP for SAE associations
    (sae_require_pmf=1)
  - fixed PTK and EAPOL-Key integrity and key-wrap algorithm selection
    for SAE;
    note: this is not backwards compatible, i.e., both the AP and
    station side implementations will need to be update at the same
    time to maintain interoperability
  - added support for Password Identifier
  * hostapd_cli: added support for command history and completion
  * added support for requesting beacon report
  * large number of other fixes, cleanup, and extensions
  * added option to configure EAPOL-Key retry limits
    (wpa_group_update_count and wpa_pairwise_update_count)
  * removed all PeerKey functionality
  * fixed nl80211 AP mode configuration regression with Linux 4.15 and
    newer
  * added support for using wolfSSL cryptographic library
  * fixed some 20/40 MHz coexistence cases where the BSS could drop to
    20 MHz even when 40 MHz would be allowed
  * Hotspot 2.0
  - added support for setting Venue URL ANQP-element (venue_url)
  - added support for advertising Hotspot 2.0 operator icons
  - added support for Roaming Consortium Selection element
  - added support for Terms and Conditions
  - added support for OSEN connection in a shared RSN BSS
  * added support for using OpenSSL 1.1.1
  * added EAP-pwd server support for salted passwords
- Remove not longer needed patches (fixed upstream)
  * rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  * rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  * rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  * rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  * rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  * rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  * rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch
  * rebased-v2.6-0001-WPA-Ignore-unauthenticated-encrypted-EAPOL-Key-data.patch
- Verify source signature</changelog>
  <changelog author="Karol Babioch &lt;kbabioch@suse.de&gt;" date="1545048000">- Applied spec-cleaner
- Added bug reference
- Use defconfig file as template for configuration instead of patching it
  during build. This is easier to maintain in the long run. This removes the
  patch hostapd-2.6-defconfig.patch in favor of a simple config file, which is
  copied over from the source directory.
- Enabled CLI editing and history support.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1545998400">- Use noun phrase in summary.</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1556107200">- Update to version 2.8
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only group 19
    (i.e., disable groups 20, 21, 25, 26 from default configuration) and
    disable all unsuitable groups completely based on REVmd changes
  - improved anti-clogging token mechanism and SAE authentication
    frame processing during heavy CPU load; this mitigates some issues
    with potential DoS attacks trying to flood an AP with large number
    of SAE messages
  - added Finite Cyclic Group field in status code 77 responses
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  - fixed confirm message validation in error cases
    [https://w1.fi/security/2019-3/] (CVE-2019-9496)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify peer scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9497 and CVE-2019-9498)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * Hotspot 2.0 changes
  - added support for release number 3
  - reject release 2 or newer association without PMF
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and configuration parameter ocv=1)
  * added Multi-AP protocol support
  * added FTM responder configuration
  * fixed build with LibreSSL
  * added FT/RRB workaround for short Ethernet frame padding
  * fixed KEK2 derivation for FILS+FT
  * added RSSI-based association rejection from OCE
  * extended beacon reporting functionality
  * VLAN changes
  - allow local VLAN management with remote RADIUS authentication
  - add WPA/WPA2 passphrase/PSK -based VLAN assignment
  * OpenSSL: allow systemwide policies to be overridden
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * fixed FT and SA Query Action frame with AP-MLME-in-driver cases
  * OWE: allow Diffie-Hellman Parameter element to be included with DPP
    in preparation for DPP protocol extension
  * RADIUS server: started to accept ERP keyName-NAI as user identity
    automatically without matching EAP database entry
  * fixed PTK rekeying with FILS and FT
  wpa_supplicant:
  * SAE changes
  - added support for SAE Password Identifier
  - changed default configuration to enable only groups 19, 20, 21
    (i.e., disable groups 25 and 26) and disable all unsuitable groups
    completely based on REVmd changes
  - do not regenerate PWE unnecessarily when the AP uses the
    anti-clogging token mechanisms
  - fixed some association cases where both SAE and FT-SAE were enabled
    on both the station and the selected AP
  - started to prefer FT-SAE over SAE AKM if both are enabled
  - started to prefer FT-SAE over FT-PSK if both are enabled
  - fixed FT-SAE when SAE PMKSA caching is used
  - reject use of unsuitable groups based on new implementation guidance
    in REVmd (allow only FFC groups with prime &gt;= 3072 bits and ECC
    groups with prime &gt;= 256)
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-1/] (CVE-2019-9494)
  * EAP-pwd changes
  - minimize timing and memory use differences in PWE derivation
    [https://w1.fi/security/2019-2/] (CVE-2019-9495)
  - verify server scalar/element
    [https://w1.fi/security/2019-4/] (CVE-2019-9499)
  - fix message reassembly issue with unexpected fragment
    [https://w1.fi/security/2019-5/]
  - enforce rand,mask generation rules more strictly
  - fix a memory leak in PWE derivation
  - disallow ECC groups with a prime under 256 bits (groups 25, 26, and
    27)
  * fixed CONFIG_IEEE80211R=y (FT) build without CONFIG_FILS=y
  * Hotspot 2.0 changes
  - do not indicate release number that is higher than the one
    AP supports
  - added support for release number 3
  - enable PMF automatically for network profiles created from
    credentials
  * fixed OWE network profile saving
  * fixed DPP network profile saving
  * added support for RSN operating channel validation
    (CONFIG_OCV=y and network profile parameter ocv=1)
  * added Multi-AP backhaul STA support
  * fixed build with LibreSSL
  * number of MKA/MACsec fixes and extensions
  * extended domain_match and domain_suffix_match to allow list of values
  * fixed dNSName matching in domain_match and domain_suffix_match when
    using wolfSSL
  * started to prefer FT-EAP-SHA384 over WPA-EAP-SUITE-B-192 AKM if both
    are enabled
  * extended nl80211 Connect and external authentication to support
    SAE, FT-SAE, FT-EAP-SHA384
  * fixed KEK2 derivation for FILS+FT
  * extended client_cert file to allow loading of a chain of PEM
    encoded certificates
  * extended beacon reporting functionality
  * extended D-Bus interface with number of new properties
  * fixed a regression in FT-over-DS with mac80211-based drivers
  * OpenSSL: allow systemwide policies to be overridden
  * extended driver flags indication for separate 802.1X and PSK
    4-way handshake offload capability
  * added support for random P2P Device/Interface Address use
  * extended PEAP to derive EMSK to enable use with ERP/FILS
  * extended WPS to allow SAE configuration to be added automatically
    for PSK (wps_cred_add_sae=1)
  * removed support for the old D-Bus interface (CONFIG_CTRL_IFACE_DBUS)
  * extended domain_match and domain_suffix_match to allow list of values
  * added a RSN workaround for misbehaving PMF APs that advertise
    IGTK/BIP KeyID using incorrect byte order
  * fixed PTK rekeying with FILS and FT</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1567684800">- Update to version 2.9
  * SAE changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * EAP-pwd changes
  - disable use of groups using Brainpool curves
  - improved protection against side channel attacks
    [https://w1.fi/security/2019-6/]
  * fixed FT-EAP initial mobility domain association using PMKSA caching
  * added configuration of airtime policy
  * fixed FILS to and RSNE into (Re)Association Response frames
  * fixed DPP bootstrapping URI parser of channel list
  * added support for regulatory WMM limitation (for ETSI)
  * added support for MACsec Key Agreement using IEEE 802.1X/PSK
  * added experimental support for EAP-TEAP server (RFC 7170)
  * added experimental support for EAP-TLS server with TLS v1.3
  * added support for two server certificates/keys (RSA/ECC)
  * added AKMSuiteSelector into "STA &lt;addr&gt;" control interface data to
    determine with AKM was used for an association
  * added eap_sim_id parameter to allow EAP-SIM/AKA server pseudonym and
    fast reauthentication use to be disabled
  * fixed an ECDH operation corner case with OpenSSL</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1587643200">- Add CVE-2019-16275.patch -- AP mode PMF disconnection protection bypass
  (bsc#1150934)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1601380800">- Add CVE-2020-12695.patch -- UPnP SUBSCRIBE misbehavior in hostapd WPS AP
  (bsc#1172700)</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1614081600">- added AppArmor profile (source apparmor-usr.sbin.hostapd)</changelog>
  <changelog author="Clemens Famulla-Conrad &lt;cfamullaconrad@suse.com&gt;" date="1617710400">- Add CVE-2021-30004.patch -- forging attacks may occur because
  AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c
  (bsc#1184348)</changelog>
</package>
<package pkgid="4bb4c50bba2b5ea78930e7ac5491f68d2ce4d0db729475e7a7be04c225bf7275" name="hplip-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.12" rel="lp152.2.3.1"/>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1555070400">- Added hp-uiscan application
- Updated URLs and source URLs
- Updated/rebased hplip-misc-missing-includes-and-definitions.patch
- Added hplip-remove-imageprocessor.diff which fully removes references
  to the closed source ImageProcessor. Thanks to Didier Raboud from Debian.
- Addded hplip-orblite-return-null.diff to let a function return NULL
  insetad of nothing.
- update to 3.19.3
  Added support for the following new Printers:
  * HP Color LaserJet Managed E65150dn
  * HP Color LaserJet Managed E65160dn
  * HP Color LaserJet Managed Flow MFP E67660z
  * HP Color LaserJet Managed MFP E67650dh
  * HP Color LaserJet Managed MFP E77422a
  * HP Color LaserJet Managed MFP E77422dn
  * HP Color LaserJet Managed MFP E77422dv
  * HP Color LaserJet Managed MFP E77428dn
  * HP Color LaserJet Managed MFP E87640 du
  * HP Color LaserJet Managed MFP E87650du
  * HP Color LaserJet Managed MFP E87660du
  * HP DesignJet T1708 PostScript
  * HP DesignJet T1708dr PostScript
  * HP DesignJet Z6 24in
  * HP DesignJet Z6 44in
  * HP DesignJet Z6dr 44in
  * HP DesignJet Z9 24in
  * HP DesignJet Z9 44in
  * HP DesignJet Z9dr 44in
  * HP Ink Tank 115
  * HP Ink Tank 310
  * HP Ink Tank Wireless 410
  * HP LaserJet Managed E60155dn
  * HP LaserJet Managed E60165dn
  * HP LaserJet Managed E60175dn
  * HP LaserJet Managed Flow MFP E62665h
  * HP LaserJet Managed Flow MFP E62665z
  * HP LaserJet Managed Flow MFP E62675z
  * HP LaserJet Managed MFP E62655dn
  * HP LaserJet Managed MFP E62665hs
  * HP LaserJet Managed MFP E82540du
  * HP LaserJet Managed MFP E82550du
  * HP LaserJet Managed MFP E82560du
  * HP LaserJet MFP E72425a
  * HP LaserJet MFP E72425dn
  * HP LaserJet MFP E72425dv
  * HP LaserJet MFP E72430dn
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149fdw
  * HP LaserJet Pro MFP M149fdw
  * HP OfficeJet All-in-One 9010
  * HP OfficeJet Pro All-in-One 9010
  * HP OfficeJet Pro All-in-One 9020
  * HP PageWide 755dn
  * HP PageWide 755dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dns
  * HP PageWide MFP 774dns
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dns
  * HP PageWide MFP 779dns
  * HP PageWide XL 4100 MFP
  * HP PageWide XL 4100 Printer
  * HP PageWide XL 4600 Printer
  * HP PageWide XL 4600PS MFP
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Smart Tank 350
  * HP Smart Tank Wireless 450
  * HP Tango
  * HP Tango X
  Added support for the following new ScanJet Device:
  * HP Scanjet Pro 2000 S1
  * HP Scanjet Pro 2500 f1
  Support for Phase 1 Scan features for
  * Digital Sender Flow 8500 fn2
  * ScanJet 5000
  * ScanJet 7500
  * Scanjet Ent flow 7000s3
  * Scanjet Ent. Flow N9120 fn2
  * Scanjet Pro 3000s3
  * Scanjet Pro 3500f1
  * Scanjet Pro 4500fn1
  User can use ScanJet feature by using hp-uiscan tool. Following
  features are introduced for ScanJet:
  * Straighten page content
  * Auto Orient
  * Crop to content on page
  * Misfeed(multipick) detection
  * Delete blank page
  * Separate the document based on blank page or barcode
  * Page merge
  * Mixed document feed
  * Document merge
  * Crushed page scan
  * Image enhancement
  * PunchHole Removal
  * ColorDropOut/ColorRemoval
  * Background Noise Removal
  * Background Color Removal
  * BMP File format Support
  * Searchable PDF
  * Smaller file size for PDF and JPEG
  Basic Booklet Printing Support for the following devices:
  * HP LaserJet Managed MFP E82540-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E87640-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E77422a-dv-dn
  * HP Color LaserJet Managed MFP E77428dn
  * HP LaserJet MFP E72425a-dv-dn
  * HP LaserJet MFP E72430dn
  Limitations:
  * HPLIP does not support HP ScanJet Pro 2500 f1 device on OpenSuse
    Linux distribution.
  * Multipick feature not supported in below devices:
    HP Scanjet Pro 2000 S1
    HP Scanjet Pro 2500 f1
  Fixes:
  * hp-check crashes with FileNotFoundError using python3.7</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563278400">- Disable -Werror=return-type for now.
- Use %make_build for parallel build.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1565611200">- updated to 3.19.6
  Added support for the following new Printers:
  * HP Color LaserJet Enterprise M751dn
  * HP Color LaserJet Enterprise M751n
  * HP Color LaserJet Managed E75245dn
  * HP Color LaserJet Pro M453cdn
  * HP Color LaserJet Pro M453cdw
  * HP Color LaserJet Pro M454cdn
  * HP Color LaserJet Pro M454cdw
  * HP Color LaserJet Pro M454dn
  * HP Color LaserJet Pro M454dw
  * HP Color LaserJet Pro M454nw
  * HP Color LaserJet Pro MFP M478fcdn
  * HP Color LaserJet Pro MFP M478fcdw
  * HP Color LaserJet Pro MFP M479dw
  * HP Color LaserJet Pro MFP M479fcdn
  * HP Color LaserJet Pro MFP M479fcdw
  * HP Color LaserJet Pro MFP M479fdn
  * HP Color LaserJet Pro MFP M479fdw
  * HP Color LaserJet Pro MFP M479fnw
  * HP DesignJet T2600dr Postscript MFP
  * HP DesignJet XL 3600 PS MFP
  * HP Laser NS 1020
  * HP Laser NS 1020w
  * HP Laser NS MFP 1005
  * HP Laser NS MFP 1005w
  * HP LaserJet Enterprise Flow MFP M528c
  * HP LaserJet Enterprise Flow MFP M528z
  * HP LaserJet Enterprise M507dn
  * HP LaserJet Enterprise M507dng
  * HP LaserJet Enterprise M507n
  * HP LaserJet Enterprise M507x
  * HP LaserJet Enterprise MFP M528dn
  * HP LaserJet Enterprise MFP M528f
  * HP LaserJet Managed E50145dn
  * HP LaserJet Managed E50145x
  * HP LaserJet Managed Flow MFP E52645c
  * HP LaserJet Managed MFP E52645dn
  * HP LaserJet Pro M404c1
  * HP LaserJet Pro M404c2
  * HP LaserJet Pro M404c3
  * HP LaserJet Pro M404c4
  * HP LaserJet Pro M404d
  * HP LaserJet Pro M404dn
  * HP LaserJet Pro M404dw
  * HP LaserJet Pro M404m
  * HP LaserJet Pro M404n
  * HP LaserJet Pro M405d
  * HP LaserJet Pro M405dn
  * HP LaserJet Pro M405dw
  * HP LaserJet Pro M405n
  * HP LaserJet Pro MFP M428c1
  * HP LaserJet Pro MFP M428c2
  * HP LaserJet Pro MFP M428c3
  * HP LaserJet Pro MFP M428c4
  * HP LaserJet Pro MFP M428dw
  * HP LaserJet Pro MFP M428fdn
  * HP LaserJet Pro MFP M428fdw
  * HP LaserJet Pro MFP M428m
  * HP LaserJet Pro MFP M429dw
  * HP LaserJet Pro MFP M429fdn
  * HP LaserJet Pro MFP M429fdw
  * HP Neverstop Laser 1000a
  * HP Neverstop Laser 1000w
  * HP Neverstop Laser MFP 1200a
  * HP Neverstop Laser MFP 1200w
  * HP OfficeJet 8010 All  * in  * One Printer series
  * HP OfficeJet 8020 All  * in  * One Printer Series
  * HP OfficeJet Pro 8020 All  * in  * One Printer series
  * HP OfficeJet Pro 8030 All  * in  * One Printer series
  * HP PageWide XL 3900PS MFP
  * HP Smart Tank 500 series
  * HP Smart Tank 510
  * HP Smart Tank 530 series
  * HP Smart Tank 610
  * HP Smart Tank Plus 550
  * HP Smart Tank Plus 570 series
  * HP Smart Tank Plus 650</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566907200">- Moved hp-scan and hp-uiscan to a separate package "hp-scan".
  These tools pull in PIL and python3-scikit-image, which causes
  a rather big dependency list, which is only available in openSUSE.
  This allows us also to get rid of the non-functional "hp-scan" tool
  in SLE.
- Fixed --with-htmldir so that documentation is packaged
- Improved package descriptions and summaries
  * Clarified the relationship of hplip-hpijs, hplip-sane, and hplip
  * Shortened the descriptions
  * Removed reference to HTML documention in package description
- Added -devel dependencies as required by post-build-checks
- Minor spec file cleanup (macro usage)
- Fixed build failures on non-standard architectures by adding BuildIgnore
  These failures are actually caused by some ports catching up
  slowly with package updates. But our BuildIgnores are helpful
  nonetheless, making the build environment leaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Removed compatibility code for SLE12/Leap42 and earlier
  As we are now using rpm 4.13 (A and B) syntax, we can't support
  these any more anyway.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080000">- Added conditional BuildRequires on "cups-rpm-helper".
  Recently a bug in python-pycups was fixed that had prevented
  autogeneration of Provides: tags in printer drivers by means
  of "BuildRequires: python3-cups". See OBS sr#726727. This
  dependency must be conditional for now, as cups-rpm-helper
  is not available in every project yet.
- Ran spec-cleaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080001">- Renamed "hplip-scan" to "hplip-scan-utils" to express the
  purpose of the package more clearly in the name.
  "hplip-scan" has never been in public repos.</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1571227200">- Added missing requirement lsb-release (needed for root password
  prompt, e.g. hp-plugin).
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576411200">- Pass Python includedir in CFLAGS to fix broken lookup of Python.h
  in configure, fails with Python 3.8 (boo#1159242).</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1578571200">- updated to 3.19.12
  Rendering print jobs with cupsfilter command
  Added support for the following new Printers:
  * HP Color LaserJet Pro M256dn
  * HP Color LaserJet Pro M255dn
  * HP Color LaserJet Pro M256nw
  * HP Color LaserJet Pro M255nw
  * HP Color LaserJet Pro M256dw
  * HP Color LaserJet Pro M255dw
  * HP Color LaserJet Pro M155a
  * HP Color LaserJet Pro M156a
  * HP Color LaserJet Pro M155nw
  * HP Color LaserJet Pro M156nw
  * HP Color LaserJet Pro MFP M282nw
  * HP Color LaserJet Pro MFP M284nw
  * HP Color LaserJet Pro MFP M283fdn
  * HP Color LaserJet Pro MFP M285fdn
  * HP Color LaserJet Pro MFP M283fdw
  * HP Color LaserJet Pro MFP M285fdw
  * HP Color LaserJet Pro MFP M283cdw
  * HP Color LaserJet Pro MFP M285cdw
  * HP Color LaserJet Pro MFP M182n
  * HP Color LaserJet Pro MFP M184n
  * HP Color LaserJet Pro MFP M182nw
  * HP Color LaserJet Pro MFP M184nw
  * HP Color LaserJet Pro MFP M183fw
  * HP Color LaserJet Pro MFP M185fw
- updated to 3.19.11
  Added Supported for ?hp-uiscan? to scan only backside of a page
  Added support for the following new Printers:
  * HP Color LaserJet MFP M776dn
  * HP Color LaserJet Flow MFP M776z
  * HP Color LaserJet Flow MFP M776zs
  * HP Color LaserJet M856dn
  * HP Color LaserJet M856x
  * HP Color LaserJet E85055dn
  Added Job Accounting Support for the following devices:
  * HP LaserJet Managed Flow MFP E77822-28-30 Printer
  * HP LaserJet Managed MFP E77822-28-30 Printer
  * HP LaserJet Managed Flow MFP E87640-50-60 Printer
  * HP LaserJet Managed MFP E87640-50-60 Printer
  * HP LaserJet Managed Flow MFP E82540-50-60 Printer
  * HP LaserJet Managed MFP E82540-50-60 Printer
  * HP LaserJet Managed Flow MFP E72525-30-35 Printer
  * HP LaserJet Managed MFP E72525-30-35 Printer
- updated to 3.19.8
  hp-uiscan will fetch the paper sizes from the device dynamically for ScanJet devices.
  hp-uiscan will prompt error message when paper jam occurs for ScanJet devices.
  Added support for the following new Printers:
  * HP DesignJet T1530 Postscript
  * HP DesignJet T1600 Postscript Printer
  * HP DesignJet T1600dr Postscript Printer
  * HP DesignJet T2530 Postscript
  * HP DesignJet T2600 Postscript MFP
  * HP DesignJet T930 Postscript
  * HP LaserJet Pro M304a
  * HP LaserJet Pro M305d
  * HP LaserJet Pro M305dn
  * HP LaserJet Pro M305dw
  * HP LaserJet Pro MFP M329dn
  * HP LaserJet Pro MFP M329dw</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578657600">- Fix crash if python3-reportlab is missing (bsc#1159240, lp#1859179)
  * Added hp-sendfax-avoid-crash-if-python-reportlab-is-missin.patch
  * Added recommends on python3-reportlab</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Revert changes from 3.18.5 that break hp-setup for fax devices
  (bsc#1107711, lp#1773320)
  * Added patch: Revert-changes-from-3.18.5-that-break-hp-setup-for-f.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916801">- Use /etc/sane.d/dll.d/hpaio to register SANE backend rather
  than modifying /etc/sane/dll.conf
- SANE backend must be configured in hplip-sane package (bsc#1160708)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1610193600">- Fix crash in hp-doctor if python3-qt4 is not installed
  (bsc#1180724)
  Added patch: dcheck.py-fix-crash-in-Qt4-version-check.patch</changelog>
</package>
<package pkgid="a2e86a0a157f4bcffce7c6a9dd8447b3fb5a11fcfc4513080d65d0343a37be17" name="hplip-debugsource" arch="x86_64">
  <version epoch="0" ver="3.19.12" rel="lp152.2.3.1"/>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1555070400">- Added hp-uiscan application
- Updated URLs and source URLs
- Updated/rebased hplip-misc-missing-includes-and-definitions.patch
- Added hplip-remove-imageprocessor.diff which fully removes references
  to the closed source ImageProcessor. Thanks to Didier Raboud from Debian.
- Addded hplip-orblite-return-null.diff to let a function return NULL
  insetad of nothing.
- update to 3.19.3
  Added support for the following new Printers:
  * HP Color LaserJet Managed E65150dn
  * HP Color LaserJet Managed E65160dn
  * HP Color LaserJet Managed Flow MFP E67660z
  * HP Color LaserJet Managed MFP E67650dh
  * HP Color LaserJet Managed MFP E77422a
  * HP Color LaserJet Managed MFP E77422dn
  * HP Color LaserJet Managed MFP E77422dv
  * HP Color LaserJet Managed MFP E77428dn
  * HP Color LaserJet Managed MFP E87640 du
  * HP Color LaserJet Managed MFP E87650du
  * HP Color LaserJet Managed MFP E87660du
  * HP DesignJet T1708 PostScript
  * HP DesignJet T1708dr PostScript
  * HP DesignJet Z6 24in
  * HP DesignJet Z6 44in
  * HP DesignJet Z6dr 44in
  * HP DesignJet Z9 24in
  * HP DesignJet Z9 44in
  * HP DesignJet Z9dr 44in
  * HP Ink Tank 115
  * HP Ink Tank 310
  * HP Ink Tank Wireless 410
  * HP LaserJet Managed E60155dn
  * HP LaserJet Managed E60165dn
  * HP LaserJet Managed E60175dn
  * HP LaserJet Managed Flow MFP E62665h
  * HP LaserJet Managed Flow MFP E62665z
  * HP LaserJet Managed Flow MFP E62675z
  * HP LaserJet Managed MFP E62655dn
  * HP LaserJet Managed MFP E62665hs
  * HP LaserJet Managed MFP E82540du
  * HP LaserJet Managed MFP E82550du
  * HP LaserJet Managed MFP E82560du
  * HP LaserJet MFP E72425a
  * HP LaserJet MFP E72425dn
  * HP LaserJet MFP E72425dv
  * HP LaserJet MFP E72430dn
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149fdw
  * HP LaserJet Pro MFP M149fdw
  * HP OfficeJet All-in-One 9010
  * HP OfficeJet Pro All-in-One 9010
  * HP OfficeJet Pro All-in-One 9020
  * HP PageWide 755dn
  * HP PageWide 755dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dns
  * HP PageWide MFP 774dns
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dns
  * HP PageWide MFP 779dns
  * HP PageWide XL 4100 MFP
  * HP PageWide XL 4100 Printer
  * HP PageWide XL 4600 Printer
  * HP PageWide XL 4600PS MFP
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Smart Tank 350
  * HP Smart Tank Wireless 450
  * HP Tango
  * HP Tango X
  Added support for the following new ScanJet Device:
  * HP Scanjet Pro 2000 S1
  * HP Scanjet Pro 2500 f1
  Support for Phase 1 Scan features for
  * Digital Sender Flow 8500 fn2
  * ScanJet 5000
  * ScanJet 7500
  * Scanjet Ent flow 7000s3
  * Scanjet Ent. Flow N9120 fn2
  * Scanjet Pro 3000s3
  * Scanjet Pro 3500f1
  * Scanjet Pro 4500fn1
  User can use ScanJet feature by using hp-uiscan tool. Following
  features are introduced for ScanJet:
  * Straighten page content
  * Auto Orient
  * Crop to content on page
  * Misfeed(multipick) detection
  * Delete blank page
  * Separate the document based on blank page or barcode
  * Page merge
  * Mixed document feed
  * Document merge
  * Crushed page scan
  * Image enhancement
  * PunchHole Removal
  * ColorDropOut/ColorRemoval
  * Background Noise Removal
  * Background Color Removal
  * BMP File format Support
  * Searchable PDF
  * Smaller file size for PDF and JPEG
  Basic Booklet Printing Support for the following devices:
  * HP LaserJet Managed MFP E82540-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E87640-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E77422a-dv-dn
  * HP Color LaserJet Managed MFP E77428dn
  * HP LaserJet MFP E72425a-dv-dn
  * HP LaserJet MFP E72430dn
  Limitations:
  * HPLIP does not support HP ScanJet Pro 2500 f1 device on OpenSuse
    Linux distribution.
  * Multipick feature not supported in below devices:
    HP Scanjet Pro 2000 S1
    HP Scanjet Pro 2500 f1
  Fixes:
  * hp-check crashes with FileNotFoundError using python3.7</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563278400">- Disable -Werror=return-type for now.
- Use %make_build for parallel build.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1565611200">- updated to 3.19.6
  Added support for the following new Printers:
  * HP Color LaserJet Enterprise M751dn
  * HP Color LaserJet Enterprise M751n
  * HP Color LaserJet Managed E75245dn
  * HP Color LaserJet Pro M453cdn
  * HP Color LaserJet Pro M453cdw
  * HP Color LaserJet Pro M454cdn
  * HP Color LaserJet Pro M454cdw
  * HP Color LaserJet Pro M454dn
  * HP Color LaserJet Pro M454dw
  * HP Color LaserJet Pro M454nw
  * HP Color LaserJet Pro MFP M478fcdn
  * HP Color LaserJet Pro MFP M478fcdw
  * HP Color LaserJet Pro MFP M479dw
  * HP Color LaserJet Pro MFP M479fcdn
  * HP Color LaserJet Pro MFP M479fcdw
  * HP Color LaserJet Pro MFP M479fdn
  * HP Color LaserJet Pro MFP M479fdw
  * HP Color LaserJet Pro MFP M479fnw
  * HP DesignJet T2600dr Postscript MFP
  * HP DesignJet XL 3600 PS MFP
  * HP Laser NS 1020
  * HP Laser NS 1020w
  * HP Laser NS MFP 1005
  * HP Laser NS MFP 1005w
  * HP LaserJet Enterprise Flow MFP M528c
  * HP LaserJet Enterprise Flow MFP M528z
  * HP LaserJet Enterprise M507dn
  * HP LaserJet Enterprise M507dng
  * HP LaserJet Enterprise M507n
  * HP LaserJet Enterprise M507x
  * HP LaserJet Enterprise MFP M528dn
  * HP LaserJet Enterprise MFP M528f
  * HP LaserJet Managed E50145dn
  * HP LaserJet Managed E50145x
  * HP LaserJet Managed Flow MFP E52645c
  * HP LaserJet Managed MFP E52645dn
  * HP LaserJet Pro M404c1
  * HP LaserJet Pro M404c2
  * HP LaserJet Pro M404c3
  * HP LaserJet Pro M404c4
  * HP LaserJet Pro M404d
  * HP LaserJet Pro M404dn
  * HP LaserJet Pro M404dw
  * HP LaserJet Pro M404m
  * HP LaserJet Pro M404n
  * HP LaserJet Pro M405d
  * HP LaserJet Pro M405dn
  * HP LaserJet Pro M405dw
  * HP LaserJet Pro M405n
  * HP LaserJet Pro MFP M428c1
  * HP LaserJet Pro MFP M428c2
  * HP LaserJet Pro MFP M428c3
  * HP LaserJet Pro MFP M428c4
  * HP LaserJet Pro MFP M428dw
  * HP LaserJet Pro MFP M428fdn
  * HP LaserJet Pro MFP M428fdw
  * HP LaserJet Pro MFP M428m
  * HP LaserJet Pro MFP M429dw
  * HP LaserJet Pro MFP M429fdn
  * HP LaserJet Pro MFP M429fdw
  * HP Neverstop Laser 1000a
  * HP Neverstop Laser 1000w
  * HP Neverstop Laser MFP 1200a
  * HP Neverstop Laser MFP 1200w
  * HP OfficeJet 8010 All  * in  * One Printer series
  * HP OfficeJet 8020 All  * in  * One Printer Series
  * HP OfficeJet Pro 8020 All  * in  * One Printer series
  * HP OfficeJet Pro 8030 All  * in  * One Printer series
  * HP PageWide XL 3900PS MFP
  * HP Smart Tank 500 series
  * HP Smart Tank 510
  * HP Smart Tank 530 series
  * HP Smart Tank 610
  * HP Smart Tank Plus 550
  * HP Smart Tank Plus 570 series
  * HP Smart Tank Plus 650</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566907200">- Moved hp-scan and hp-uiscan to a separate package "hp-scan".
  These tools pull in PIL and python3-scikit-image, which causes
  a rather big dependency list, which is only available in openSUSE.
  This allows us also to get rid of the non-functional "hp-scan" tool
  in SLE.
- Fixed --with-htmldir so that documentation is packaged
- Improved package descriptions and summaries
  * Clarified the relationship of hplip-hpijs, hplip-sane, and hplip
  * Shortened the descriptions
  * Removed reference to HTML documention in package description
- Added -devel dependencies as required by post-build-checks
- Minor spec file cleanup (macro usage)
- Fixed build failures on non-standard architectures by adding BuildIgnore
  These failures are actually caused by some ports catching up
  slowly with package updates. But our BuildIgnores are helpful
  nonetheless, making the build environment leaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Removed compatibility code for SLE12/Leap42 and earlier
  As we are now using rpm 4.13 (A and B) syntax, we can't support
  these any more anyway.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080000">- Added conditional BuildRequires on "cups-rpm-helper".
  Recently a bug in python-pycups was fixed that had prevented
  autogeneration of Provides: tags in printer drivers by means
  of "BuildRequires: python3-cups". See OBS sr#726727. This
  dependency must be conditional for now, as cups-rpm-helper
  is not available in every project yet.
- Ran spec-cleaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080001">- Renamed "hplip-scan" to "hplip-scan-utils" to express the
  purpose of the package more clearly in the name.
  "hplip-scan" has never been in public repos.</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1571227200">- Added missing requirement lsb-release (needed for root password
  prompt, e.g. hp-plugin).
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576411200">- Pass Python includedir in CFLAGS to fix broken lookup of Python.h
  in configure, fails with Python 3.8 (boo#1159242).</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1578571200">- updated to 3.19.12
  Rendering print jobs with cupsfilter command
  Added support for the following new Printers:
  * HP Color LaserJet Pro M256dn
  * HP Color LaserJet Pro M255dn
  * HP Color LaserJet Pro M256nw
  * HP Color LaserJet Pro M255nw
  * HP Color LaserJet Pro M256dw
  * HP Color LaserJet Pro M255dw
  * HP Color LaserJet Pro M155a
  * HP Color LaserJet Pro M156a
  * HP Color LaserJet Pro M155nw
  * HP Color LaserJet Pro M156nw
  * HP Color LaserJet Pro MFP M282nw
  * HP Color LaserJet Pro MFP M284nw
  * HP Color LaserJet Pro MFP M283fdn
  * HP Color LaserJet Pro MFP M285fdn
  * HP Color LaserJet Pro MFP M283fdw
  * HP Color LaserJet Pro MFP M285fdw
  * HP Color LaserJet Pro MFP M283cdw
  * HP Color LaserJet Pro MFP M285cdw
  * HP Color LaserJet Pro MFP M182n
  * HP Color LaserJet Pro MFP M184n
  * HP Color LaserJet Pro MFP M182nw
  * HP Color LaserJet Pro MFP M184nw
  * HP Color LaserJet Pro MFP M183fw
  * HP Color LaserJet Pro MFP M185fw
- updated to 3.19.11
  Added Supported for ?hp-uiscan? to scan only backside of a page
  Added support for the following new Printers:
  * HP Color LaserJet MFP M776dn
  * HP Color LaserJet Flow MFP M776z
  * HP Color LaserJet Flow MFP M776zs
  * HP Color LaserJet M856dn
  * HP Color LaserJet M856x
  * HP Color LaserJet E85055dn
  Added Job Accounting Support for the following devices:
  * HP LaserJet Managed Flow MFP E77822-28-30 Printer
  * HP LaserJet Managed MFP E77822-28-30 Printer
  * HP LaserJet Managed Flow MFP E87640-50-60 Printer
  * HP LaserJet Managed MFP E87640-50-60 Printer
  * HP LaserJet Managed Flow MFP E82540-50-60 Printer
  * HP LaserJet Managed MFP E82540-50-60 Printer
  * HP LaserJet Managed Flow MFP E72525-30-35 Printer
  * HP LaserJet Managed MFP E72525-30-35 Printer
- updated to 3.19.8
  hp-uiscan will fetch the paper sizes from the device dynamically for ScanJet devices.
  hp-uiscan will prompt error message when paper jam occurs for ScanJet devices.
  Added support for the following new Printers:
  * HP DesignJet T1530 Postscript
  * HP DesignJet T1600 Postscript Printer
  * HP DesignJet T1600dr Postscript Printer
  * HP DesignJet T2530 Postscript
  * HP DesignJet T2600 Postscript MFP
  * HP DesignJet T930 Postscript
  * HP LaserJet Pro M304a
  * HP LaserJet Pro M305d
  * HP LaserJet Pro M305dn
  * HP LaserJet Pro M305dw
  * HP LaserJet Pro MFP M329dn
  * HP LaserJet Pro MFP M329dw</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578657600">- Fix crash if python3-reportlab is missing (bsc#1159240, lp#1859179)
  * Added hp-sendfax-avoid-crash-if-python-reportlab-is-missin.patch
  * Added recommends on python3-reportlab</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Revert changes from 3.18.5 that break hp-setup for fax devices
  (bsc#1107711, lp#1773320)
  * Added patch: Revert-changes-from-3.18.5-that-break-hp-setup-for-f.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916801">- Use /etc/sane.d/dll.d/hpaio to register SANE backend rather
  than modifying /etc/sane/dll.conf
- SANE backend must be configured in hplip-sane package (bsc#1160708)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1610193600">- Fix crash in hp-doctor if python3-qt4 is not installed
  (bsc#1180724)
  Added patch: dcheck.py-fix-crash-in-Qt4-version-check.patch</changelog>
</package>
<package pkgid="98dae40f78a238b55330b1a666cbea1f79865788b732423a3af8e5f4f11ec7a8" name="hplip-hpijs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.12" rel="lp152.2.3.1"/>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1555070400">- Added hp-uiscan application
- Updated URLs and source URLs
- Updated/rebased hplip-misc-missing-includes-and-definitions.patch
- Added hplip-remove-imageprocessor.diff which fully removes references
  to the closed source ImageProcessor. Thanks to Didier Raboud from Debian.
- Addded hplip-orblite-return-null.diff to let a function return NULL
  insetad of nothing.
- update to 3.19.3
  Added support for the following new Printers:
  * HP Color LaserJet Managed E65150dn
  * HP Color LaserJet Managed E65160dn
  * HP Color LaserJet Managed Flow MFP E67660z
  * HP Color LaserJet Managed MFP E67650dh
  * HP Color LaserJet Managed MFP E77422a
  * HP Color LaserJet Managed MFP E77422dn
  * HP Color LaserJet Managed MFP E77422dv
  * HP Color LaserJet Managed MFP E77428dn
  * HP Color LaserJet Managed MFP E87640 du
  * HP Color LaserJet Managed MFP E87650du
  * HP Color LaserJet Managed MFP E87660du
  * HP DesignJet T1708 PostScript
  * HP DesignJet T1708dr PostScript
  * HP DesignJet Z6 24in
  * HP DesignJet Z6 44in
  * HP DesignJet Z6dr 44in
  * HP DesignJet Z9 24in
  * HP DesignJet Z9 44in
  * HP DesignJet Z9dr 44in
  * HP Ink Tank 115
  * HP Ink Tank 310
  * HP Ink Tank Wireless 410
  * HP LaserJet Managed E60155dn
  * HP LaserJet Managed E60165dn
  * HP LaserJet Managed E60175dn
  * HP LaserJet Managed Flow MFP E62665h
  * HP LaserJet Managed Flow MFP E62665z
  * HP LaserJet Managed Flow MFP E62675z
  * HP LaserJet Managed MFP E62655dn
  * HP LaserJet Managed MFP E62665hs
  * HP LaserJet Managed MFP E82540du
  * HP LaserJet Managed MFP E82550du
  * HP LaserJet Managed MFP E82560du
  * HP LaserJet MFP E72425a
  * HP LaserJet MFP E72425dn
  * HP LaserJet MFP E72425dv
  * HP LaserJet MFP E72430dn
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149fdw
  * HP LaserJet Pro MFP M149fdw
  * HP OfficeJet All-in-One 9010
  * HP OfficeJet Pro All-in-One 9010
  * HP OfficeJet Pro All-in-One 9020
  * HP PageWide 755dn
  * HP PageWide 755dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dns
  * HP PageWide MFP 774dns
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dns
  * HP PageWide MFP 779dns
  * HP PageWide XL 4100 MFP
  * HP PageWide XL 4100 Printer
  * HP PageWide XL 4600 Printer
  * HP PageWide XL 4600PS MFP
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Smart Tank 350
  * HP Smart Tank Wireless 450
  * HP Tango
  * HP Tango X
  Added support for the following new ScanJet Device:
  * HP Scanjet Pro 2000 S1
  * HP Scanjet Pro 2500 f1
  Support for Phase 1 Scan features for
  * Digital Sender Flow 8500 fn2
  * ScanJet 5000
  * ScanJet 7500
  * Scanjet Ent flow 7000s3
  * Scanjet Ent. Flow N9120 fn2
  * Scanjet Pro 3000s3
  * Scanjet Pro 3500f1
  * Scanjet Pro 4500fn1
  User can use ScanJet feature by using hp-uiscan tool. Following
  features are introduced for ScanJet:
  * Straighten page content
  * Auto Orient
  * Crop to content on page
  * Misfeed(multipick) detection
  * Delete blank page
  * Separate the document based on blank page or barcode
  * Page merge
  * Mixed document feed
  * Document merge
  * Crushed page scan
  * Image enhancement
  * PunchHole Removal
  * ColorDropOut/ColorRemoval
  * Background Noise Removal
  * Background Color Removal
  * BMP File format Support
  * Searchable PDF
  * Smaller file size for PDF and JPEG
  Basic Booklet Printing Support for the following devices:
  * HP LaserJet Managed MFP E82540-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E87640-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E77422a-dv-dn
  * HP Color LaserJet Managed MFP E77428dn
  * HP LaserJet MFP E72425a-dv-dn
  * HP LaserJet MFP E72430dn
  Limitations:
  * HPLIP does not support HP ScanJet Pro 2500 f1 device on OpenSuse
    Linux distribution.
  * Multipick feature not supported in below devices:
    HP Scanjet Pro 2000 S1
    HP Scanjet Pro 2500 f1
  Fixes:
  * hp-check crashes with FileNotFoundError using python3.7</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563278400">- Disable -Werror=return-type for now.
- Use %make_build for parallel build.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1565611200">- updated to 3.19.6
  Added support for the following new Printers:
  * HP Color LaserJet Enterprise M751dn
  * HP Color LaserJet Enterprise M751n
  * HP Color LaserJet Managed E75245dn
  * HP Color LaserJet Pro M453cdn
  * HP Color LaserJet Pro M453cdw
  * HP Color LaserJet Pro M454cdn
  * HP Color LaserJet Pro M454cdw
  * HP Color LaserJet Pro M454dn
  * HP Color LaserJet Pro M454dw
  * HP Color LaserJet Pro M454nw
  * HP Color LaserJet Pro MFP M478fcdn
  * HP Color LaserJet Pro MFP M478fcdw
  * HP Color LaserJet Pro MFP M479dw
  * HP Color LaserJet Pro MFP M479fcdn
  * HP Color LaserJet Pro MFP M479fcdw
  * HP Color LaserJet Pro MFP M479fdn
  * HP Color LaserJet Pro MFP M479fdw
  * HP Color LaserJet Pro MFP M479fnw
  * HP DesignJet T2600dr Postscript MFP
  * HP DesignJet XL 3600 PS MFP
  * HP Laser NS 1020
  * HP Laser NS 1020w
  * HP Laser NS MFP 1005
  * HP Laser NS MFP 1005w
  * HP LaserJet Enterprise Flow MFP M528c
  * HP LaserJet Enterprise Flow MFP M528z
  * HP LaserJet Enterprise M507dn
  * HP LaserJet Enterprise M507dng
  * HP LaserJet Enterprise M507n
  * HP LaserJet Enterprise M507x
  * HP LaserJet Enterprise MFP M528dn
  * HP LaserJet Enterprise MFP M528f
  * HP LaserJet Managed E50145dn
  * HP LaserJet Managed E50145x
  * HP LaserJet Managed Flow MFP E52645c
  * HP LaserJet Managed MFP E52645dn
  * HP LaserJet Pro M404c1
  * HP LaserJet Pro M404c2
  * HP LaserJet Pro M404c3
  * HP LaserJet Pro M404c4
  * HP LaserJet Pro M404d
  * HP LaserJet Pro M404dn
  * HP LaserJet Pro M404dw
  * HP LaserJet Pro M404m
  * HP LaserJet Pro M404n
  * HP LaserJet Pro M405d
  * HP LaserJet Pro M405dn
  * HP LaserJet Pro M405dw
  * HP LaserJet Pro M405n
  * HP LaserJet Pro MFP M428c1
  * HP LaserJet Pro MFP M428c2
  * HP LaserJet Pro MFP M428c3
  * HP LaserJet Pro MFP M428c4
  * HP LaserJet Pro MFP M428dw
  * HP LaserJet Pro MFP M428fdn
  * HP LaserJet Pro MFP M428fdw
  * HP LaserJet Pro MFP M428m
  * HP LaserJet Pro MFP M429dw
  * HP LaserJet Pro MFP M429fdn
  * HP LaserJet Pro MFP M429fdw
  * HP Neverstop Laser 1000a
  * HP Neverstop Laser 1000w
  * HP Neverstop Laser MFP 1200a
  * HP Neverstop Laser MFP 1200w
  * HP OfficeJet 8010 All  * in  * One Printer series
  * HP OfficeJet 8020 All  * in  * One Printer Series
  * HP OfficeJet Pro 8020 All  * in  * One Printer series
  * HP OfficeJet Pro 8030 All  * in  * One Printer series
  * HP PageWide XL 3900PS MFP
  * HP Smart Tank 500 series
  * HP Smart Tank 510
  * HP Smart Tank 530 series
  * HP Smart Tank 610
  * HP Smart Tank Plus 550
  * HP Smart Tank Plus 570 series
  * HP Smart Tank Plus 650</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566907200">- Moved hp-scan and hp-uiscan to a separate package "hp-scan".
  These tools pull in PIL and python3-scikit-image, which causes
  a rather big dependency list, which is only available in openSUSE.
  This allows us also to get rid of the non-functional "hp-scan" tool
  in SLE.
- Fixed --with-htmldir so that documentation is packaged
- Improved package descriptions and summaries
  * Clarified the relationship of hplip-hpijs, hplip-sane, and hplip
  * Shortened the descriptions
  * Removed reference to HTML documention in package description
- Added -devel dependencies as required by post-build-checks
- Minor spec file cleanup (macro usage)
- Fixed build failures on non-standard architectures by adding BuildIgnore
  These failures are actually caused by some ports catching up
  slowly with package updates. But our BuildIgnores are helpful
  nonetheless, making the build environment leaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Removed compatibility code for SLE12/Leap42 and earlier
  As we are now using rpm 4.13 (A and B) syntax, we can't support
  these any more anyway.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080000">- Added conditional BuildRequires on "cups-rpm-helper".
  Recently a bug in python-pycups was fixed that had prevented
  autogeneration of Provides: tags in printer drivers by means
  of "BuildRequires: python3-cups". See OBS sr#726727. This
  dependency must be conditional for now, as cups-rpm-helper
  is not available in every project yet.
- Ran spec-cleaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080001">- Renamed "hplip-scan" to "hplip-scan-utils" to express the
  purpose of the package more clearly in the name.
  "hplip-scan" has never been in public repos.</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1571227200">- Added missing requirement lsb-release (needed for root password
  prompt, e.g. hp-plugin).
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576411200">- Pass Python includedir in CFLAGS to fix broken lookup of Python.h
  in configure, fails with Python 3.8 (boo#1159242).</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1578571200">- updated to 3.19.12
  Rendering print jobs with cupsfilter command
  Added support for the following new Printers:
  * HP Color LaserJet Pro M256dn
  * HP Color LaserJet Pro M255dn
  * HP Color LaserJet Pro M256nw
  * HP Color LaserJet Pro M255nw
  * HP Color LaserJet Pro M256dw
  * HP Color LaserJet Pro M255dw
  * HP Color LaserJet Pro M155a
  * HP Color LaserJet Pro M156a
  * HP Color LaserJet Pro M155nw
  * HP Color LaserJet Pro M156nw
  * HP Color LaserJet Pro MFP M282nw
  * HP Color LaserJet Pro MFP M284nw
  * HP Color LaserJet Pro MFP M283fdn
  * HP Color LaserJet Pro MFP M285fdn
  * HP Color LaserJet Pro MFP M283fdw
  * HP Color LaserJet Pro MFP M285fdw
  * HP Color LaserJet Pro MFP M283cdw
  * HP Color LaserJet Pro MFP M285cdw
  * HP Color LaserJet Pro MFP M182n
  * HP Color LaserJet Pro MFP M184n
  * HP Color LaserJet Pro MFP M182nw
  * HP Color LaserJet Pro MFP M184nw
  * HP Color LaserJet Pro MFP M183fw
  * HP Color LaserJet Pro MFP M185fw
- updated to 3.19.11
  Added Supported for ?hp-uiscan? to scan only backside of a page
  Added support for the following new Printers:
  * HP Color LaserJet MFP M776dn
  * HP Color LaserJet Flow MFP M776z
  * HP Color LaserJet Flow MFP M776zs
  * HP Color LaserJet M856dn
  * HP Color LaserJet M856x
  * HP Color LaserJet E85055dn
  Added Job Accounting Support for the following devices:
  * HP LaserJet Managed Flow MFP E77822-28-30 Printer
  * HP LaserJet Managed MFP E77822-28-30 Printer
  * HP LaserJet Managed Flow MFP E87640-50-60 Printer
  * HP LaserJet Managed MFP E87640-50-60 Printer
  * HP LaserJet Managed Flow MFP E82540-50-60 Printer
  * HP LaserJet Managed MFP E82540-50-60 Printer
  * HP LaserJet Managed Flow MFP E72525-30-35 Printer
  * HP LaserJet Managed MFP E72525-30-35 Printer
- updated to 3.19.8
  hp-uiscan will fetch the paper sizes from the device dynamically for ScanJet devices.
  hp-uiscan will prompt error message when paper jam occurs for ScanJet devices.
  Added support for the following new Printers:
  * HP DesignJet T1530 Postscript
  * HP DesignJet T1600 Postscript Printer
  * HP DesignJet T1600dr Postscript Printer
  * HP DesignJet T2530 Postscript
  * HP DesignJet T2600 Postscript MFP
  * HP DesignJet T930 Postscript
  * HP LaserJet Pro M304a
  * HP LaserJet Pro M305d
  * HP LaserJet Pro M305dn
  * HP LaserJet Pro M305dw
  * HP LaserJet Pro MFP M329dn
  * HP LaserJet Pro MFP M329dw</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578657600">- Fix crash if python3-reportlab is missing (bsc#1159240, lp#1859179)
  * Added hp-sendfax-avoid-crash-if-python-reportlab-is-missin.patch
  * Added recommends on python3-reportlab</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Revert changes from 3.18.5 that break hp-setup for fax devices
  (bsc#1107711, lp#1773320)
  * Added patch: Revert-changes-from-3.18.5-that-break-hp-setup-for-f.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916801">- Use /etc/sane.d/dll.d/hpaio to register SANE backend rather
  than modifying /etc/sane/dll.conf
- SANE backend must be configured in hplip-sane package (bsc#1160708)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1610193600">- Fix crash in hp-doctor if python3-qt4 is not installed
  (bsc#1180724)
  Added patch: dcheck.py-fix-crash-in-Qt4-version-check.patch</changelog>
</package>
<package pkgid="7eed7d0369c7beb3dcfc9a47bebf88a77a320b38afe75dc1b75bb2b9b0712fc7" name="hplip-sane-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.12" rel="lp152.2.3.1"/>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1555070400">- Added hp-uiscan application
- Updated URLs and source URLs
- Updated/rebased hplip-misc-missing-includes-and-definitions.patch
- Added hplip-remove-imageprocessor.diff which fully removes references
  to the closed source ImageProcessor. Thanks to Didier Raboud from Debian.
- Addded hplip-orblite-return-null.diff to let a function return NULL
  insetad of nothing.
- update to 3.19.3
  Added support for the following new Printers:
  * HP Color LaserJet Managed E65150dn
  * HP Color LaserJet Managed E65160dn
  * HP Color LaserJet Managed Flow MFP E67660z
  * HP Color LaserJet Managed MFP E67650dh
  * HP Color LaserJet Managed MFP E77422a
  * HP Color LaserJet Managed MFP E77422dn
  * HP Color LaserJet Managed MFP E77422dv
  * HP Color LaserJet Managed MFP E77428dn
  * HP Color LaserJet Managed MFP E87640 du
  * HP Color LaserJet Managed MFP E87650du
  * HP Color LaserJet Managed MFP E87660du
  * HP DesignJet T1708 PostScript
  * HP DesignJet T1708dr PostScript
  * HP DesignJet Z6 24in
  * HP DesignJet Z6 44in
  * HP DesignJet Z6dr 44in
  * HP DesignJet Z9 24in
  * HP DesignJet Z9 44in
  * HP DesignJet Z9dr 44in
  * HP Ink Tank 115
  * HP Ink Tank 310
  * HP Ink Tank Wireless 410
  * HP LaserJet Managed E60155dn
  * HP LaserJet Managed E60165dn
  * HP LaserJet Managed E60175dn
  * HP LaserJet Managed Flow MFP E62665h
  * HP LaserJet Managed Flow MFP E62665z
  * HP LaserJet Managed Flow MFP E62675z
  * HP LaserJet Managed MFP E62655dn
  * HP LaserJet Managed MFP E62665hs
  * HP LaserJet Managed MFP E82540du
  * HP LaserJet Managed MFP E82550du
  * HP LaserJet Managed MFP E82560du
  * HP LaserJet MFP E72425a
  * HP LaserJet MFP E72425dn
  * HP LaserJet MFP E72425dv
  * HP LaserJet MFP E72430dn
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149fdw
  * HP LaserJet Pro MFP M149fdw
  * HP OfficeJet All-in-One 9010
  * HP OfficeJet Pro All-in-One 9010
  * HP OfficeJet Pro All-in-One 9020
  * HP PageWide 755dn
  * HP PageWide 755dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dns
  * HP PageWide MFP 774dns
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dns
  * HP PageWide MFP 779dns
  * HP PageWide XL 4100 MFP
  * HP PageWide XL 4100 Printer
  * HP PageWide XL 4600 Printer
  * HP PageWide XL 4600PS MFP
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Smart Tank 350
  * HP Smart Tank Wireless 450
  * HP Tango
  * HP Tango X
  Added support for the following new ScanJet Device:
  * HP Scanjet Pro 2000 S1
  * HP Scanjet Pro 2500 f1
  Support for Phase 1 Scan features for
  * Digital Sender Flow 8500 fn2
  * ScanJet 5000
  * ScanJet 7500
  * Scanjet Ent flow 7000s3
  * Scanjet Ent. Flow N9120 fn2
  * Scanjet Pro 3000s3
  * Scanjet Pro 3500f1
  * Scanjet Pro 4500fn1
  User can use ScanJet feature by using hp-uiscan tool. Following
  features are introduced for ScanJet:
  * Straighten page content
  * Auto Orient
  * Crop to content on page
  * Misfeed(multipick) detection
  * Delete blank page
  * Separate the document based on blank page or barcode
  * Page merge
  * Mixed document feed
  * Document merge
  * Crushed page scan
  * Image enhancement
  * PunchHole Removal
  * ColorDropOut/ColorRemoval
  * Background Noise Removal
  * Background Color Removal
  * BMP File format Support
  * Searchable PDF
  * Smaller file size for PDF and JPEG
  Basic Booklet Printing Support for the following devices:
  * HP LaserJet Managed MFP E82540-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E87640-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E77422a-dv-dn
  * HP Color LaserJet Managed MFP E77428dn
  * HP LaserJet MFP E72425a-dv-dn
  * HP LaserJet MFP E72430dn
  Limitations:
  * HPLIP does not support HP ScanJet Pro 2500 f1 device on OpenSuse
    Linux distribution.
  * Multipick feature not supported in below devices:
    HP Scanjet Pro 2000 S1
    HP Scanjet Pro 2500 f1
  Fixes:
  * hp-check crashes with FileNotFoundError using python3.7</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563278400">- Disable -Werror=return-type for now.
- Use %make_build for parallel build.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1565611200">- updated to 3.19.6
  Added support for the following new Printers:
  * HP Color LaserJet Enterprise M751dn
  * HP Color LaserJet Enterprise M751n
  * HP Color LaserJet Managed E75245dn
  * HP Color LaserJet Pro M453cdn
  * HP Color LaserJet Pro M453cdw
  * HP Color LaserJet Pro M454cdn
  * HP Color LaserJet Pro M454cdw
  * HP Color LaserJet Pro M454dn
  * HP Color LaserJet Pro M454dw
  * HP Color LaserJet Pro M454nw
  * HP Color LaserJet Pro MFP M478fcdn
  * HP Color LaserJet Pro MFP M478fcdw
  * HP Color LaserJet Pro MFP M479dw
  * HP Color LaserJet Pro MFP M479fcdn
  * HP Color LaserJet Pro MFP M479fcdw
  * HP Color LaserJet Pro MFP M479fdn
  * HP Color LaserJet Pro MFP M479fdw
  * HP Color LaserJet Pro MFP M479fnw
  * HP DesignJet T2600dr Postscript MFP
  * HP DesignJet XL 3600 PS MFP
  * HP Laser NS 1020
  * HP Laser NS 1020w
  * HP Laser NS MFP 1005
  * HP Laser NS MFP 1005w
  * HP LaserJet Enterprise Flow MFP M528c
  * HP LaserJet Enterprise Flow MFP M528z
  * HP LaserJet Enterprise M507dn
  * HP LaserJet Enterprise M507dng
  * HP LaserJet Enterprise M507n
  * HP LaserJet Enterprise M507x
  * HP LaserJet Enterprise MFP M528dn
  * HP LaserJet Enterprise MFP M528f
  * HP LaserJet Managed E50145dn
  * HP LaserJet Managed E50145x
  * HP LaserJet Managed Flow MFP E52645c
  * HP LaserJet Managed MFP E52645dn
  * HP LaserJet Pro M404c1
  * HP LaserJet Pro M404c2
  * HP LaserJet Pro M404c3
  * HP LaserJet Pro M404c4
  * HP LaserJet Pro M404d
  * HP LaserJet Pro M404dn
  * HP LaserJet Pro M404dw
  * HP LaserJet Pro M404m
  * HP LaserJet Pro M404n
  * HP LaserJet Pro M405d
  * HP LaserJet Pro M405dn
  * HP LaserJet Pro M405dw
  * HP LaserJet Pro M405n
  * HP LaserJet Pro MFP M428c1
  * HP LaserJet Pro MFP M428c2
  * HP LaserJet Pro MFP M428c3
  * HP LaserJet Pro MFP M428c4
  * HP LaserJet Pro MFP M428dw
  * HP LaserJet Pro MFP M428fdn
  * HP LaserJet Pro MFP M428fdw
  * HP LaserJet Pro MFP M428m
  * HP LaserJet Pro MFP M429dw
  * HP LaserJet Pro MFP M429fdn
  * HP LaserJet Pro MFP M429fdw
  * HP Neverstop Laser 1000a
  * HP Neverstop Laser 1000w
  * HP Neverstop Laser MFP 1200a
  * HP Neverstop Laser MFP 1200w
  * HP OfficeJet 8010 All  * in  * One Printer series
  * HP OfficeJet 8020 All  * in  * One Printer Series
  * HP OfficeJet Pro 8020 All  * in  * One Printer series
  * HP OfficeJet Pro 8030 All  * in  * One Printer series
  * HP PageWide XL 3900PS MFP
  * HP Smart Tank 500 series
  * HP Smart Tank 510
  * HP Smart Tank 530 series
  * HP Smart Tank 610
  * HP Smart Tank Plus 550
  * HP Smart Tank Plus 570 series
  * HP Smart Tank Plus 650</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566907200">- Moved hp-scan and hp-uiscan to a separate package "hp-scan".
  These tools pull in PIL and python3-scikit-image, which causes
  a rather big dependency list, which is only available in openSUSE.
  This allows us also to get rid of the non-functional "hp-scan" tool
  in SLE.
- Fixed --with-htmldir so that documentation is packaged
- Improved package descriptions and summaries
  * Clarified the relationship of hplip-hpijs, hplip-sane, and hplip
  * Shortened the descriptions
  * Removed reference to HTML documention in package description
- Added -devel dependencies as required by post-build-checks
- Minor spec file cleanup (macro usage)
- Fixed build failures on non-standard architectures by adding BuildIgnore
  These failures are actually caused by some ports catching up
  slowly with package updates. But our BuildIgnores are helpful
  nonetheless, making the build environment leaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Removed compatibility code for SLE12/Leap42 and earlier
  As we are now using rpm 4.13 (A and B) syntax, we can't support
  these any more anyway.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080000">- Added conditional BuildRequires on "cups-rpm-helper".
  Recently a bug in python-pycups was fixed that had prevented
  autogeneration of Provides: tags in printer drivers by means
  of "BuildRequires: python3-cups". See OBS sr#726727. This
  dependency must be conditional for now, as cups-rpm-helper
  is not available in every project yet.
- Ran spec-cleaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080001">- Renamed "hplip-scan" to "hplip-scan-utils" to express the
  purpose of the package more clearly in the name.
  "hplip-scan" has never been in public repos.</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1571227200">- Added missing requirement lsb-release (needed for root password
  prompt, e.g. hp-plugin).
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576411200">- Pass Python includedir in CFLAGS to fix broken lookup of Python.h
  in configure, fails with Python 3.8 (boo#1159242).</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1578571200">- updated to 3.19.12
  Rendering print jobs with cupsfilter command
  Added support for the following new Printers:
  * HP Color LaserJet Pro M256dn
  * HP Color LaserJet Pro M255dn
  * HP Color LaserJet Pro M256nw
  * HP Color LaserJet Pro M255nw
  * HP Color LaserJet Pro M256dw
  * HP Color LaserJet Pro M255dw
  * HP Color LaserJet Pro M155a
  * HP Color LaserJet Pro M156a
  * HP Color LaserJet Pro M155nw
  * HP Color LaserJet Pro M156nw
  * HP Color LaserJet Pro MFP M282nw
  * HP Color LaserJet Pro MFP M284nw
  * HP Color LaserJet Pro MFP M283fdn
  * HP Color LaserJet Pro MFP M285fdn
  * HP Color LaserJet Pro MFP M283fdw
  * HP Color LaserJet Pro MFP M285fdw
  * HP Color LaserJet Pro MFP M283cdw
  * HP Color LaserJet Pro MFP M285cdw
  * HP Color LaserJet Pro MFP M182n
  * HP Color LaserJet Pro MFP M184n
  * HP Color LaserJet Pro MFP M182nw
  * HP Color LaserJet Pro MFP M184nw
  * HP Color LaserJet Pro MFP M183fw
  * HP Color LaserJet Pro MFP M185fw
- updated to 3.19.11
  Added Supported for ?hp-uiscan? to scan only backside of a page
  Added support for the following new Printers:
  * HP Color LaserJet MFP M776dn
  * HP Color LaserJet Flow MFP M776z
  * HP Color LaserJet Flow MFP M776zs
  * HP Color LaserJet M856dn
  * HP Color LaserJet M856x
  * HP Color LaserJet E85055dn
  Added Job Accounting Support for the following devices:
  * HP LaserJet Managed Flow MFP E77822-28-30 Printer
  * HP LaserJet Managed MFP E77822-28-30 Printer
  * HP LaserJet Managed Flow MFP E87640-50-60 Printer
  * HP LaserJet Managed MFP E87640-50-60 Printer
  * HP LaserJet Managed Flow MFP E82540-50-60 Printer
  * HP LaserJet Managed MFP E82540-50-60 Printer
  * HP LaserJet Managed Flow MFP E72525-30-35 Printer
  * HP LaserJet Managed MFP E72525-30-35 Printer
- updated to 3.19.8
  hp-uiscan will fetch the paper sizes from the device dynamically for ScanJet devices.
  hp-uiscan will prompt error message when paper jam occurs for ScanJet devices.
  Added support for the following new Printers:
  * HP DesignJet T1530 Postscript
  * HP DesignJet T1600 Postscript Printer
  * HP DesignJet T1600dr Postscript Printer
  * HP DesignJet T2530 Postscript
  * HP DesignJet T2600 Postscript MFP
  * HP DesignJet T930 Postscript
  * HP LaserJet Pro M304a
  * HP LaserJet Pro M305d
  * HP LaserJet Pro M305dn
  * HP LaserJet Pro M305dw
  * HP LaserJet Pro MFP M329dn
  * HP LaserJet Pro MFP M329dw</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578657600">- Fix crash if python3-reportlab is missing (bsc#1159240, lp#1859179)
  * Added hp-sendfax-avoid-crash-if-python-reportlab-is-missin.patch
  * Added recommends on python3-reportlab</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Revert changes from 3.18.5 that break hp-setup for fax devices
  (bsc#1107711, lp#1773320)
  * Added patch: Revert-changes-from-3.18.5-that-break-hp-setup-for-f.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916801">- Use /etc/sane.d/dll.d/hpaio to register SANE backend rather
  than modifying /etc/sane/dll.conf
- SANE backend must be configured in hplip-sane package (bsc#1160708)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1610193600">- Fix crash in hp-doctor if python3-qt4 is not installed
  (bsc#1180724)
  Added patch: dcheck.py-fix-crash-in-Qt4-version-check.patch</changelog>
</package>
<package pkgid="566624b711fb05938b56ef272fa94e5475cc7b31f127729722f7982219e5b74b" name="hplip-scan-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.19.12" rel="lp152.2.3.1"/>
  <changelog author="hpj@urpla.net" date="1533211200">- update to 3.18.7 avoided due to newly added ImageProcessor.so blob
- update to 3.18.6:
  Added Support for the following new Printers:
  - HP DesignJet Z6810 42in PostScript
  - HP DesignJet Z6810 60in PostScript
  - HP DesignJet Z6610 60in PostScript
- update to 3.18.5:
  Added Support for the following new Printers:
  - HP DesignJet T1700 PostScript
  - HP DesignJet T1700dr PostScript
  - HP Color LaserJet Pro M253a
  - HP Color LaserJet Pro M254dn
  - HP Color LaserJet Pro M254n
  - HP Color LaserJet Pro M254dne
  - HP Color LaserJet Pro M254nw
  - HP Color LaserJet Pro M254dw
  - HP Color LaserJet Pro M254cnw
  - HP Color LaserJet Pro M253nw
  - HP Color LaserJet Pro M253cnw
  - HP Color LaserJet Pro M254cdw
  - HP Color LaserJet Pro MFP M180nw
  - HP Color LaserJet Pro MFP M181fw
  - HP Color LaserJet Pro MFP M179fw
  - HP Color LaserJet Pro MFP M179cfw
  - HP Color LaserJet Pro MFP M181fnw
  - HP Color LaserJet Pro MFP M181cfw
  - HP Color LaserJet Pro MFP M180n
  - HP Color LaserJet Pro MFP M178cn
  - HP Color LaserJet Pro MFP M178n
  - HP Color LaserJet Pro MFP M180cn
  - HP Color LaserJet Pro MFP M281fdw
  - HP Color LaserJet Pro MFP M279fdw
  - HP Color LaserJet Pro MFP M281cdw
  - HP Color LaserJet Pro MFP M281fdn
  - HP Color LaserJet Pro MFP M281dne
  - HP Color LaserJet Pro MFP M278dn
  - HP Color LaserJet Pro MFP M280nw
  - HP Color LaserJet Pro MFP M278nw
  - HP Color LaserJet Pro MFP M278cw
  - HP Color LaserJet Pro MFP M280cnw
  - HP Color LaserJet Pro MFP M280c2
  - HP Color LaserJet Pro M154a
  - HP Color LaserJet M153a
  - HP Color LaserJet M153b
  - HP Color LaserJet M154b
  - HP Color LaserJet M154nw
  - HP Color LaserJet M153nw
  - HP Color LaserJet M153cnw
  - HP Color LaserJet M153c1
  - HP Color LaserJet M154cnw
  - HP Color LaserJet M154c1
  - HP PageWide Managed Color P75250dn
  - HP PageWide Managed Color MFP P77940dns
  - HP PageWide Managed Color MFP P77940dn
  - HP PageWide Managed Color MFP P77940dn+
  - HP PageWide Managed Color MFP P77950dns
  - HP PageWide Managed Color MFP P77950dn
  - HP PageWide Managed Color MFP P77950dn+
  - HP PageWide Managed Color MFP P77960dns
  - HP PageWide Managed Color MFP P77960dn
  - HP PageWide Managed Color MFP P77960dn+
  - HP PageWide Managed Color MFP P77440dn
  - HP PageWide Managed Color Flow MFP E77950z
  - HP PageWide Managed Color Flow MFP E77950zs
  - HP PageWide Managed Color Flow MFP E77950z+
  - HP PageWide Managed Color Flow MFP E77960z
  - HP PageWide Managed Color Flow MFP E77960zs
  - HP PageWide Managed Color Flow MFP E77960zts
  - HP PageWide Managed Color Flow MFP E77960z+
- update to 3.18.4:
  Added Support for the following new Printers:
  - HP LaserJet Pro MFP M28a
  - HP LaserJet Pro MFP M29a
  - HP LaserJet Pro MFP M30a
  - HP LaserJet Pro MFP M31a
  - HP LaserJet Pro MFP M30c
  - HP LaserJet Pro MFP M31c
  - HP LaserJet Pro MFP M28w
  - HP LaserJet Pro MFP M29w
  - HP LaserJet Pro MFP M30w
  - HP LaserJet Pro MFP M31w
  - HP LaserJet Pro MFP M30cw
  - HP LaserJet Pro MFP M31cw
  - HP LaserJet Pro M14a
  - HP LaserJet Pro M15a
  - HP LaserJet Pro M16a
  - HP LaserJet Pro M17a
  - HP LaserJet Pro M14c
  - HP LaserJet Pro M17c
  - HP LaserJet Pro M14w
  - HP LaserJet Pro M15w
  - HP LaserJet Pro M16w
  - HP LaserJet Pro M17w
  - HP LaserJet Pro M14cw
  - HP LaserJet Pro M17cw
  Added Support for the following new Distros:
  - Ubuntu 18.04 Beta Version (64 bit)
  - Debian 9.2 (32 bit and 64 bit)
  - Debian 9.3 (32 bit and 64 bit)
  - Debian 9.4 (32 bit and 64 bit)
- update to 3.18.3:
  Added Support for the following new Printers:
  - HP DesignJet Z2600 PostScript
  - HP DesignJet Z5600 PostScript
  - HP PageWide XL 8000ps Printer
  - HP PageWide XL 8000 Blueprinter
  - HP PageWide XL 5000 Printer
  - HP PageWide XL 5000 MFP
  - HP PageWide XL 5000 Blueprinter
  - HP PageWide XL 4500 Printer
  - HP PageWide XL 4500 MFP
  - HP PageWide XL 4000 Printer
  - HP PageWide XL 4000 MFP
  - HP PageWide XL 5100ps
  - HP PageWide XL 5100ps MFP
  - HP PageWide XL 5100ps MFP Blueprinter
  - HP PageWide XL 6000ps
  - HP PageWide XL 6000ps MFP
  Added Support for the following new Distros:
  - Manjaro Linux 17.1.4 (64 bit)
  - Fedora 27 (64 bit)
  - Linux Mint 18.3 (32 bit and 64 bit)
  Launchpad fixes:
  - 1736221 : hplip-3.17.11 source tarball contains compiled
    binaries
  - 1741214 : scan.py - scans cannot be saved as JPEG since
    python-pillow-4.2.0
- update to 3.17.11:
  Added Support for the following new Distros:
  - Ubuntu 17.10 (64bit)
  Other requirement:
  - Class Driver support
- update to 3.17.10:
  Added Support for the following new Scanners:
  - HP Scanjet Enterprise Flow N9120 fn2 Document Scanner
  - HP Digital Sender Flow 8500 fn2 Document Capture Workstation
  Added Support for the following new Distros:
  - Debian 9.1
- refresh patches
- adjust mdns.c changes
  (which looses newly added _uscan._tcp.local queries, but requires
  interface changes)
- fix build due to unexpanded ppd/hpcups/*.ppd.gz usage in Makefile</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1535457600">- removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved
  upstream. Closes boo#1096755
- removed hplip-mdns.patch and hplip-mdns-retry-query.patch, since
  upstream further improved the code in this area</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1549627200">- Fix hang during GNOME session logout (bsc#1112331, lp#1721534)
  * added ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  * added ui5-systemtray-wait-only-10s-for-system-tray.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552046400">- Fix hp-toolbox exiting after 10s under GNOME (bsc#1112331)
  * removed ui5-systemtray.py-make-children-exit-if-no-systray-f.patch
  Patch "ui5-systemtray-wait-only-10s-for-system-tray.patch" is
  sufficient to fix the logout problem (bsc#1112331, lp#1721534)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552305600">- don't mark /usr/lib/udev/rules.d/56-hpmud.rules as config file,
  fixes rpmlint warning (override it by copying it to
  /etc/udev/rules.d).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1554811200">- Remove dependency on python3-pillow on SLE (bsc#1131613), and
  remove the hp-scan tool that needs it. "scanimage" must be used
  instead.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1555070400">- Added hp-uiscan application
- Updated URLs and source URLs
- Updated/rebased hplip-misc-missing-includes-and-definitions.patch
- Added hplip-remove-imageprocessor.diff which fully removes references
  to the closed source ImageProcessor. Thanks to Didier Raboud from Debian.
- Addded hplip-orblite-return-null.diff to let a function return NULL
  insetad of nothing.
- update to 3.19.3
  Added support for the following new Printers:
  * HP Color LaserJet Managed E65150dn
  * HP Color LaserJet Managed E65160dn
  * HP Color LaserJet Managed Flow MFP E67660z
  * HP Color LaserJet Managed MFP E67650dh
  * HP Color LaserJet Managed MFP E77422a
  * HP Color LaserJet Managed MFP E77422dn
  * HP Color LaserJet Managed MFP E77422dv
  * HP Color LaserJet Managed MFP E77428dn
  * HP Color LaserJet Managed MFP E87640 du
  * HP Color LaserJet Managed MFP E87650du
  * HP Color LaserJet Managed MFP E87660du
  * HP DesignJet T1708 PostScript
  * HP DesignJet T1708dr PostScript
  * HP DesignJet Z6 24in
  * HP DesignJet Z6 44in
  * HP DesignJet Z6dr 44in
  * HP DesignJet Z9 24in
  * HP DesignJet Z9 44in
  * HP DesignJet Z9dr 44in
  * HP Ink Tank 115
  * HP Ink Tank 310
  * HP Ink Tank Wireless 410
  * HP LaserJet Managed E60155dn
  * HP LaserJet Managed E60165dn
  * HP LaserJet Managed E60175dn
  * HP LaserJet Managed Flow MFP E62665h
  * HP LaserJet Managed Flow MFP E62665z
  * HP LaserJet Managed Flow MFP E62675z
  * HP LaserJet Managed MFP E62655dn
  * HP LaserJet Managed MFP E62665hs
  * HP LaserJet Managed MFP E82540du
  * HP LaserJet Managed MFP E82550du
  * HP LaserJet Managed MFP E82560du
  * HP LaserJet MFP E72425a
  * HP LaserJet MFP E72425dn
  * HP LaserJet MFP E72425dv
  * HP LaserJet MFP E72430dn
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M118dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro M119dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148dw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M148fdw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149dw
  * HP LaserJet Pro MFP M149fdw
  * HP LaserJet Pro MFP M149fdw
  * HP OfficeJet All-in-One 9010
  * HP OfficeJet Pro All-in-One 9010
  * HP OfficeJet Pro All-in-One 9020
  * HP PageWide 755dn
  * HP PageWide 755dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dn
  * HP PageWide MFP 774dns
  * HP PageWide MFP 774dns
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dn
  * HP PageWide MFP 779dns
  * HP PageWide MFP 779dns
  * HP PageWide XL 4100 MFP
  * HP PageWide XL 4100 Printer
  * HP PageWide XL 4600 Printer
  * HP PageWide XL 4600PS MFP
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Scanjet Enterprise 7500 Flatbed Scanner
  * HP Smart Tank 350
  * HP Smart Tank Wireless 450
  * HP Tango
  * HP Tango X
  Added support for the following new ScanJet Device:
  * HP Scanjet Pro 2000 S1
  * HP Scanjet Pro 2500 f1
  Support for Phase 1 Scan features for
  * Digital Sender Flow 8500 fn2
  * ScanJet 5000
  * ScanJet 7500
  * Scanjet Ent flow 7000s3
  * Scanjet Ent. Flow N9120 fn2
  * Scanjet Pro 3000s3
  * Scanjet Pro 3500f1
  * Scanjet Pro 4500fn1
  User can use ScanJet feature by using hp-uiscan tool. Following
  features are introduced for ScanJet:
  * Straighten page content
  * Auto Orient
  * Crop to content on page
  * Misfeed(multipick) detection
  * Delete blank page
  * Separate the document based on blank page or barcode
  * Page merge
  * Mixed document feed
  * Document merge
  * Crushed page scan
  * Image enhancement
  * PunchHole Removal
  * ColorDropOut/ColorRemoval
  * Background Noise Removal
  * Background Color Removal
  * BMP File format Support
  * Searchable PDF
  * Smaller file size for PDF and JPEG
  Basic Booklet Printing Support for the following devices:
  * HP LaserJet Managed MFP E82540-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E87640-50-60 dn-du-z
  * HP Color LaserJet Managed MFP E77422a-dv-dn
  * HP Color LaserJet Managed MFP E77428dn
  * HP LaserJet MFP E72425a-dv-dn
  * HP LaserJet MFP E72430dn
  Limitations:
  * HPLIP does not support HP ScanJet Pro 2500 f1 device on OpenSuse
    Linux distribution.
  * Multipick feature not supported in below devices:
    HP Scanjet Pro 2000 S1
    HP Scanjet Pro 2500 f1
  Fixes:
  * hp-check crashes with FileNotFoundError using python3.7</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1563278400">- Disable -Werror=return-type for now.
- Use %make_build for parallel build.</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1565611200">- updated to 3.19.6
  Added support for the following new Printers:
  * HP Color LaserJet Enterprise M751dn
  * HP Color LaserJet Enterprise M751n
  * HP Color LaserJet Managed E75245dn
  * HP Color LaserJet Pro M453cdn
  * HP Color LaserJet Pro M453cdw
  * HP Color LaserJet Pro M454cdn
  * HP Color LaserJet Pro M454cdw
  * HP Color LaserJet Pro M454dn
  * HP Color LaserJet Pro M454dw
  * HP Color LaserJet Pro M454nw
  * HP Color LaserJet Pro MFP M478fcdn
  * HP Color LaserJet Pro MFP M478fcdw
  * HP Color LaserJet Pro MFP M479dw
  * HP Color LaserJet Pro MFP M479fcdn
  * HP Color LaserJet Pro MFP M479fcdw
  * HP Color LaserJet Pro MFP M479fdn
  * HP Color LaserJet Pro MFP M479fdw
  * HP Color LaserJet Pro MFP M479fnw
  * HP DesignJet T2600dr Postscript MFP
  * HP DesignJet XL 3600 PS MFP
  * HP Laser NS 1020
  * HP Laser NS 1020w
  * HP Laser NS MFP 1005
  * HP Laser NS MFP 1005w
  * HP LaserJet Enterprise Flow MFP M528c
  * HP LaserJet Enterprise Flow MFP M528z
  * HP LaserJet Enterprise M507dn
  * HP LaserJet Enterprise M507dng
  * HP LaserJet Enterprise M507n
  * HP LaserJet Enterprise M507x
  * HP LaserJet Enterprise MFP M528dn
  * HP LaserJet Enterprise MFP M528f
  * HP LaserJet Managed E50145dn
  * HP LaserJet Managed E50145x
  * HP LaserJet Managed Flow MFP E52645c
  * HP LaserJet Managed MFP E52645dn
  * HP LaserJet Pro M404c1
  * HP LaserJet Pro M404c2
  * HP LaserJet Pro M404c3
  * HP LaserJet Pro M404c4
  * HP LaserJet Pro M404d
  * HP LaserJet Pro M404dn
  * HP LaserJet Pro M404dw
  * HP LaserJet Pro M404m
  * HP LaserJet Pro M404n
  * HP LaserJet Pro M405d
  * HP LaserJet Pro M405dn
  * HP LaserJet Pro M405dw
  * HP LaserJet Pro M405n
  * HP LaserJet Pro MFP M428c1
  * HP LaserJet Pro MFP M428c2
  * HP LaserJet Pro MFP M428c3
  * HP LaserJet Pro MFP M428c4
  * HP LaserJet Pro MFP M428dw
  * HP LaserJet Pro MFP M428fdn
  * HP LaserJet Pro MFP M428fdw
  * HP LaserJet Pro MFP M428m
  * HP LaserJet Pro MFP M429dw
  * HP LaserJet Pro MFP M429fdn
  * HP LaserJet Pro MFP M429fdw
  * HP Neverstop Laser 1000a
  * HP Neverstop Laser 1000w
  * HP Neverstop Laser MFP 1200a
  * HP Neverstop Laser MFP 1200w
  * HP OfficeJet 8010 All  * in  * One Printer series
  * HP OfficeJet 8020 All  * in  * One Printer Series
  * HP OfficeJet Pro 8020 All  * in  * One Printer series
  * HP OfficeJet Pro 8030 All  * in  * One Printer series
  * HP PageWide XL 3900PS MFP
  * HP Smart Tank 500 series
  * HP Smart Tank 510
  * HP Smart Tank 530 series
  * HP Smart Tank 610
  * HP Smart Tank Plus 550
  * HP Smart Tank Plus 570 series
  * HP Smart Tank Plus 650</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566907200">- Moved hp-scan and hp-uiscan to a separate package "hp-scan".
  These tools pull in PIL and python3-scikit-image, which causes
  a rather big dependency list, which is only available in openSUSE.
  This allows us also to get rid of the non-functional "hp-scan" tool
  in SLE.
- Fixed --with-htmldir so that documentation is packaged
- Improved package descriptions and summaries
  * Clarified the relationship of hplip-hpijs, hplip-sane, and hplip
  * Shortened the descriptions
  * Removed reference to HTML documention in package description
- Added -devel dependencies as required by post-build-checks
- Minor spec file cleanup (macro usage)
- Fixed build failures on non-standard architectures by adding BuildIgnore
  These failures are actually caused by some ports catching up
  slowly with package updates. But our BuildIgnores are helpful
  nonetheless, making the build environment leaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566993600">- Removed compatibility code for SLE12/Leap42 and earlier
  As we are now using rpm 4.13 (A and B) syntax, we can't support
  these any more anyway.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080000">- Added conditional BuildRequires on "cups-rpm-helper".
  Recently a bug in python-pycups was fixed that had prevented
  autogeneration of Provides: tags in printer drivers by means
  of "BuildRequires: python3-cups". See OBS sr#726727. This
  dependency must be conditional for now, as cups-rpm-helper
  is not available in every project yet.
- Ran spec-cleaner.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1567080001">- Renamed "hplip-scan" to "hplip-scan-utils" to express the
  purpose of the package more clearly in the name.
  "hplip-scan" has never been in public repos.</changelog>
  <changelog author="Andreas Schneider &lt;asn@cryptomilk.org&gt;" date="1571227200">- Added missing requirement lsb-release (needed for root password
  prompt, e.g. hp-plugin).
- Changed the pgp server to pool.sks-keyservers.net to avoid timeouts
  from pgp.mit.edu
  * New patch: hplip-change-pgp-server.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1576411200">- Pass Python includedir in CFLAGS to fix broken lookup of Python.h
  in configure, fails with Python 3.8 (boo#1159242).</changelog>
  <changelog author="Johannes Weberhofer &lt;jweberhofer@weberhofer.at&gt;" date="1578571200">- updated to 3.19.12
  Rendering print jobs with cupsfilter command
  Added support for the following new Printers:
  * HP Color LaserJet Pro M256dn
  * HP Color LaserJet Pro M255dn
  * HP Color LaserJet Pro M256nw
  * HP Color LaserJet Pro M255nw
  * HP Color LaserJet Pro M256dw
  * HP Color LaserJet Pro M255dw
  * HP Color LaserJet Pro M155a
  * HP Color LaserJet Pro M156a
  * HP Color LaserJet Pro M155nw
  * HP Color LaserJet Pro M156nw
  * HP Color LaserJet Pro MFP M282nw
  * HP Color LaserJet Pro MFP M284nw
  * HP Color LaserJet Pro MFP M283fdn
  * HP Color LaserJet Pro MFP M285fdn
  * HP Color LaserJet Pro MFP M283fdw
  * HP Color LaserJet Pro MFP M285fdw
  * HP Color LaserJet Pro MFP M283cdw
  * HP Color LaserJet Pro MFP M285cdw
  * HP Color LaserJet Pro MFP M182n
  * HP Color LaserJet Pro MFP M184n
  * HP Color LaserJet Pro MFP M182nw
  * HP Color LaserJet Pro MFP M184nw
  * HP Color LaserJet Pro MFP M183fw
  * HP Color LaserJet Pro MFP M185fw
- updated to 3.19.11
  Added Supported for ?hp-uiscan? to scan only backside of a page
  Added support for the following new Printers:
  * HP Color LaserJet MFP M776dn
  * HP Color LaserJet Flow MFP M776z
  * HP Color LaserJet Flow MFP M776zs
  * HP Color LaserJet M856dn
  * HP Color LaserJet M856x
  * HP Color LaserJet E85055dn
  Added Job Accounting Support for the following devices:
  * HP LaserJet Managed Flow MFP E77822-28-30 Printer
  * HP LaserJet Managed MFP E77822-28-30 Printer
  * HP LaserJet Managed Flow MFP E87640-50-60 Printer
  * HP LaserJet Managed MFP E87640-50-60 Printer
  * HP LaserJet Managed Flow MFP E82540-50-60 Printer
  * HP LaserJet Managed MFP E82540-50-60 Printer
  * HP LaserJet Managed Flow MFP E72525-30-35 Printer
  * HP LaserJet Managed MFP E72525-30-35 Printer
- updated to 3.19.8
  hp-uiscan will fetch the paper sizes from the device dynamically for ScanJet devices.
  hp-uiscan will prompt error message when paper jam occurs for ScanJet devices.
  Added support for the following new Printers:
  * HP DesignJet T1530 Postscript
  * HP DesignJet T1600 Postscript Printer
  * HP DesignJet T1600dr Postscript Printer
  * HP DesignJet T2530 Postscript
  * HP DesignJet T2600 Postscript MFP
  * HP DesignJet T930 Postscript
  * HP LaserJet Pro M304a
  * HP LaserJet Pro M305d
  * HP LaserJet Pro M305dn
  * HP LaserJet Pro M305dw
  * HP LaserJet Pro MFP M329dn
  * HP LaserJet Pro MFP M329dw</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578657600">- Fix crash if python3-reportlab is missing (bsc#1159240, lp#1859179)
  * Added hp-sendfax-avoid-crash-if-python-reportlab-is-missin.patch
  * Added recommends on python3-reportlab</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916800">- Revert changes from 3.18.5 that break hp-setup for fax devices
  (bsc#1107711, lp#1773320)
  * Added patch: Revert-changes-from-3.18.5-that-break-hp-setup-for-f.patch</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1578916801">- Use /etc/sane.d/dll.d/hpaio to register SANE backend rather
  than modifying /etc/sane/dll.conf
- SANE backend must be configured in hplip-sane package (bsc#1160708)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1610193600">- Fix crash in hp-doctor if python3-qt4 is not installed
  (bsc#1180724)
  Added patch: dcheck.py-fix-crash-in-Qt4-version-check.patch</changelog>
</package>
<package pkgid="fb5d7dc97ad8d5895eb541fac807585caa540783580fe15c1d333ca58e6b2ff7" name="htop-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="lp152.4.4.1"/>
  <changelog author="jimmy@boombatower.com" date="1455192000">- Update to version 2.0.0.
  * Platform abstraction layer
  * Initial FreeBSD support
  * Initial Mac OS X support (thanks to David Hunt)
  * Swap meter for Mac OSX (thanks to ?tefan Rusu)
  * OpenBSD port (thanks to Michael McConville)
  * FreeBSD support improvements (thanks to Martin Misuth)
  * Support for NCurses 6 ABI, including mouse wheel support
  * Much improved mouse responsiveness
  * Process environment variables screen (thanks to Michael Klein)
  * Higher-resolution UTF-8 based Graph mode (Thanks to James Hall from vtop for the idea!)
  * Show program path settings (thanks to Tobias Geerinckx-Rice)
  * BUGFIX: Fix crash when scrolling an empty filtered list.
  * Use dynamic units for text display, and several fixes (thanks to Christian Hesse)
  * BUGFIX: fix error caused by overflow in usertime calculation. (thanks to Patrick Marlier)
  * Catch all memory allocation errors (thanks to Michael McConville for the push)
  * Several tweaks and bugfixes (See the Git log for details and contributors!)
- Rerolled both patches for compatibility with 2.0.0.
- Fix ncurses 6 incompatibility during compile.</changelog>
  <changelog author="develop7@develop7.info" date="1457006400">- htop-2.0.0-fix-buffer-reuse.patch: upstream fix for crash with SIGABRT</changelog>
  <changelog author="develop7@develop7.info" date="1463140800">- Update to v2.0.1
  * OpenBSD: Various fixes and improvements (thanks to Michael McConville and
    Juan Francisco Cantero Hurtado)
  * FreeBSD: fix CPU and memory readings (thanks to Tim Creech, Hung-Yi Chen,
    Bernard Spil, Greg V)
  * FreeBSD: add battery support (thanks to Greg V)
  * Linux: Retain last-obtained name of a zombie process
  * Mac OS X: Improve portability for OS X versions (thanks to Michael Klein)
  * Mac OS X: Fix reading command-line arguments and basename
  * Mac OS X: Fix process state information
  * Mac OS X: Fix tree view collapsing/expanding
  * Mac OS X: Fix tree organization
  * Mac OS X: Fix memory accounting
  * Fix crash when emptying a column of meters
  * Make Esc key more responsive
- removed htop-2.0.0-fix-buffer-reuse.patch and htop-stdgnu.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463918400">- added upstream patch fixing ESCDELAY-related build failure on modern ncurses
  (htop-2.0.1-fix-escdelay-usage.patch)
- updated configure script parameters</changelog>
  <changelog author="mpluskal@suse.com" date="1469275200">- Update to version 2.0.2:
  * Mac OS X: stop trying when task_for_pid fails for a process,
    stops spamming logs with errors.
  * Add Ctrl+A and Ctrl+E to go to beginning and end of line
  * FreeBSD: fixes for CPU calculation
  * Usability: auto-follow process after a search.
  * Use Linux backend on GNU Hurd
  * Improvement for reproducible builds.
  * BUGFIX: Fix behavior of Alt-key combinations
  * Various code tweaks and cleanups
- Drop htop-2.0.1-fix-escdelay-usage.patch
- Update htop-desktop-file-fix-thoenig-01.patch
- Drop some build dependencies
- Enable taskstats</changelog>
  <changelog author="mpluskal@suse.com" date="1477310400">- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Add gpg signature</changelog>
  <changelog author="aloisio@gmx.com" date="1517832000">- Update to version 2.1.0
  * Linux: Delay accounting metrics
    (thanks to André Carvalho)
  * Support for real-time signals
    (thanks to Kang-Che Sung)
  * 'c' key now works with threads as well
  * Session column renamed from SESN to SID
    (thanks to Kamyar Rasta)
  * Improved UI for meter style selection
    (thanks to Kang-Che Sung)
  * Improved code for constructing process tree
    (thanks to wangqr)
  * Compile-time option to disable setuid
  * Error checking of various standard library operations
  * Replacement of sprintf with snprintf
    (thanks to Tomasz Kramkowski)
  * Linux: performance improvements in battery meter
  * Linux: update process TTY device
  * Linux: add support for sorting TASK_IDLE
    (thanks to Vladimir Panteleev)
  * Linux: add upper-bound to running process counter
    (thanks to Lucas Correia Villa Real)
  * BUGFIX: avoid crash when battery is removed
    (thanks to Jan Chren)
- Refreshed htop-desktop-file-fix-thoenig-01.patch
- Added htop-script-python3.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1517918400">- Small cleanup with spec-clener</changelog>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="avindra@opensuse.org" date="1523361600">- Update to version 2.2.0
  * -t/--tree flag for starting in tree-view mode
  * Various automake and build improvements
  * Check for pkg-config when building with --enable-delayacct
  * Avoid some bashisms in configure script
  * Use CFLAGS from ncurses*-config if present
  * Header generator supports non-UTF-8 environments
  * Changed detection of kernel threads
  * Collapse current subtree pressing Backspace
  * BUGFIX: fix behavior of SYSCR column
  * BUGFIX: obtain exit code of lsof correctly
  * BUGFIX: fix crash with particular keycodes
  * BUGFIX: fix issue with small terminals
  * BUGFIX: fix terminal color issues
  * BUGFIX: preserve LDFLAGS when building
  * BUGFIX: fixed overflow for systems with &gt;= 100 signals
- cleanup with spec-cleaner
- rebase htop-script-python3.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
</package>
<package pkgid="bdceca28e122a2594b168c773eea1f45f80e1736ec4b562a8c5191086a099c56" name="htop-debugsource" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="lp152.4.4.1"/>
  <changelog author="jimmy@boombatower.com" date="1455192000">- Update to version 2.0.0.
  * Platform abstraction layer
  * Initial FreeBSD support
  * Initial Mac OS X support (thanks to David Hunt)
  * Swap meter for Mac OSX (thanks to ?tefan Rusu)
  * OpenBSD port (thanks to Michael McConville)
  * FreeBSD support improvements (thanks to Martin Misuth)
  * Support for NCurses 6 ABI, including mouse wheel support
  * Much improved mouse responsiveness
  * Process environment variables screen (thanks to Michael Klein)
  * Higher-resolution UTF-8 based Graph mode (Thanks to James Hall from vtop for the idea!)
  * Show program path settings (thanks to Tobias Geerinckx-Rice)
  * BUGFIX: Fix crash when scrolling an empty filtered list.
  * Use dynamic units for text display, and several fixes (thanks to Christian Hesse)
  * BUGFIX: fix error caused by overflow in usertime calculation. (thanks to Patrick Marlier)
  * Catch all memory allocation errors (thanks to Michael McConville for the push)
  * Several tweaks and bugfixes (See the Git log for details and contributors!)
- Rerolled both patches for compatibility with 2.0.0.
- Fix ncurses 6 incompatibility during compile.</changelog>
  <changelog author="develop7@develop7.info" date="1457006400">- htop-2.0.0-fix-buffer-reuse.patch: upstream fix for crash with SIGABRT</changelog>
  <changelog author="develop7@develop7.info" date="1463140800">- Update to v2.0.1
  * OpenBSD: Various fixes and improvements (thanks to Michael McConville and
    Juan Francisco Cantero Hurtado)
  * FreeBSD: fix CPU and memory readings (thanks to Tim Creech, Hung-Yi Chen,
    Bernard Spil, Greg V)
  * FreeBSD: add battery support (thanks to Greg V)
  * Linux: Retain last-obtained name of a zombie process
  * Mac OS X: Improve portability for OS X versions (thanks to Michael Klein)
  * Mac OS X: Fix reading command-line arguments and basename
  * Mac OS X: Fix process state information
  * Mac OS X: Fix tree view collapsing/expanding
  * Mac OS X: Fix tree organization
  * Mac OS X: Fix memory accounting
  * Fix crash when emptying a column of meters
  * Make Esc key more responsive
- removed htop-2.0.0-fix-buffer-reuse.patch and htop-stdgnu.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463918400">- added upstream patch fixing ESCDELAY-related build failure on modern ncurses
  (htop-2.0.1-fix-escdelay-usage.patch)
- updated configure script parameters</changelog>
  <changelog author="mpluskal@suse.com" date="1469275200">- Update to version 2.0.2:
  * Mac OS X: stop trying when task_for_pid fails for a process,
    stops spamming logs with errors.
  * Add Ctrl+A and Ctrl+E to go to beginning and end of line
  * FreeBSD: fixes for CPU calculation
  * Usability: auto-follow process after a search.
  * Use Linux backend on GNU Hurd
  * Improvement for reproducible builds.
  * BUGFIX: Fix behavior of Alt-key combinations
  * Various code tweaks and cleanups
- Drop htop-2.0.1-fix-escdelay-usage.patch
- Update htop-desktop-file-fix-thoenig-01.patch
- Drop some build dependencies
- Enable taskstats</changelog>
  <changelog author="mpluskal@suse.com" date="1477310400">- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Add gpg signature</changelog>
  <changelog author="aloisio@gmx.com" date="1517832000">- Update to version 2.1.0
  * Linux: Delay accounting metrics
    (thanks to André Carvalho)
  * Support for real-time signals
    (thanks to Kang-Che Sung)
  * 'c' key now works with threads as well
  * Session column renamed from SESN to SID
    (thanks to Kamyar Rasta)
  * Improved UI for meter style selection
    (thanks to Kang-Che Sung)
  * Improved code for constructing process tree
    (thanks to wangqr)
  * Compile-time option to disable setuid
  * Error checking of various standard library operations
  * Replacement of sprintf with snprintf
    (thanks to Tomasz Kramkowski)
  * Linux: performance improvements in battery meter
  * Linux: update process TTY device
  * Linux: add support for sorting TASK_IDLE
    (thanks to Vladimir Panteleev)
  * Linux: add upper-bound to running process counter
    (thanks to Lucas Correia Villa Real)
  * BUGFIX: avoid crash when battery is removed
    (thanks to Jan Chren)
- Refreshed htop-desktop-file-fix-thoenig-01.patch
- Added htop-script-python3.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1517918400">- Small cleanup with spec-clener</changelog>
  <changelog author="ecsos@opensuse.org" date="1519387200">- fix build error for Leap 42.3</changelog>
  <changelog author="avindra@opensuse.org" date="1523361600">- Update to version 2.2.0
  * -t/--tree flag for starting in tree-view mode
  * Various automake and build improvements
  * Check for pkg-config when building with --enable-delayacct
  * Avoid some bashisms in configure script
  * Use CFLAGS from ncurses*-config if present
  * Header generator supports non-UTF-8 environments
  * Changed detection of kernel threads
  * Collapse current subtree pressing Backspace
  * BUGFIX: fix behavior of SYSCR column
  * BUGFIX: obtain exit code of lsof correctly
  * BUGFIX: fix crash with particular keycodes
  * BUGFIX: fix issue with small terminals
  * BUGFIX: fix terminal color issues
  * BUGFIX: preserve LDFLAGS when building
  * BUGFIX: fixed overflow for systems with &gt;= 100 signals
- cleanup with spec-cleaner
- rebase htop-script-python3.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1523534400">- Simplify spec file
  * Drop support for building on older distros
  * Trim describtion
- Enable delayacct</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1587643200">- Add patches:
  * htop-2.2.0-fix-linux-process-ordering.patch
  * htop-2.2.0-fix-option-string.patch (fixes boo#1165352)</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1591358400">- Fix building with gcc10:
  * htop-2.2.0-gcc10.patch</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1598702400">- Update to version 3.0.0
  * Add simple, optional vim key mapping mode
  * Support more than 2 smaller CPU meter columns
  * Support Linux proportional set size metrics
  * Support Linux pressure stall information metrics
  * New display option to show CPU frequency in CPU meters
  * Update Linux sysfs battery discovery for recent kernels
  * Add hardware topology information in the affinity panel
  * Add timestamp reporting to the strace screen
  * Added an option to disable the mouse
  * Without an argument -u uses $USER value automatically
  * Support less(1) search navigation shortcuts
  * Support ZFS ARC statistics
  * Report values larger than 100 terabytes
  * Widen ST_UID (UID) column to allow for UIDs &gt; 9999
  * BUGFIX: fix makefiles for building with clang
  * BUGFIX: fix &lt;sys/sysmacros.h&gt; major() usage
  * BUGFIX: correctly identify other types of zombie process
  * BUGFIX: improve follow-process handling in some situations
  * BUGFIX: fix custom meters reverting to unexpected setting
  * BUGFIX: close pipe after running lsof(1)
  * BUGFIX: meters honour setting of counting CPUs from 0/1
- Drop htop-2.2.0.tar.gz.asc - no sig provided
- Upstreamed patches removed:
  * Drop htop-2.2.0-fix-linux-process-ordering.patch
  * Drop htop-2.2.0-fix-option-string.patch
  * Drop htop-2.2.0-gcc10.patch
  * Drop htop-desktop-file-fix-thoenig-01.patch
  * Drop htop-script-python3.patch</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1599393600">- Update to version 3.0.1
  * BUGFIX: Fix early exit with longer sysfs battery paths
  * BUGFIX: Improve OOM output, fix sorting
  * Rework check buttons and tree open/closed
  * Add -U/--no-unicode option to disable unicode
  * Improvements to the affinity panel</changelog>
  <changelog author="Avindra Goolcharan &lt;avindra@opensuse.org&gt;" date="1600171200">- Update to version 3.0.2
  * BUGFIX: Drop 'vim_mode' - several issues, needs rethink
  * BUGFIX: fix regression in -u optional-argument handling
  * Build system rework to remove python, header generation
  * CI, code quality improvements
- Switch to new official bintray tarball to remove automake deps</changelog>
  <changelog author="Michael Str&#xF6;der &lt;michael@stroeder.com&gt;" date="1607342400">- Update to version 3.0.3
  * Process sorting in 'tree' mode
  * Improved command display/sort functionality
  * Add screen for active file locks
  * Calculate library size (M_LRS column) from maps file
  * Add a Zram meter
  * Add Linux cwd process column
  * Dynamically load libsensors at runtime
  * Improve PressureStall Meter display strings
  * Hide process selection on ESC
  * Fully support non-ascii characters in Meter-Bar
  * Add support to change numeric options in settings screen
  * Rename virtual memory column from M_SIZE to M_VIRT
  * Add process column for normalized CPU usage
  * Show CPU temperature in CPU meter
  * Drop hideThreads Setting
  * Add a systemd meter
  * Add a network IO meter
  * Add a SELinux meter
  * Compress size of default FunctionBar
  * Updates to the OpenFiles screen
  * Continue updating header data in paused mode
  * BUGFIX: Handle data wraparounds in IO meters
  * BUGFIX: Update InfoScreen content on resize
  * Add security attribute process column
  * Add DiskIOMeter for IO read/write usage
  * Read CPU frequency from sysfs by default
  * Add Linux process column for context switches
  * Several FreeBSD and Mac OS X platform updates
  * Add process environment for FreeBSD
  * Parse POWER_SUPPLY_CAPACITY for Linux Battery meter
  * Add octuple-column CPU meters.
  * BUGFIX: On Linux consider ZFS ARC to be cache
  * BUGFIX: Limit screen title length to window width
  * Show selected command wrapped in a separate window
  * Allow to pass '/' for item search
  * Document implicit incremental search
  * Handle 'q' as quit if first character
  * Avoid expensive build of process tree when not using it
  * Include documentation for COMM and EXE
  * Distinguish display of no permissions for reading M_LRS
  * Only calculate M_LRS size every 2 seconds
  * Improvements to comm / cmdline display functionality
  * Merged view for COMM, EXE and cmdline
    (thanks to Narendran Gopalakrishnan and Benny Baumann)
  * Consistent kernel thread display for COMM/EXE columns
  * Central fault handling for all platforms
  * Handle parsing envID &amp; VPid from process status file
  * Use threshold for display of guest/steal/irq meters
  * Enhance highlighting of semi-large and large numbers
  * Documentation on the repository style guide
  * Align processor identifier to the right
  * Document M_PSS, M_PSSWP, M_SWAP in man page
  * Add Date and DateTime meters
  * BUGFIX: Fix Solaris 11.4 due to missing ZFS ARC kstats
  * Code hardening, speedups, fd and memory leak fixes
  * Number CPUs from zero by default
  * Remove residual python checks during the build process</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1608724800">- htop 3.0.4:
  * Separate tree and list sort orders
  * PSI Meter: constant width and only print ten-duration as bar
  * Sort in paused mode after inverting sort order
  * Handle absence of package CPU temperature
  * Document dynamic bindings and assumed external configuration
  * Update key mapping documentation for sorting</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1610452800">- Update to version 3.0.5:
  * InfoScreen: fix uncontrolled format string
  * Improve white text in the Light Terminal colour scheme
  * Enable the function bar on the main screen to be hidden (see Setup -&gt; Display options)
  * Reduce layout issues esp. around printing wide characters (not complete yet)
  * Make the follow function exit cleanly after followed process died
  * Update help and man page for improved -t / -s options
  * Drop usage of formatted error messages from &lt;err.h&gt;
  * Show arrow indicating order of sorted process column
  * Lots of plumbing around the internal Hashtable, hardening and code cleanups
  * LibSensors: add support for Ryzen CPUs
  * Fix CPU percentage on M1 silicon Macs
  * LoadMeter: dynamically adjust color and total of bar
  * Find libsensors.so.4 for Fedora and friends
  * Enable going back to previous search matches (Shift-F3)
  * Added keybind 'N' for sorting by PID (drops 'n'/'N' as not used before much)</changelog>
</package>
<package pkgid="ea8ecc82a47833742c2c457e7b3b3efaa0357a3dc83ce7c94470d0e8d7f122bb" name="hunspell-debuginfo" arch="i586">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="240c12a975cd21d6a66f863908a5fb2729c8a7cc61772588e2cd4f067a039da8" name="hunspell-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="15b255361182bb275db8fc35122917a843007afa420d2fe37a8d9dd97d33f9d5" name="hunspell-debugsource" arch="i586">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="3ebc6168bf995d8f15b30e8395f4527bd48ea126d4f4d25efdc3485f25d95e99" name="hunspell-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="11f47891162eec5f53ac14997d40078b43664874de02101cdd6515d11c1f489c" name="hunspell-tools-debuginfo" arch="i586">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="a7d5a1e02d2e2f53a22d9dace957015188b9f0efd7b3b2875df543c354a34e8b" name="hunspell-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="lp152.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
</package>
<package pkgid="08c0289e445d41e8e591dc92e9c11c9c5eb9586a3e9d16720faa18923a120496" name="hwloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="lp152.2.3.1"/>
  <changelog author="alinm.elena@gmail.com" date="1418731200">- Update to Version 1.10.0
  * v1.10.0 is the new feature release. There is no new major change
    in this release, just improvements everywhere.
    If you are buying new Intel Xeon E5 with 10 cores or more, this
    release is required for proper Socket/NUMA detection until the
    Linux kernel gets fixed.
  * API
    + Add hwloc_topology_export_synthetic() to export a topology to a
    synthetic string without using lstopo. See the Synthetic topologies
    section in the documentation.
    + Add hwloc_topology_set/get_userdata() to let the application save
    a private pointer in the topology whenever it needs a way to find
    its own object corresponding to a topology.
    + Add hwloc_get_numanode_obj_by_os_index() and document that this function
    as well as hwloc_get_pu_obj_by_os_index() are good at converting
    nodesets and cpusets into objects.
    + hwloc_distrib() does not ignore any objects anymore when there are
    too many of them. They get merged with others instead.
    Thanks to Tim Creech for reporting the issue.
  * Tools
    + hwloc-bind --get &lt;command-line&gt; now executes the command after displaying
    the binding instead of ignoring the command entirely.
    Thanks to John Donners for the suggestion.
    + Clarify that memory sizes shown in lstopo are local by default
    unless specified (total memory added in the root object).
  * Synthetic topologies
    + Synthetic topology descriptions may now specify attributes such as
    memory sizes and OS indexes. See the Synthetic topologies section
    in the documentation.
    + lstopo now exports in this fully-detailed format by default.
    The new option --export-synthetic-flags may be used to revert
    back the old format.
  * Documentation
    + Add the doc/examples/ subdirectory with several real-life examples,
    including the already existing hwloc-hello.C for basics.
    Thanks to Rob Aulwes for the suggestion.
    + Improve the documentation of CPU and memory binding in the API.
    + Add a FAQ entry about operating system errors, especially on AMD
    platforms with buggy cache information.
    + Add a FAQ entry about loading many topologies in a single program.
  * Misc
    + Work around buggy Linux kernels reporting 2 sockets instead
    1 socket with 2 NUMA nodes for each Xeon E5 v3 (Haswell) processor.
    + pciutils/libpci support is now removed since libpciaccess works
    well and there's also a Linux-specific PCI backend. For the record,
    pciutils was GPL and therefore disabled by default since v1.6.2.
    + Add --disable-cpuid configure flag to work around buggy processor
    simulators reporting invalid CPUID information.
    Thanks for Andrew Friedley for reporting the issue.
    + Fix a racy use of libltdl when manipulating multiple topologies in
    different threads.
    Thanks to Andra Hugo for reporting the issue and testing patches.
    + Fix some build failures in private/misc.h.
    Thanks to Pavan Balaji and Ralph Castain for the reports.
    + Fix failures to detect X11/Xutil.h on some Solaris platforms.
    Thanks to Siegmar Gross for reporting the failure.
    + The plugin ABI has changed, this release will not load plugins
    built against previous hwloc releases.</changelog>
  <changelog author="mardnh@gmx.de" date="1419940800">- minor spec fixes (unbreak build for suse_version &lt; Factory)</changelog>
  <changelog author="mpluskal@suse.com" date="1425556800">- Cleanup spec file with spec-cleaner
- Update to 1.10.1
  * Actually remove disallowed NUMA nodes from nodesets when the
    whole-system flag isn't enabled.
  * Fix the gathering of PCI domains. Thanks to James Custer for
    reporting the issue and providing a patch.
  * Fix the merging of identical parent and child in presence of
    Misc objects. Thanks to Dave Love for reporting the issue.
  * Fix some misordering of children when merging with
    ignore_keep_structure() in partially allowed topologies.
  * Fix an overzealous assertion in the debug code when running
    on a single-PU host with I/O. Thanks to Thomas Van Doren for
    reporting the issue.
  * Don't forget to setup NUMA node object nodesets in x86 backend
    (for BSDs) and OSF/Tru64 backend.
  * Fix cpuid-x86 build error with gcc -O3 on x86-32. Thanks to
    Thomas Van Doren for reporting the issue.
  * Fix support for future very large caches in the x86 backend.
  * Fix vendor/device names for SR-IOV PCI devices on Linux.
  * Fix an unlikely crash in case of buggy hierarchical distance matrix.
  * Fix PU os_index on some AIX releases. Thanks to Hendryk
    Bockelmann and Erik Schnetter for helping debugging.
  * Fix hwloc_bitmap_isincluded() in case of infinite sets.
  * Change hwloc-ls.desktop into a lstopo.desktop and only install
    it if lstopo is built with Cairo/X11 support. It cannot work
    with a non-graphical lstopo or hwloc-ls.
  * Add support for the renaming of Socket into Package in
    future releases.
  * Add support for the replacement of HWLOC_OBJ_NODE with
    HWLOC_OBJ_NUMANODE in future releases.
  * Clarify the documentation of distance matrices in hwloc.h and
    in the manpage of the hwloc-distances. Thanks to Dave Love for
    the suggestion.
  * Improve some error messages by displaying more information
    about the hwloc library in use.
  * Document how to deal with the ABI break when upgrading to
    the upcoming 2.0 See "How do I handle ABI breaks and API
    upgrades ?" in the FAQ.</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 1.11.1
  * Hardwire the topology of Fujitsu K-computer, FX10, FX100 servers to
    workaround buggy Linux kernels.
  * Fix L3 cache information on AMD Opteron 61xx Magny-Cours processors
    in the x86 backend.
  * Detect block devices directly attached to PCI without a controller,
    for instance NVMe disks.
  * Add the PCISlot attribute to all PCI functions instead of only the
    first one.
  * Ignore PCI bridges that could fail assertions by reporting buggy
    secondary-subordinate bus numbers
  * Fix an overzealous assertion when inserting an intermediate Group object
    while Groups are totally ignored.
  * Fix a memory leak on Linux on AMD processors with dual-core compute units.
  * Fix a memory leak on failure to load a xml diff file.
  * Fix some segfaults when inputting an invalid synthetic description.
  * Fix a segfault when plugins fail to find core symbols.
  * Fix a segfault when displaying logical indexes in the graphical lstopo.
  * Fix lstopo linking with X11 libraries, for instance on Mac OS X.
  * hwloc-annotate, hwloc-diff and hwloc-patch do not drop unavailable
    resources from the output anymore and those may be annotated as well.
  * Command-line tools may now import XML from the standard input with -i -.xml
  * Add missing documentation for the hwloc-info --no-icaches option.</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 1.11.2
  * Improve support for Intel Knights Landing Xeon Phi on Linux:
    + Group local NUMA nodes of normal memory (DDR) and high-bandwidth memory
    (MCDRAM) together through "Cluster" groups so that the local MCDRAM is
    easy to find.
  - See "How do I find the local MCDRAM NUMA node on Intel Knights
    Landing Xeon Phi?" in the documentation.
  - For uniformity across all KNL configurations, always have a NUMA node
    object even if the host is UMA.
    + Fix the detection of the memory-side cache:
  - Add the hwloc-dump-hwdata superuser utility to dump SMBIOS
    information
    into /var/run/hwloc/ as root during boot, and load this dumped
    information from the hwloc library at runtime.
  - See "Why do I need hwloc-dump-hwdata for caches on Intel Knights
    Landing Xeon Phi?" in the documentation.
    Thanks to Grzegorz Andrejczuk for the patches and for the help.
  * The x86 and linux backends may now be combined for discovering CPUs
    through x86 CPUID and memory from the Linux kernel.
    This is useful for working around buggy CPU information reported by Linux
    (for instance the AMD Bulldozer/Piledriver bug below).
    Combination is enabled by passing HWLOC_COMPONENTS=x86 in the environment.
  * Fix L3 cache sharing on AMD Opteron 63xx (Piledriver) and 62xx (Bulldozer)
    in the x86 backend. Thanks to many users who helped.
  * Fix the overzealous L3 cache sharing fix added to the x86 backend in 1.11.1
    for AMD Opteron 61xx (Magny-Cours) processors.
  * The x86 backend may now add the info attribute Inclusive=0 or 1 to caches
    it discovers, or to caches discovered by other backends earlier.
    Thanks to Guillaume Beauchamp for the patch.
  * Fix the management on alloc_membind() allocation failures on AIX, HP-UX
    and OSF/Tru64.
  * Fix spurious failures to load with ENOMEM on AIX in case of Misc objects
    below PUs.
  * lstopo improvements in X11 and Windows graphical mode:
    + Add + - f 1 shortcuts to manually zoom-in, zoom-out, reset the scale,
    or fit the entire window.
    + Display all keyboard shortcuts in the console.
  * Debug messages may be disabled at runtime by passing
  * HWLOC_DEBUG_VERBOSE=0
    in the environment when --enable-debug was passed to configure.
  * Add a FAQ entry "What are these Group objects in my topology?".</changelog>
  <changelog author="thomas.blume@suse.com" date="1457697600">- Update to 2.0 to support memory side cache (fate#319511)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1461326400">- add dependency to selinux-policy (bsc#976559)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1472472000">- fix missing manpage bug (bsc#995407)
- remove dependency to selinux-policy, selinux is not essential
  for hwloc (bsc#976559 comment#4)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1484654400">- switch  to version 1.11.5 since 2.0 is a development version with
  no .so-version set fate#321929 comment#5)</changelog>
  <changelog author="tchvatal@suse.com" date="1485172800">- Set noarch on the subpackages that are arch independent
- Run configure with enabling verbose mode and disable needless knobs
- Set version in the package fully (not 1.11 but 1.11.5+git...)
- Rename files to name of the package, if it needs to be renamed the folder
  needs to keep the other name too
- Do not mess with provides/obsoletes about the hwloc-2.0 it won't work
  with libsolv anyway without user interaction
  * Bump the user version to 2.0.0.1.11.5+git... to allow 'fake' update
    for user in order to work with fate#321929c#5</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1605787200">- move hwloc manpage to main package (bsc#1178802)</changelog>
</package>
<package pkgid="dc7fe2fa90c6db91f0939098baf78cf731af00a89c374590048fb12b8b534add" name="hwloc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="lp152.2.3.1"/>
  <changelog author="alinm.elena@gmail.com" date="1418731200">- Update to Version 1.10.0
  * v1.10.0 is the new feature release. There is no new major change
    in this release, just improvements everywhere.
    If you are buying new Intel Xeon E5 with 10 cores or more, this
    release is required for proper Socket/NUMA detection until the
    Linux kernel gets fixed.
  * API
    + Add hwloc_topology_export_synthetic() to export a topology to a
    synthetic string without using lstopo. See the Synthetic topologies
    section in the documentation.
    + Add hwloc_topology_set/get_userdata() to let the application save
    a private pointer in the topology whenever it needs a way to find
    its own object corresponding to a topology.
    + Add hwloc_get_numanode_obj_by_os_index() and document that this function
    as well as hwloc_get_pu_obj_by_os_index() are good at converting
    nodesets and cpusets into objects.
    + hwloc_distrib() does not ignore any objects anymore when there are
    too many of them. They get merged with others instead.
    Thanks to Tim Creech for reporting the issue.
  * Tools
    + hwloc-bind --get &lt;command-line&gt; now executes the command after displaying
    the binding instead of ignoring the command entirely.
    Thanks to John Donners for the suggestion.
    + Clarify that memory sizes shown in lstopo are local by default
    unless specified (total memory added in the root object).
  * Synthetic topologies
    + Synthetic topology descriptions may now specify attributes such as
    memory sizes and OS indexes. See the Synthetic topologies section
    in the documentation.
    + lstopo now exports in this fully-detailed format by default.
    The new option --export-synthetic-flags may be used to revert
    back the old format.
  * Documentation
    + Add the doc/examples/ subdirectory with several real-life examples,
    including the already existing hwloc-hello.C for basics.
    Thanks to Rob Aulwes for the suggestion.
    + Improve the documentation of CPU and memory binding in the API.
    + Add a FAQ entry about operating system errors, especially on AMD
    platforms with buggy cache information.
    + Add a FAQ entry about loading many topologies in a single program.
  * Misc
    + Work around buggy Linux kernels reporting 2 sockets instead
    1 socket with 2 NUMA nodes for each Xeon E5 v3 (Haswell) processor.
    + pciutils/libpci support is now removed since libpciaccess works
    well and there's also a Linux-specific PCI backend. For the record,
    pciutils was GPL and therefore disabled by default since v1.6.2.
    + Add --disable-cpuid configure flag to work around buggy processor
    simulators reporting invalid CPUID information.
    Thanks for Andrew Friedley for reporting the issue.
    + Fix a racy use of libltdl when manipulating multiple topologies in
    different threads.
    Thanks to Andra Hugo for reporting the issue and testing patches.
    + Fix some build failures in private/misc.h.
    Thanks to Pavan Balaji and Ralph Castain for the reports.
    + Fix failures to detect X11/Xutil.h on some Solaris platforms.
    Thanks to Siegmar Gross for reporting the failure.
    + The plugin ABI has changed, this release will not load plugins
    built against previous hwloc releases.</changelog>
  <changelog author="mardnh@gmx.de" date="1419940800">- minor spec fixes (unbreak build for suse_version &lt; Factory)</changelog>
  <changelog author="mpluskal@suse.com" date="1425556800">- Cleanup spec file with spec-cleaner
- Update to 1.10.1
  * Actually remove disallowed NUMA nodes from nodesets when the
    whole-system flag isn't enabled.
  * Fix the gathering of PCI domains. Thanks to James Custer for
    reporting the issue and providing a patch.
  * Fix the merging of identical parent and child in presence of
    Misc objects. Thanks to Dave Love for reporting the issue.
  * Fix some misordering of children when merging with
    ignore_keep_structure() in partially allowed topologies.
  * Fix an overzealous assertion in the debug code when running
    on a single-PU host with I/O. Thanks to Thomas Van Doren for
    reporting the issue.
  * Don't forget to setup NUMA node object nodesets in x86 backend
    (for BSDs) and OSF/Tru64 backend.
  * Fix cpuid-x86 build error with gcc -O3 on x86-32. Thanks to
    Thomas Van Doren for reporting the issue.
  * Fix support for future very large caches in the x86 backend.
  * Fix vendor/device names for SR-IOV PCI devices on Linux.
  * Fix an unlikely crash in case of buggy hierarchical distance matrix.
  * Fix PU os_index on some AIX releases. Thanks to Hendryk
    Bockelmann and Erik Schnetter for helping debugging.
  * Fix hwloc_bitmap_isincluded() in case of infinite sets.
  * Change hwloc-ls.desktop into a lstopo.desktop and only install
    it if lstopo is built with Cairo/X11 support. It cannot work
    with a non-graphical lstopo or hwloc-ls.
  * Add support for the renaming of Socket into Package in
    future releases.
  * Add support for the replacement of HWLOC_OBJ_NODE with
    HWLOC_OBJ_NUMANODE in future releases.
  * Clarify the documentation of distance matrices in hwloc.h and
    in the manpage of the hwloc-distances. Thanks to Dave Love for
    the suggestion.
  * Improve some error messages by displaying more information
    about the hwloc library in use.
  * Document how to deal with the ABI break when upgrading to
    the upcoming 2.0 See "How do I handle ABI breaks and API
    upgrades ?" in the FAQ.</changelog>
  <changelog author="p.drouand@gmail.com" date="1447675200">- Update to version 1.11.1
  * Hardwire the topology of Fujitsu K-computer, FX10, FX100 servers to
    workaround buggy Linux kernels.
  * Fix L3 cache information on AMD Opteron 61xx Magny-Cours processors
    in the x86 backend.
  * Detect block devices directly attached to PCI without a controller,
    for instance NVMe disks.
  * Add the PCISlot attribute to all PCI functions instead of only the
    first one.
  * Ignore PCI bridges that could fail assertions by reporting buggy
    secondary-subordinate bus numbers
  * Fix an overzealous assertion when inserting an intermediate Group object
    while Groups are totally ignored.
  * Fix a memory leak on Linux on AMD processors with dual-core compute units.
  * Fix a memory leak on failure to load a xml diff file.
  * Fix some segfaults when inputting an invalid synthetic description.
  * Fix a segfault when plugins fail to find core symbols.
  * Fix a segfault when displaying logical indexes in the graphical lstopo.
  * Fix lstopo linking with X11 libraries, for instance on Mac OS X.
  * hwloc-annotate, hwloc-diff and hwloc-patch do not drop unavailable
    resources from the output anymore and those may be annotated as well.
  * Command-line tools may now import XML from the standard input with -i -.xml
  * Add missing documentation for the hwloc-info --no-icaches option.</changelog>
  <changelog author="mpluskal@suse.com" date="1451131200">- Update to 1.11.2
  * Improve support for Intel Knights Landing Xeon Phi on Linux:
    + Group local NUMA nodes of normal memory (DDR) and high-bandwidth memory
    (MCDRAM) together through "Cluster" groups so that the local MCDRAM is
    easy to find.
  - See "How do I find the local MCDRAM NUMA node on Intel Knights
    Landing Xeon Phi?" in the documentation.
  - For uniformity across all KNL configurations, always have a NUMA node
    object even if the host is UMA.
    + Fix the detection of the memory-side cache:
  - Add the hwloc-dump-hwdata superuser utility to dump SMBIOS
    information
    into /var/run/hwloc/ as root during boot, and load this dumped
    information from the hwloc library at runtime.
  - See "Why do I need hwloc-dump-hwdata for caches on Intel Knights
    Landing Xeon Phi?" in the documentation.
    Thanks to Grzegorz Andrejczuk for the patches and for the help.
  * The x86 and linux backends may now be combined for discovering CPUs
    through x86 CPUID and memory from the Linux kernel.
    This is useful for working around buggy CPU information reported by Linux
    (for instance the AMD Bulldozer/Piledriver bug below).
    Combination is enabled by passing HWLOC_COMPONENTS=x86 in the environment.
  * Fix L3 cache sharing on AMD Opteron 63xx (Piledriver) and 62xx (Bulldozer)
    in the x86 backend. Thanks to many users who helped.
  * Fix the overzealous L3 cache sharing fix added to the x86 backend in 1.11.1
    for AMD Opteron 61xx (Magny-Cours) processors.
  * The x86 backend may now add the info attribute Inclusive=0 or 1 to caches
    it discovers, or to caches discovered by other backends earlier.
    Thanks to Guillaume Beauchamp for the patch.
  * Fix the management on alloc_membind() allocation failures on AIX, HP-UX
    and OSF/Tru64.
  * Fix spurious failures to load with ENOMEM on AIX in case of Misc objects
    below PUs.
  * lstopo improvements in X11 and Windows graphical mode:
    + Add + - f 1 shortcuts to manually zoom-in, zoom-out, reset the scale,
    or fit the entire window.
    + Display all keyboard shortcuts in the console.
  * Debug messages may be disabled at runtime by passing
  * HWLOC_DEBUG_VERBOSE=0
    in the environment when --enable-debug was passed to configure.
  * Add a FAQ entry "What are these Group objects in my topology?".</changelog>
  <changelog author="thomas.blume@suse.com" date="1457697600">- Update to 2.0 to support memory side cache (fate#319511)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1461326400">- add dependency to selinux-policy (bsc#976559)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1472472000">- fix missing manpage bug (bsc#995407)
- remove dependency to selinux-policy, selinux is not essential
  for hwloc (bsc#976559 comment#4)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1484654400">- switch  to version 1.11.5 since 2.0 is a development version with
  no .so-version set fate#321929 comment#5)</changelog>
  <changelog author="tchvatal@suse.com" date="1485172800">- Set noarch on the subpackages that are arch independent
- Run configure with enabling verbose mode and disable needless knobs
- Set version in the package fully (not 1.11 but 1.11.5+git...)
- Rename files to name of the package, if it needs to be renamed the folder
  needs to keep the other name too
- Do not mess with provides/obsoletes about the hwloc-2.0 it won't work
  with libsolv anyway without user interaction
  * Bump the user version to 2.0.0.1.11.5+git... to allow 'fake' update
    for user in order to work with fate#321929c#5</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485259200">- use version_prefix in specfile and download_files service to get sources</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1485518400">- use correct upstream source version</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- fix grammar errors</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1488801600">- make hwloc-dump-hwdata only available on x86, as it is only
  supported for Intel Knights Landing Xeon Phi platforms
- revert sub packages for SLE from no-arch to arch specific in order
  to keep backward compatibility
- fix typo in specfile</changelog>
  <changelog author="idonmez@suse.com" date="1511265600">- Fix build on Leap where both sle_version is defined and
  is_opensuse is True.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1511265601">- update to latest released upstream version 1.11.8 (fate#324166)
  * Multiple Solaris improvements
  + Detect caches on Sparc.
  + Properly detect allowed/disallowed PUs and NUMA nodes with processor sets.
  + Add hwloc_get_last_cpu_location() support for the current thread.
  * Add support for CUDA compute capability 7.0 and fix support for 6.[12].
  * Tools improvements
  + Fix search for objects by physical index in command-line tools.
  + Add missing "cpubind:get_thisthread_last_cpu_location" in the output
    of hwloc-info --support.
  + Add --pid and --name to specify target processes in hwloc-ps.
  + Display thread names in lstopo and hwloc-ps on Linux.
  * Doc improvements
  + Add a FAQ entry about building on Windows.
  + Install missing sub-manpage for hwloc_obj_add_info() and
    hwloc_obj_get_info_by_name().
  * Fix hwloc-bind --membind for CPU-less NUMA nodes (again).
  Thanks to Gilles Gouaillardet for reporting the issue.
  * Fix a memory leak on IBM S/390 platforms running Linux.
  * Fix a memory leak when forcing the x86 backend first on amd64/topoext
  platforms running Linux.
  * Command-line tools now support "hbm" instead "numanode" for filtering
  only high-bandwidth memory nodes when selecting locations.
  + hwloc-bind also support --hbm and --no-hbm for filtering only or
    no HBM nodes.
  * Add --children and --descendants to hwloc-info for listing object
  children or object descendants of a specific type.
  * Add --no-index, --index, --no-attrs, --attrs to disable/enable display
  of index numbers or attributes in the graphical lstopo output.
  * Try to gather hwloc-dump-hwdata output from all possible locations
  in hwloc-gather-topology.
  * Updates to the documentation of locations in hwloc(7) and
  command-line tools manpages.
  * Make the Linux discovery about twice faster, especially on the CPU side,
  by trying to avoid sysfs file accesses as much as possible.
  * Add support for AMD Family 17h processors (Zen) SMT cores in the Linux
  and x86 backends.
  * Add the HWLOC_TOPOLOGY_FLAG_THISSYSTEM_ALLOWED_RESOURCES flag (and the
  HWLOC_THISSYSTEM_ALLOWED_RESOURCES environment variable) for reading the
  set of allowed resources from the local operating system even if the
  topology was loaded from XML or synthetic.
  * Fix hwloc_bitmap_set/clr_range() for infinite ranges that do not
  overlap currently defined ranges in the bitmap.
  * Don't reset the lstopo zoom scale when moving the X11 window.
  * lstopo now has --flags for manually setting topology flags.
  * hwloc_get_depth_type() returns HWLOC_TYPE_DEPTH_UNKNOWN for Misc objects.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1566907200">- update to latest released upstream version 2.0.4 (jsc#SLE-8583)
  * Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  * Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  * Tiles, Modules and Dies are exposed as Groups for now.
  + HWLOC_DONT_MERGE_DIE_GROUPS=1 may be set in the environment to prevent
    Die groups from being automatically merged with identical parent or children.
  * Ignore NUMA node information from AMD topoext in the x86 backend,
  unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  * Group objects have a new "dont_merge" attribute to prevent them from
  being automatically merged with identical parent or children.
  * Fix build on Cygwin, thanks to Marco Atzeri for the patches.
  * Fix a corner case of hwloc_topology_restrict() where children would
  become out-of-order.
  * Fix the return length of export_xmlbuffer() functions to always
  include the ending \0.
  * Fix lstopo --children-order argument parsing.
  * Add support for Hygon Dhyana processors in the x86 backend,
  thanks to Pu Wen for the patch.
  * Fix symbol renaming to also rename internal components,
  thanks to Evan Ramos for the patch.
  * Fix build on HP-UX, thanks to Richard Lloyd for reporting the issues.
  * Detect PCI link speed without being root on Linux &gt;= 4.13.
  * Add HWLOC_VERSION* macros to the public headers,
  thanks to Gilles Gouaillardet for the suggestion.
  * Bump the library soname to 15:0:0 to avoid conflicts with hwloc 1.11.x
  releases. The hwloc 2.0.0 soname was buggy (12:0:0), applications will
  have to be recompiled.
  * Serialize pciaccess discovery to fix concurrent topology loads in
  multiple threads.
  * Fix hwloc-dump-hwdata to only process SMBIOS information that correspond
  to the KNL and KNM configuration.
  * Add a heuristic for guessing KNL/KNM memory and cluster modes when
  hwloc-dump-hwdata could not run as root earlier.
  * Add --no-text lstopo option to remove text from some boxes in the
  graphical output. Mostly useful for removing Group labels.
  * Some minor fixes to memory binding.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1571140800">- update to latest released upstream version 2.1.0 (jsc#SLE-8583)
  * API
  + Add a new "Die" object (HWLOC_OBJ_DIE) for upcoming x86 processors
    with multiple dies per package, in the x86 and Linux backends.
  + Add the new HWLOC_OBJ_MEMCACHE object type for memory-side caches.
  + Add HWLOC_RESTRICT_FLAG_BYNODESET and _REMOVE_MEMLESS for restricting
    topologies based on some memory nodes.
  + Add hwloc_topology_set_components() for blacklisting some components
    from being enabled in a topology.
  + Add hwloc_bitmap_nr_ulongs() and hwloc_bitmap_from/to_ulongs()
  + Improve the API for dealing with disallowed resources
  + Group objects have a new "dont_merge" attribute to prevent them from
    being automatically merged with identical parent or children.
  + Add more distances-related features:
  - Add hwloc_distances_get_name() to retrieve a string describing
    what a distances structure contain.
  - Add hwloc_distances_get_by_name() to retrieve distances structures
    based on their name.
  - Add hwloc_distances_release_remove()
  - Distances may now cover objects of different types with new kind
    HWLOC_DISTANCES_KIND_HETEROGENEOUS_TYPES.
  * Backends
  + Add support for Linux 5.3 new sysfs cpu topology files with Die information.
  + Add support for Intel v2 Extended Topology Enumeration in the x86 backend.
  + Improve memory locality on Linux by using HMAT initiators (exposed
    since Linux 5.2+), and NUMA distances for CPU-less NUMA nodes.
  + The x86 backend now properly handles offline CPUs.
  + Detect the locality of NVIDIA GPU OpenCL devices.
  + Ignore NUMA nodes that correspond to NVIDIA GPU by default.
  + Add support for IBM S/390 drawers.
  + Rework the heuristics for discovering KNL Cluster and Memory modes
    to stop assuming all CPUs are online (required for mOS support).
  + Ignore NUMA node information from AMD topoext in the x86 backend,
    unless HWLOC_X86_TOPOEXT_NUMANODES=1 is set in the environment.
  + Expose Linux DAX devices as hwloc Block OS devices.
  + Remove support for /proc/cpuinfo-only topology discovery in Linux
    kernel prior to 2.6.16.
  + Disable POWER device-tree-based topology on Linux by default.
  + Discovery components are now divided in phases that may be individually
    blacklisted.
  * Tools
  + lstopo
  - lstopo factorizes objects by default in the graphical output when
    there are more than 4 identical children.
  - Both logical and OS/physical indexes are now displayed by default
    for PU and NUMA nodes.
  - The X11 and Windows interactive outputs support many keyboard
    shortcuts to dynamically customize the attributes, legend, etc.
  - Add --linespacing and change default margins and linespacing.
  - Add --allow for changing allowed sets.
  - Add a native SVG backend.
  + Add --nodeset options to hwloc-calc for converting between cpusets and
    nodesets.
  + Add --no-smt to lstopo, hwloc-bind and hwloc-calc to ignore multiple
    PU in SMT cores.
  + hwloc-annotate may annotate multiple locations at once.
  + Add a HTML/JS version of hwloc-ps. See contrib/hwloc-ps.www/README.
  + Add bash completions.
  * Misc
  + Add several FAQ entries in "Compatibility between hwloc versions"
    about API version, ABI, XML, Synthetic strings, and shmem topologies.</changelog>
  <changelog author="Thomas Blume &lt;thomas.blume@suse.com&gt;" date="1605787200">- move hwloc manpage to main package (bsc#1178802)</changelog>
</package>
<package pkgid="0d58e7022d18ddbea075e87d72dfc761a2642a2ec86780e3aa863286f8adc686" name="hylafax+-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
</package>
<package pkgid="850658ffa20c20d7b861d3cfbfd4e9c03153f4bf151392289c2753835d460e53" name="hylafax+-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
</package>
<package pkgid="a62e7359bc50f4656829ae09c688bea4462b5db34534e587f9a58b2e49970b20" name="hylafax+-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.9.1"/>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
</package>
<package pkgid="948c90bd5eba83184c91f7d094f901cda7078d9b9d84766ba7546275335ffecc" name="hylafax+-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
</package>
<package pkgid="6254b216998707d7cc128e3f5d90d167b834491c1086698255b0f9ef2be7fdf7" name="hylafax+-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
</package>
<package pkgid="39d3fbf6a5bd6628e689ae22e6ae5e886087f050616b5b0cf36651f94bd54489" name="hylafax+-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.9.1"/>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
</package>
<package pkgid="d0f3ba7ba8d642b4b510bfeedefcfbb176d1a787b3c416123e3de5cd355c2bae" name="hylafax+-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.2" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
</package>
<package pkgid="a07600f3ae0f5bed5ffe5a60be82eb89683cbd134c17ba1b1172ed25ee0c4616" name="hylafax+-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
</package>
<package pkgid="753320b5cbf5b0f4e9a76eb62fe238ab6d3a0f94834f1b7504d0aa72903ceb7d" name="hylafax+-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.3" rel="lp152.3.9.1"/>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537358400">- add systemd hylafax.target</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1542024000">- boo#1115532 JBIG-in-tiff conversion added
  (Build Requirement tiff, libtiff)</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1542196800">- Do not use tabs in spec</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1543320000">- move textfmt to client package (used by sendfax only)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1546948800">- migrate from cron to systemd timers (boo#1115442)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547640000">- Dependency on hylafax-hfaxd for timers added</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1547812800">- faxgetty@ service removed from %pre section, as it is only a placeholder</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1548244800">- Reduce boilerplate generated from %service_* by calling it just
  once.</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1563451200">- Version 7.0.0
  * add LDAP features for compatibility with ActiveDirectory (25 Mar-1 Apr 2019)
  * fix recovery after SSL Fax "accept failure" (18 Mar 2019)
  * add TextFormat overstrike option and disable by default (6 Feb 2019)
  * fix the page size of cover sheets returned via notify (8 Jan 2019)
  * fix or silence numerous compiler warnings (19, 22, 28 Dec 2018)
  * fix pagehandling updating after a proxy has been used (7-8 Dec 2018)
  * add faxmail stderr output of RFC2047 decoding results (5 Dec 2018)
  * fix faxmail handling of headers encoded with UTF-8 (4 Dec 2018)
  * fix faxmail handling of base64-encoded text parts (4 Dec 2018)
  * add SSL Fax support (9-26, 29 Nov; 11, 18, 25 Dec 2018; 2, 7, 23 Jan 2019)</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424000">- build fails with libtiff 4.1: pretend, that 4.1 is similar to 4.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1574424001">- Version 7.0.1
  * create a client timeout setting and change the default from 60 to
  3600 seconds (26 Sep 2019)
  * extend timeout for receiving ECM frames (21 Aug 2019)
  * fix timeout in Class 1 frame reception (5 Aug 2019)
  * improve Class 1 protocol handling when MaxRecvPages exceeded (31 Jul 2019)
  * fix ModemGroup limit default (11 Jul 2019)
  * fix recovery for SSL Fax write failures (6 Jun 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1581681600">- Version 7.0.2
  * change FIXEDWIDTH default to better accommodate auto-rotation (13 Dec 2019)
  * prevent SSL_accept() from blocking (5 Dec 2019)
  * support libtiff v4.1 (5 Dec 2019)
  * fix ignoremodembusy feature broken by ModemGroup limits feature (16 Nov 2019)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1591704000">- fix for boo#1172731
  VUL-0: EMBARGOED: CVE-2020-8024: hylafax+: Problematic permissions allow
    escalation from uucp to other users
  * adjusted authorisation
  * adjusted pre*/post* snipplets</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1597147200">- version 7.0.3
  * add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl
  (31 Jul 2020)
  * be more resilient in listening for the Phase C carrier (30 Jul 2020)
  * make sure to return to command mode if HDLC receive times out (29 Jul 2020)
  * make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)
  * don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)
  * don't ever respond to CRP with CRP (28 Jul 2020)
  * secure setup.cache/setup.modem - CVE-2020-15397 (27, 30 Jul 2020)
  * reset frame counter when a sender retransmits PPS for a previously confirmed
  ECM block (26 Jul 2020)
  * scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)
  * fix modem recovery after SSL Fax failure (22, 26 Jul 2020)
  * ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)
  * attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)
  * run scripts directly rather than invoking them via a shell for security
  hardening (3-5 Jul 2020)
  * add senderFumblesECM feature (3 Jul 2020)
  * add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN
  feature, and utilize PIN for rare conditions where it may be helpful
  (2, 6, 13-14 Jul 2020)
  * add senderConfusesRTN feature (25-26 Jun 2020)
  * add MissedPageHandling feature (24 Jun 2020)
  * use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)
  * cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)
  * fix listening for retransmission of MPS/EOP/EOM if it was received
  corrupt on the first attempt (15 Jun 2020)
  * secure temporary directory creation for faxsetup, faxaddmodem, and
  probemodem - CVE-2020-15396 (13 Jun 2020)
  * don't use CRP when receiving PPS/PPM as some senders think
  we are sending MCF (12 Jun 2020)
  * add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)
  * have faxinfo put units on non-standard page dimensions (28 May 2020)
  * improve error messages for JobHost connection errors (22 May 2020)
  * fix perpetual blocking of jobs when a job preparation fails,
  attempt to fix similar blocking problems for bad jobs in
  batches, and add "unblock" faxconfig feature (21 May 2020)
  * ignore TCF if we're receiving an SSL Fax (31 Jan 2020)
  * fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)</changelog>
  <changelog author="Axel Braun &lt;axel.braun@gmx.de&gt;" date="1602244800">- rearrange files-section (boo#1172731)</changelog>
</package>
<package pkgid="6a9f4aebdb9232dd7ca373d9f50e9f7bc578a8c012dd24be7306f46ef75b4156" name="hyper-v-debuginfo" arch="i586">
  <version epoch="0" ver="8" rel="lp152.9.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
</package>
<package pkgid="5fa85f597a6317cbc4bde384aee7706a8730bd6589aa9199d31e5f1015af4498" name="hyper-v-debuginfo" arch="x86_64">
  <version epoch="0" ver="8" rel="lp152.9.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
</package>
<package pkgid="fb6787274d1c1e370fe2cc6286eed6bdc7a84e2a9e9900801f5aaffdee27cff8" name="hyper-v-debuginfo" arch="i586">
  <version epoch="0" ver="8" rel="lp152.9.6.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="781375f3977452d813c1a7cb9f734b5f1440dd165e5f70c5477d77a3d48cc453" name="hyper-v-debuginfo" arch="x86_64">
  <version epoch="0" ver="8" rel="lp152.9.6.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="ff11a609108a3d3b860470b0444d31503b0a5976a33f0b68ddd65979ee011594" name="hyper-v-debugsource" arch="i586">
  <version epoch="0" ver="8" rel="lp152.9.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
</package>
<package pkgid="b2c3c6f1fe58e74c65295fe808f0705b8aeee71de8f01afe576f2e34e4c6e651" name="hyper-v-debugsource" arch="x86_64">
  <version epoch="0" ver="8" rel="lp152.9.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
</package>
<package pkgid="37c5d26434bdaf00da7728a20557f7e101cd61e8ceca1a68ccf355667488b2d4" name="hyper-v-debugsource" arch="i586">
  <version epoch="0" ver="8" rel="lp152.9.6.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="7684bd91d6af9071c6701f669b087436a6814d0070f06f88cd107655d5398a19" name="hyper-v-debugsource" arch="x86_64">
  <version epoch="0" ver="8" rel="lp152.9.6.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="e546fc2ef6e6f4a9c40cd8751f4938d4e6221bf32e73ff9b20c7162806ca195f" name="i2c-tools-debuginfo" arch="i586">
  <version epoch="0" ver="4.0" rel="lp152.5.3.1"/>
  <changelog author="dvaleev@suse.com" date="1444824000">- Backport  r6048 and r6053 in order to not conflict with
  linux-glibc-devel
  i2c-tools-r6048-Move-SMBus-helper-functions.patch
  i2c-tools-r6053-Add-smbus-header.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1448625600">- Update to version 3.1.2:
  * Includes 1 backport we already had
- Removed obsolete i2c-tools-r6250-ddr3-fix-ext-temp-refresh.diff
  (upstream)</changelog>
  <changelog author="lchiquitto@suse.de" date="1474977600">- Fix file conflict (i2c-dev.h) with linux-glibc-devel. (bsc#995536)</changelog>
  <changelog author="jdelvare@suse.com" date="1499342400">- Point to the new download location.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342401">- Update the URL.
- Remove authors list from package description, it does not belong
  there.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342402">- decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch:
  Fix recommended by upstream.</changelog>
  <changelog author="jdelvare@suse.com" date="1500292800">- Add missing bug number in changes file (bsc#1041644).</changelog>
  <changelog author="jdelvare@suse.com" date="1509364800">- Update to version 4.0:
  * New library libi2c
  * Many fixes and improvements to decode-dimms
  * New manual pages and examples added to existing manual pages
  * New tool i2ctransfer
- Removed obsolete decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch,
  i2c-tools-hackweek-9-dependencies.diff,
  i2c-tools-hackweek-9-improve-DDR3-support.diff,
  i2c-tools-r6048-Move-SMBus-helper-functions.patch,
  i2c-tools-r6053-Add-smbus-header.patch (upstream)</changelog>
  <changelog author="jdelvare@suse.com" date="1509364801">- i2cbusses-path-overflows.patch: Prevent buffer overflow of
  sysfs paths.</changelog>
  <changelog author="jdelvare@suse.com" date="1512561600">- build-lib-add-missing-dependencies.patch: Fix random failure
  of parallel builds.
- decode-dimms-hackweek-DDR4.patch: Add DDR4 SDRAM memory support
  to decode-dimms (Hackweek 0x10 project.)</changelog>
  <changelog author="jdelvare@suse.com" date="1513080000">- build-tools-add-missing-dependencies.patch: Fix another random
  failure of parallel builds.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1603886400">- Enable python binding python3-smbus (bsc#1178053).</changelog>
</package>
<package pkgid="33eb2ac3b2fb61d56b3377d4ea395b8fbad3d59adcff83d7cf35f1cf0bd7db59" name="i2c-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp152.5.3.1"/>
  <changelog author="dvaleev@suse.com" date="1444824000">- Backport  r6048 and r6053 in order to not conflict with
  linux-glibc-devel
  i2c-tools-r6048-Move-SMBus-helper-functions.patch
  i2c-tools-r6053-Add-smbus-header.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1448625600">- Update to version 3.1.2:
  * Includes 1 backport we already had
- Removed obsolete i2c-tools-r6250-ddr3-fix-ext-temp-refresh.diff
  (upstream)</changelog>
  <changelog author="lchiquitto@suse.de" date="1474977600">- Fix file conflict (i2c-dev.h) with linux-glibc-devel. (bsc#995536)</changelog>
  <changelog author="jdelvare@suse.com" date="1499342400">- Point to the new download location.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342401">- Update the URL.
- Remove authors list from package description, it does not belong
  there.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342402">- decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch:
  Fix recommended by upstream.</changelog>
  <changelog author="jdelvare@suse.com" date="1500292800">- Add missing bug number in changes file (bsc#1041644).</changelog>
  <changelog author="jdelvare@suse.com" date="1509364800">- Update to version 4.0:
  * New library libi2c
  * Many fixes and improvements to decode-dimms
  * New manual pages and examples added to existing manual pages
  * New tool i2ctransfer
- Removed obsolete decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch,
  i2c-tools-hackweek-9-dependencies.diff,
  i2c-tools-hackweek-9-improve-DDR3-support.diff,
  i2c-tools-r6048-Move-SMBus-helper-functions.patch,
  i2c-tools-r6053-Add-smbus-header.patch (upstream)</changelog>
  <changelog author="jdelvare@suse.com" date="1509364801">- i2cbusses-path-overflows.patch: Prevent buffer overflow of
  sysfs paths.</changelog>
  <changelog author="jdelvare@suse.com" date="1512561600">- build-lib-add-missing-dependencies.patch: Fix random failure
  of parallel builds.
- decode-dimms-hackweek-DDR4.patch: Add DDR4 SDRAM memory support
  to decode-dimms (Hackweek 0x10 project.)</changelog>
  <changelog author="jdelvare@suse.com" date="1513080000">- build-tools-add-missing-dependencies.patch: Fix another random
  failure of parallel builds.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1603886400">- Enable python binding python3-smbus (bsc#1178053).</changelog>
</package>
<package pkgid="338a69a4eac636d5fca32b5c450cf1e99093f9c0a3918c1d8782c9cbfef57fac" name="i2c-tools-debugsource" arch="i586">
  <version epoch="0" ver="4.0" rel="lp152.5.3.1"/>
  <changelog author="dvaleev@suse.com" date="1444824000">- Backport  r6048 and r6053 in order to not conflict with
  linux-glibc-devel
  i2c-tools-r6048-Move-SMBus-helper-functions.patch
  i2c-tools-r6053-Add-smbus-header.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1448625600">- Update to version 3.1.2:
  * Includes 1 backport we already had
- Removed obsolete i2c-tools-r6250-ddr3-fix-ext-temp-refresh.diff
  (upstream)</changelog>
  <changelog author="lchiquitto@suse.de" date="1474977600">- Fix file conflict (i2c-dev.h) with linux-glibc-devel. (bsc#995536)</changelog>
  <changelog author="jdelvare@suse.com" date="1499342400">- Point to the new download location.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342401">- Update the URL.
- Remove authors list from package description, it does not belong
  there.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342402">- decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch:
  Fix recommended by upstream.</changelog>
  <changelog author="jdelvare@suse.com" date="1500292800">- Add missing bug number in changes file (bsc#1041644).</changelog>
  <changelog author="jdelvare@suse.com" date="1509364800">- Update to version 4.0:
  * New library libi2c
  * Many fixes and improvements to decode-dimms
  * New manual pages and examples added to existing manual pages
  * New tool i2ctransfer
- Removed obsolete decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch,
  i2c-tools-hackweek-9-dependencies.diff,
  i2c-tools-hackweek-9-improve-DDR3-support.diff,
  i2c-tools-r6048-Move-SMBus-helper-functions.patch,
  i2c-tools-r6053-Add-smbus-header.patch (upstream)</changelog>
  <changelog author="jdelvare@suse.com" date="1509364801">- i2cbusses-path-overflows.patch: Prevent buffer overflow of
  sysfs paths.</changelog>
  <changelog author="jdelvare@suse.com" date="1512561600">- build-lib-add-missing-dependencies.patch: Fix random failure
  of parallel builds.
- decode-dimms-hackweek-DDR4.patch: Add DDR4 SDRAM memory support
  to decode-dimms (Hackweek 0x10 project.)</changelog>
  <changelog author="jdelvare@suse.com" date="1513080000">- build-tools-add-missing-dependencies.patch: Fix another random
  failure of parallel builds.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1603886400">- Enable python binding python3-smbus (bsc#1178053).</changelog>
</package>
<package pkgid="1f7b3cd6f8c90581e2ee260db954714b2a8935ad3f21c1826116b1dfab90ed22" name="i2c-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="4.0" rel="lp152.5.3.1"/>
  <changelog author="dvaleev@suse.com" date="1444824000">- Backport  r6048 and r6053 in order to not conflict with
  linux-glibc-devel
  i2c-tools-r6048-Move-SMBus-helper-functions.patch
  i2c-tools-r6053-Add-smbus-header.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1448625600">- Update to version 3.1.2:
  * Includes 1 backport we already had
- Removed obsolete i2c-tools-r6250-ddr3-fix-ext-temp-refresh.diff
  (upstream)</changelog>
  <changelog author="lchiquitto@suse.de" date="1474977600">- Fix file conflict (i2c-dev.h) with linux-glibc-devel. (bsc#995536)</changelog>
  <changelog author="jdelvare@suse.com" date="1499342400">- Point to the new download location.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342401">- Update the URL.
- Remove authors list from package description, it does not belong
  there.</changelog>
  <changelog author="jdelvare@suse.com" date="1499342402">- decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch:
  Fix recommended by upstream.</changelog>
  <changelog author="jdelvare@suse.com" date="1500292800">- Add missing bug number in changes file (bsc#1041644).</changelog>
  <changelog author="jdelvare@suse.com" date="1509364800">- Update to version 4.0:
  * New library libi2c
  * Many fixes and improvements to decode-dimms
  * New manual pages and examples added to existing manual pages
  * New tool i2ctransfer
- Removed obsolete decode-dimms-correctly-check-for-out-of-bounds-vendor-id.patch,
  i2c-tools-hackweek-9-dependencies.diff,
  i2c-tools-hackweek-9-improve-DDR3-support.diff,
  i2c-tools-r6048-Move-SMBus-helper-functions.patch,
  i2c-tools-r6053-Add-smbus-header.patch (upstream)</changelog>
  <changelog author="jdelvare@suse.com" date="1509364801">- i2cbusses-path-overflows.patch: Prevent buffer overflow of
  sysfs paths.</changelog>
  <changelog author="jdelvare@suse.com" date="1512561600">- build-lib-add-missing-dependencies.patch: Fix random failure
  of parallel builds.
- decode-dimms-hackweek-DDR4.patch: Add DDR4 SDRAM memory support
  to decode-dimms (Hackweek 0x10 project.)</changelog>
  <changelog author="jdelvare@suse.com" date="1513080000">- build-tools-add-missing-dependencies.patch: Fix another random
  failure of parallel builds.</changelog>
  <changelog author="Jean Delvare &lt;jdelvare@suse.com&gt;" date="1603886400">- Enable python binding python3-smbus (bsc#1178053).</changelog>
</package>
<package pkgid="19beb1880ff6ca43c94abe8fbaea3d77234450f2ca3af7c9bdef76fee8fdc62b" name="ibacm-debuginfo" arch="i586">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="898f9267e7fd0491a03121d7dbdacc397c8fc79b4677b9f90dd3e7f39f7c7120" name="ibacm-debuginfo" arch="x86_64">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="8b4a7d3e43eb0c35e816abf69d83d11f808f6e2b6c35d49ae5c2a15ca4fabf78" name="ibus-hangul-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.2~git20181223.10c4795" rel="lp152.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1318420800">- Fix build with ibus-1.4, the patch taken from Fedora (bnc#723591)
- Fix the installation path of setup program</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="hillwood@linuxfans.org" date="1332244800">- update to 1.4.0
  * Require ibus 1.4
  * Add desktop menu for ibus-setup-hangul
  * Add an option for automatic reordering
  * Add an option for a word preedit text
  * Update MS IME compatible symbol table
  * Use surrounding text feature on converting to hanja</changelog>
  <changelog author="hillwood@linuxfans.org" date="1339329600">- update to 1.4.1
  * Handle exceptions properly in ibus-setup-hangul
  https://github.com/choehwanjin/ibus-hangul/pull/5
  * Update icon files
  * Support ibus icon symbol feature</changelog>
  <changelog author="dvaleev@suse.com" date="1342612800">- Fix the installation path of setup program for ppc as well</changelog>
  <changelog author="schwab@linux-m68k.org" date="1349092800">- Use %{_lib} for the installation path</changelog>
  <changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.2
  * Use Gobject Introspection
  * GNOME Control Center integration
  * Miscellaneous bug fixes</changelog>
  <changelog author="i@marguerite.su" date="1414065600">- update version 1.5.0
  * Add latin input mode. so you can input latin characters without
    changing input method engine.
  * Allow hangul mode to be toggled
  * Python3 compatibility</changelog>
  <changelog author="i@marguerite.su" date="1551009600">- update to version 1.5.2~git20181223.10c4795:
  * Add test code for UString
  * Implement preedit mode option
  * Implement IBusEngine::set_capabilities method
  * Listen to 'use-event-forwarding' option change event
  * Fix event processing priority for hanja conversion
  * Fix interger overflow on h_ibus_text_get_substring()
  * Add AppStream metainfo
  * setup: Add window "destroy" event handling
  * Add Escape to off-keys default value
- changes in 1.5.1
  * correct more spacings
  * correct capitalization of setup labels
  * check if ibus and ibus config is running
  * fix wrong space order problem
  * add disable-latin-mode option
  * setup: set GLib app name explicitly
  * setup: fix PyGI warnings
  * reparent IBusHangulEngine from IBusEngineSimple to handle Compose key
  * migrate IBusConfig to GSettings
  * add use-event-forwarding option
  * setup: Don't use GtkDialog
  * intialized local variable as NULL
  * update initial_input_mode on GSettings "changed"
- use python3
- add python3-gobject as Requires (boo#1124568)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1614600000">- add "Requires: ibus" (boo#1174103)</changelog>
</package>
<package pkgid="db9b3ac5284550f9d9543f81fa24adf9a56a645d94f58a11997a686894136a02" name="ibus-hangul-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.2~git20181223.10c4795" rel="lp152.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1318420800">- Fix build with ibus-1.4, the patch taken from Fedora (bnc#723591)
- Fix the installation path of setup program</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="hillwood@linuxfans.org" date="1332244800">- update to 1.4.0
  * Require ibus 1.4
  * Add desktop menu for ibus-setup-hangul
  * Add an option for automatic reordering
  * Add an option for a word preedit text
  * Update MS IME compatible symbol table
  * Use surrounding text feature on converting to hanja</changelog>
  <changelog author="hillwood@linuxfans.org" date="1339329600">- update to 1.4.1
  * Handle exceptions properly in ibus-setup-hangul
  https://github.com/choehwanjin/ibus-hangul/pull/5
  * Update icon files
  * Support ibus icon symbol feature</changelog>
  <changelog author="dvaleev@suse.com" date="1342612800">- Fix the installation path of setup program for ppc as well</changelog>
  <changelog author="schwab@linux-m68k.org" date="1349092800">- Use %{_lib} for the installation path</changelog>
  <changelog author="hillwood@linuxfans.org" date="1359288000">- update to 1.4.2
  * Use Gobject Introspection
  * GNOME Control Center integration
  * Miscellaneous bug fixes</changelog>
  <changelog author="i@marguerite.su" date="1414065600">- update version 1.5.0
  * Add latin input mode. so you can input latin characters without
    changing input method engine.
  * Allow hangul mode to be toggled
  * Python3 compatibility</changelog>
  <changelog author="i@marguerite.su" date="1551009600">- update to version 1.5.2~git20181223.10c4795:
  * Add test code for UString
  * Implement preedit mode option
  * Implement IBusEngine::set_capabilities method
  * Listen to 'use-event-forwarding' option change event
  * Fix event processing priority for hanja conversion
  * Fix interger overflow on h_ibus_text_get_substring()
  * Add AppStream metainfo
  * setup: Add window "destroy" event handling
  * Add Escape to off-keys default value
- changes in 1.5.1
  * correct more spacings
  * correct capitalization of setup labels
  * check if ibus and ibus config is running
  * fix wrong space order problem
  * add disable-latin-mode option
  * setup: set GLib app name explicitly
  * setup: fix PyGI warnings
  * reparent IBusHangulEngine from IBusEngineSimple to handle Compose key
  * migrate IBusConfig to GSettings
  * add use-event-forwarding option
  * setup: Don't use GtkDialog
  * intialized local variable as NULL
  * update initial_input_mode on GSettings "changed"
- use python3
- add python3-gobject as Requires (boo#1124568)</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1614600000">- add "Requires: ibus" (boo#1174103)</changelog>
</package>
<package pkgid="ee0a526dec72b31cefd30373367704fe50891ce9774e6b20d864287b22651e7e" name="ibus-rime-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.1~git20190223.c80c02f" rel="lp152.2.3.1"/>
  <changelog author="hillwood@linuxfans.org" date="1350388800">- Update to 0.9.4
  * user dictionary for table input method.
  * automatically build schema dependencies.
  * logging with google-glog.
  * install data files from a separate package: brise.
  * new API: accessing schema list.
  * new API: enabling/disabling soft cursor in preedit string.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1373112000">- ?pdate to 0.9.9
  * support static linking librime and its dependencies.
  * support changing conversion mode with Caps Lock.
  * add 'Sync data' button.
  * in Chinese mode, display the name of schema on status bar.
  * display notifications about deployment result.</changelog>
  <changelog author="hillwood@linuxfans.org" date="1384603200">- Update to 1.0
  * add config option 'lookup_table_orientation'.</changelog>
  <changelog author="i@marguerite.su" date="1394884800">- update version 1.1git20140316
  * rime.xml: add symbolic icon for GNOME Shell.
  * rime_settings.*: fallback to ibus default UI options in 'panel' section.</changelog>
  <changelog author="i@marguerite.su" date="1407672000">- update version 1.2
  * rime_engine.c: add status bar icons; update status bar
    only when there is a change in IME status, to fix issues
    on Ubuntu Trusty.
  * rime_config.h: define macros for version and file paths.
  * Makefile: fix file permissions in install target.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="dimstar@opensuse.org" date="1517918400">- Don't BuildRequire libyaml-cpp0_5/libyaml-cpp0_3 (depending on
  version): explicitly buildrequiring a library is generally seen
  always wrong. The correct library is already pulled in by
  librime.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1553515200">- Update to version 1.4.1~git20190223.c80c02f:
  * chore(CHANGELOG.md): fix typo
  * chore(release): 1.4.0 :tada:
  * chore(README.md, rime.xml): use https link
  * fix(rime_main.cc): deploy ibus_rime.yaml on maintenance
  * chore(rime.xml, rime_main.c): update ibus component name
  * refactor(rime_*.cc): adopt librime 1.x API
  * chore(release): 1.3.0 :tada:
  * chore(submodules): update librime, plum
  * fix(CMakeLists.txt): static build requires boost_locale and icuuc
  * chore(CHANGES.md): reformat change log</changelog>
  <changelog author="Marguerite Su &lt;i@marguerite.su&gt;" date="1553688000">- update License
- add Requires: rime since rime binaries were moved to a new package,
  and librime1 can't pull it in</changelog>
  <changelog author="Hillwood Yang &lt;hillwood@opensuse.org&gt;" date="1604923200">- Set Requires tag for brise, ibus-rime need it. (boo#1178582)</changelog>
</package>
<package pkgid="aa1fda1abe8ee925169d2262aab0d03d8ae177ca09a8cee9d9061cc6fcefad58" name="icewm-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="508799860f1dceae81f4dd7358b46dee3992ac434a231cc9f4229283f49aa65a" name="icewm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="a81723e0d377981b1f6e614eea69e2b01ac8b96300aa79309f9fda9ef79bbbe4" name="icewm-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="c93cc6bbcf6243efff550917763b26d97a73dc67cd3c43a443cc2e5c063935b9" name="icewm-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="61f1a960cbbc8e3d9343bf14698742298bdf16547fe5abd1c8bdafe346690f39" name="icewm-debugsource" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="47aa5de198c43292909142171c22c42f8bed86f88c4d63a4111b62e9edf62569" name="icewm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="2c9d07321dd6fa5bd2154e0587df52956c45053a8f62f770f20ce6755e3e3fc8" name="icewm-debugsource" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="4f198178996e5f80c99453c04fa49b506ac0f1348a85542925acefc53e04e8ab" name="icewm-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="9ad70c1868e895bdd5bb3c1780d195c4c83cc1602f9a4d229b361b205d5afcdd" name="icewm-default-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="9ee54c01785a3ad73fe5760d565cb435fdd95d28b4375fcf1686e310e5d835b1" name="icewm-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="ae405a366429411ff920f84737267c605ddc0fd78ffee53996b33ccd7e72abe5" name="icewm-default-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="ce691af3c02591972fa78911ad04a8a6603540e56d0d6a486e043498a1267bd0" name="icewm-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="7ed5abac9845856adc152f88141eb90fa689b636d1188e71bc37699c8658529a" name="icewm-lite-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="25d876e482012af39f8125c96909d69c8ac417af15d836296618d0ef61aeadb2" name="icewm-lite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.3.1"/>
  <changelog author="tchvatal@suse.com" date="1457438400">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
</package>
<package pkgid="d4ad0e5de220e97359351ed314ef91f435c1c957fb6816d183db6d14da83b1e4" name="icewm-lite-debuginfo" arch="i586">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="dea24e7eca6e0f1da9cca5dcbea85fabe662893cc0eeea0f13c495fa6ce2ad10" name="icewm-lite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp152.12.6.1"/>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="Chingkai &lt;qkzhu@suse.com&gt;" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
</package>
<package pkgid="4851c625ca386df19b537ad5f41e6d23e03b90cae4b6d19737f3fb9ebc8bcc92" name="icinga2-bin-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.3.3.3"/>
  <changelog author="ecsos@opensuse.org" date="1539345600">- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 &amp; REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib-&gt;compat-&gt;statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object-&gt;m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1539864000">- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on &gt;2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10</changelog>
  <changelog author="ecsos@opensuse.org" date="1542196800">- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)</changelog>
  <changelog author="ecsos@opensuse.org" date="1551182400">- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation &amp; syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26</changelog>
  <changelog author="ecsos@opensuse.org" date="1553083200">- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19</changelog>
  <changelog author="ecsos@opensuse.org" date="1558612800">- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages</changelog>
  <changelog author="ecsos@opensuse.org" date="1564488000">- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247</changelog>
  <changelog author="ecsos@opensuse.org" date="1568894400">- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost &gt;1.66 (either from packages.icinga.com, EPEL or backports). SLES11 &amp; Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features &amp; improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks &amp; Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard &amp; update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.</changelog>
  <changelog author="ecsos@opensuse.org" date="1571313600">- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones</changelog>
  <changelog author="ecsos@opensuse.org" date="1571918400">- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916800">- Fix boo#1159869
  Permission error when use the icinga cli wizard.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916801">- Set minimum require boost version to 1.66</changelog>
  <changelog author="ecsos@opensuse.org" date="1583236800">- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
</package>
<package pkgid="0b5122689acc827073484098088ec84861d6ba1579d5ec391ecc0be9c53451f6" name="icinga2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.3.3.3"/>
  <changelog author="ecsos@opensuse.org" date="1539345600">- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 &amp; REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib-&gt;compat-&gt;statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object-&gt;m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1539864000">- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on &gt;2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10</changelog>
  <changelog author="ecsos@opensuse.org" date="1542196800">- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)</changelog>
  <changelog author="ecsos@opensuse.org" date="1551182400">- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation &amp; syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26</changelog>
  <changelog author="ecsos@opensuse.org" date="1553083200">- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19</changelog>
  <changelog author="ecsos@opensuse.org" date="1558612800">- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages</changelog>
  <changelog author="ecsos@opensuse.org" date="1564488000">- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247</changelog>
  <changelog author="ecsos@opensuse.org" date="1568894400">- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost &gt;1.66 (either from packages.icinga.com, EPEL or backports). SLES11 &amp; Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features &amp; improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks &amp; Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard &amp; update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.</changelog>
  <changelog author="ecsos@opensuse.org" date="1571313600">- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones</changelog>
  <changelog author="ecsos@opensuse.org" date="1571918400">- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916800">- Fix boo#1159869
  Permission error when use the icinga cli wizard.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916801">- Set minimum require boost version to 1.66</changelog>
  <changelog author="ecsos@opensuse.org" date="1583236800">- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
</package>
<package pkgid="9a83b6723fc76480705999b31c2f86153479733076c71f328bee8867dfc1ed8f" name="icinga2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.3.3.3"/>
  <changelog author="ecsos@opensuse.org" date="1539345600">- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 &amp; REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib-&gt;compat-&gt;statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object-&gt;m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1539864000">- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on &gt;2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10</changelog>
  <changelog author="ecsos@opensuse.org" date="1542196800">- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)</changelog>
  <changelog author="ecsos@opensuse.org" date="1551182400">- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation &amp; syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26</changelog>
  <changelog author="ecsos@opensuse.org" date="1553083200">- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19</changelog>
  <changelog author="ecsos@opensuse.org" date="1558612800">- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages</changelog>
  <changelog author="ecsos@opensuse.org" date="1564488000">- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247</changelog>
  <changelog author="ecsos@opensuse.org" date="1568894400">- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost &gt;1.66 (either from packages.icinga.com, EPEL or backports). SLES11 &amp; Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features &amp; improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks &amp; Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard &amp; update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.</changelog>
  <changelog author="ecsos@opensuse.org" date="1571313600">- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones</changelog>
  <changelog author="ecsos@opensuse.org" date="1571918400">- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916800">- Fix boo#1159869
  Permission error when use the icinga cli wizard.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916801">- Set minimum require boost version to 1.66</changelog>
  <changelog author="ecsos@opensuse.org" date="1583236800">- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
</package>
<package pkgid="fb0fd2a107fd90957d3c0ab3aaf031b87c788af7b5c7e14722de018ebfbb305a" name="icinga2-ido-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.3.3.3"/>
  <changelog author="ecsos@opensuse.org" date="1539345600">- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 &amp; REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib-&gt;compat-&gt;statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object-&gt;m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1539864000">- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on &gt;2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10</changelog>
  <changelog author="ecsos@opensuse.org" date="1542196800">- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)</changelog>
  <changelog author="ecsos@opensuse.org" date="1551182400">- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation &amp; syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26</changelog>
  <changelog author="ecsos@opensuse.org" date="1553083200">- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19</changelog>
  <changelog author="ecsos@opensuse.org" date="1558612800">- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages</changelog>
  <changelog author="ecsos@opensuse.org" date="1564488000">- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247</changelog>
  <changelog author="ecsos@opensuse.org" date="1568894400">- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost &gt;1.66 (either from packages.icinga.com, EPEL or backports). SLES11 &amp; Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features &amp; improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks &amp; Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard &amp; update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.</changelog>
  <changelog author="ecsos@opensuse.org" date="1571313600">- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones</changelog>
  <changelog author="ecsos@opensuse.org" date="1571918400">- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916800">- Fix boo#1159869
  Permission error when use the icinga cli wizard.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916801">- Set minimum require boost version to 1.66</changelog>
  <changelog author="ecsos@opensuse.org" date="1583236800">- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
</package>
<package pkgid="f7e3aebe88cfa9d5e297018a7a0b05df56b25ac56fa5674693b1717aa94efa5f" name="icinga2-ido-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.12.1" rel="lp152.3.3.3"/>
  <changelog author="ecsos@opensuse.org" date="1539345600">- update to 2.10.0
  * Notes
  - Support for namespaces, details in this blogpost
  - Only send acknowledgement notification to users notified about a problem before, thanks for sponsoring to the Max-Planck-Institut for Marine Mikrobiologie
  - More child options for scheduled downtimes
  - Performance improvements and fixes for the TLS connections inside cluster/REST API
  - Better logging for HTTP requests and less verbose object creation (e.g. downtimes via Icinga Web 2 &amp; REST API)
  - New configuration path constants, e.g. ConfigDir
  - Fixed problem with dependencies rescheduling parent checks too fast
  - Fixed problem with logging in systemd and syslog
  - Improved vim syntax highlighting
  - Technical concepts docs update with config compiler and TLS network IO
  * Enhancement
  - #6663 (API, Log, PR): Silence config compiler logging for runtime created objects
  - #6657 (API, Log, PR): Enable the HTTP request body debug log entry for release builds
  - #6655 (API, Log, PR): Improve logging for disconnected HTTP clients
  - #6651 (Plugins, PR): Add 'used' feature to check_swap
  - #6633 (API, Cluster, PR): Use a dynamic thread pool for API connections
  - #6632 (Cluster, PR): Increase the cluster reconnect frequency to 10s
  - #6616 (API, Cluster, PR): Add ApiListener#tls_handshake_timeout option
  - #6611 (Notifications): Allow types = [ Recovery ] to always send recovery notifications
  - #6595 (API, Cluster, PR): Allow to configure anonymous clients limit inside the ApiListener object
  - #6532 (Configuration, PR): Add child_options to ScheduledDowntime
  - #6531 (API, PR): Expose Zone#all_parents via API
  - #6527 (Notifications, PR): Acknowledgment notifications should only be send if problem notification has been send
  - #6521 (Configuration, PR): Implement references
  - #6512 (Cluster, PR): Refactor environment for API connections
  - #6511 (Cluster, PR): ApiListener: Add support for dynamic port handling
  - #6509 (Configuration, PR): Implement support for namespaces
  - #6508 (Configuration, PR): Implement the Dictionary#clear script function
  - #6506 (PR): Improve path handling in cmake and daemon
  - #6460 (Log, help wanted): Feature suggestion: Do not log warnings when env elements are undefined in CheckCommand objects
  - #6455 (Log, PR): Log something when the Filelogger has been started
  - #6379 (Configuration, PR): Throw config error when using global zones as parent
  - #6356 (Log, PR): Fix logging under systemd
  - #6339 (Log, help wanted): On systemd, icinga2 floods the system log, and this cannot simply be opted out of
  - #6110 (Configuration, PR): Implement support for optionally specifying the 'var' keyword in 'for' loops
  - #6047 (Notifications): Acknowledgment notifications should only be sent if the user already received a problem notification
  - #4282 (API, Log): Icinga should log HTTP bodies for API requests
  * Bug
  - #6658 (API, PR): Ensure that HTTP/1.0 or 'Connection: close' headers are properly disconnecting the client
  - #6652 (Plugins, PR): Fix check_memory thresholds in 'used' mode
  - #6647 (CLI, PR): node setup: always respect --accept-config and --accept-commands
  - #6643 (Check Execution, Notifications, PR): Fix that check_timeout was used for Event/Notification commands too
  - #6639 (Windows, PR): Ensure to _unlink before renaming replay log on Windows
  - #6622 (DB IDO, PR): Ensure to use UTC timestamps for IDO PgSQL cleanup queries
  - #6603 (Check Execution, Cluster): CheckCommand 'icinga' seems to ignore retry interval via command_endpoint
  - #6575: LTO builds fail on Linux
  - #6566 (Cluster): Master disconnects during signing process
  - #6546 (API, CLI, PR): Overridden path constants not passed to config validation in /v1/config/stages API call
  - #6530 (DB IDO, PR): IDO/MySQL: avoid empty queries
  - #6519 (CLI, PR): Reset terminal on erroneous console exit
  - #6517 (Cluster): Not all Endpoints can't reconnect due to "Client TLS handshake failed" error after "reload or restart"
  - #6514 (API): API using "Connection: close" header results in infinite threads
  - #6507 (Cluster): Variable name conflict in constants.conf / Problem with TLS verification, CN and Environment variable
  - #6503 (Log, PR): Reduce the log level for missing env macros to debug
  - #6485 (Log): Icinga logs discarding messages still as warning and not as notice
  - #6475 (Compat, PR): lib-&gt;compat-&gt;statusdatawriter: fix notifications_enabled
  - #6430 (Log, PR): Fix negative 'empty in' value in WorkQueue log message
  - #6427 (Configuration, Crash, PR): Improve error message for serializing objects with recursive references
  - #6409 (Configuration, Crash): Assigning vars.x = vars causes Icinga 2 segfaults
  - #6408 (PR): ObjectLock#Unlock(): don't reset m_Object-&gt;m_LockOwner too early
  - #6386 (Configuration, PR): Fix that TimePeriod segments are not cleared on restart
  - #6382 (CLI, help wanted): icinga2 console breaks the terminal on errors
  - #6313 (Plugins, Windows, PR): Fix wrong calculation of check_swap windows plugin
  - #6304 (Configuration, Notifications): Timeout defined in NotificationCommand is ignored and uses check_timeout
  - #5815 (Plugins, Windows): swap-windows check delivers wrong result
  - #5375 (Check Execution, PR): Parents who are non-active should not be rescheduled
  - #5052 (Cluster, Windows): Replay log not working with Windows client
  - #5022 (Check Execution): Dependencies may reschedule passive checks, triggering freshness checks
  * ITL
  - #6646 (ITL, PR): Update ITL and Docs for memory-windows - show used
  - #6640 (ITL): Update ITL and Docs for memory-windows - show used
  - #6563 (ITL, PR): [Feature] Cloudera service health CheckCommand
  - #6561 (ITL, PR): [Feature] Ceph health CheckCommand
  - #6504 (ITL, PR): squashfs ignored
  - #6491 (ITL, PR): Feature/itl vmware health
  - #6481 (ITL): command-plugins.conf check_disk exclude squashfs
  * Documentation
  - #6670 (Documentation, PR): Add technical concepts for the config compiler and daemon CLI command
  - #6665 (Documentation, PR): Make the two modes of check_http more obvious.
  - #6615 (Documentation, PR): Update distributed monitoring docs for 2.10
  - #6610 (Documentation, PR): Add "TLS Network IO" into technical concepts docs
  - #6607 (Documentation, PR): Enhance development docs with GDB backtrace and thread list
  - #6606 (Documentation, PR): Enhance contributing docs
  - #6598 (Documentation, PR): doc/09-object-types: states filter ignored for Acknowledgements
  - #6597 (Documentation, PR): Add Fedora to development docs for debuginfo packages
  - #6593 (Documentation, help wanted): Include CA Proxy in 3rd scenario in Distributed Monitoring docs
  - #6573 (Documentation, PR): Fix operator precedence table
  - #6528 (Documentation, PR): Document default of User#enable_notifications
  - #6502 (Documentation, PR): Update 17-language-reference.md
  - #6501 (Documentation, PR): Update 03-monitoring-basics.md
  - #6488 (Documentation, ITL, PR): Fix typo with the CheckCommand cert
  * Support
  - #6669 (PR): Don't throw an error when namespace indexers don't find a valid key
  - #6668 (Installation, PR): Enhance vim syntax highlighting for 2.10
  - #6661 (API, Log, code-quality, PR): Cache the peer address in the HTTP server
  - #6642 (PR): Allow to override MaxConcurrentChecks constant
  - #6621 (code-quality, PR): Remove unused timestamp function in DB IDO
  - #6618 (PR): Silence compiler warning for nice()
  - #6591 (PR): Fix static initializer priority for namespaces in LTO builds
  - #6588 (PR): Fix using full path in prepare-dirs/safe-reload scripts
  - #6586 (PR): Fix non-unity builds on CentOS 7 with std::shared_ptr
  - #6583 (Documentation, Installation, PR): Update PostgreSQL library path variable in INSTALL.md
  - #6574 (PR): Move new downtime constants into the Icinga namespace
  - #6570 (Cluster, PR): Increase limit for simultaneously connected anonymous TLS clients
  - #6567 (PR): ApiListener: Dump the state file port detail as number
  - #6556 (Installation, Windows, PR): windows: Allow suppression of extra actions in the MSI package
  - #6544 (code-quality, PR): Remove #include for deprecated header file
  - #6539 (PR): Build fix for CentOS 7 and non-unity builds
  - #6526 (code-quality, PR): icinga::PackObject(): shorten conversion to string
  - #6510 (Tests, Windows, PR): Update windows build scripts
  - #6494 (Tests, PR): Test PackObject
  - #6489 (code-quality, PR): Implement object packer for consistent hashing
  - #6484 (Packages): Packages from https://packages.icinga.com are not Systemd Type=notify enabled?
  - #6469 (Installation, Windows, PR): Fix Windows Agent resize behavior
  - #6458 (code-quality, PR): Fix debug build log entry for ConfigItem activation priority
  - #6456 (code-quality, PR): Keep notes for immediately log flushing
  - #6440 (code-quality, PR): Fix typo
  - #6410 (code-quality, PR): Remove unused code
  - #4959 (Installation, Windows): Windows Agent Wizard Window resizes with screen, hiding buttons</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1539864000">- update to 2.10.1
  * Bug
  - #6696 (PR): Remove default environment, regression from e678fa1aa5
  - #6694: v2.10.0 sets a default environment "production" in SNI
  - #6691 (PR): Add missing shutdown/program state dumps for SIGUSR2
    reload handler
  - #6689: State file not updated on reload
  - #6685 (API, PR): Fix regression with API permission filters and
    namespaces in v2.10
  - #6682 (API): API process-check-result fails in 2.10.0
  - #6679 (Windows, PR): Initialize Configuration::InitRunDir for
    Windows and writing the PID file
  - #6624 (Check Execution): Master Reload Causes Passive Check State Change
  - #6592: Reloads seem to reset the check atempt count. Also notifications
    go missing shortly after a reload.
  * Documentation
  - #6701 (Documentation, PR): Add GitHub release tag to README
  - #6700 (Documentation, PR): Enhance the addon chapter in the docs
  - #6699 (Documentation, PR): Update to https://icinga.com/
  - #6692 (Documentation, PR): Update release docs for Chocolatey
  - #6690 (Documentation, PR): Extend 09-object-types.md with argument array
  - #6674 (Documentation, PR): Add a note to the docs on &gt;2 endpoints in
    a zone
  - #6673 (Documentation, PR): Update RELEASE docs
  - #6672 (Documentation, PR): Extend upgrade docs
  - #6671 (Documentation): Zone requirements changed in 2.10 -
    Undocumented Change
  * Support
  - #6681 (code-quality, PR): Fix spelling errors.
  - #6677 (Packages, Windows): icinga does not start after Update to 2.10</changelog>
  <changelog author="ecsos@opensuse.org" date="1542196800">- update to 2.10.2
  * Bug
  - #6770 (PR): Fix deadlock in GraphiteWriter
  - #6769 (Cluster): Hanging TLS connections
  - #6759 (Log, PR): Fix possible double free in StreamLogger::BindStream()
  - #6753: Icinga2.service state is reloading in systemd after safe-reload until systemd time-out
  - #6740 (DB IDO, PR): DB IDO: Don't enqueue queries when the feature is paused (HA)
  - #6738 (API, Cluster, PR): Ensure that API/JSON-RPC messages in the same session are processed and not stalled
  - #6736 (Crash): Stability issues with Icinga 2.10.x
  - #6717 (API, PR): Improve error handling for invalid child_options for API downtime actions
  - #6712 (API): Downtime name not returned when error occurs
  - #6711 (API, Cluster): Slow API (TLS-Handshake)
  - #6709 (PR): Fix the Icinga2 version check for versions with more than 5 characters
  - #6707 (Compat, PR): Fix regression for wrong objects.cache path overwriting icinga2.debug file
  - #6705 (CLI, Compat, Configuration): Crash "icinga2 object list" command with 2.10.1-1 on CentOS 7
  - #6703: Check command 'icinga' breaks when vars.icinga_min_version is defined (2.10.x)
  - #6635 (API): API TLS session connection closed after 2 requests
  - #5876 (DB IDO): IDO Work queue on the inactive node growing when switching connection between redundant master servers
  * Documentation
  - #6714 (Documentation, PR): Docs: Add package related changes to the upgrading docs
  * Support
  - #6773 (Installation, Packages, PR): Initialize ICINGA2_ERROR_LOG inside the systemd environment
  - #6771 (Tests, PR): Implement unit tests for Dictionary initializers
  - #6760 (Packages, Tests, PR): armhf: Apply workaround for timer tests with std::bind callbacks
  - #6710 (Packages): Crash when upgrading from 2.10.0 to 2.10.1 (SELinux related)</changelog>
  <changelog author="ecsos@opensuse.org" date="1551182400">- update to 2.10.3
  * Bugfixes:
  - Stalled TLS connections on reload/Director deployments (#6816 #6898 ref/NC/588119)
  - 'Connection: close' header leading to unstable instance, affects Ruby clients (#6799)
  - Server time in the future breaks check result processing (#6797 ref/NC/595861)
  - ScheduledDowntimes: Generate downtime objects only on one HA endpoint (#2844 ref/IC/9673 ref/NC/590167 ref/NC/591721)
  - Improve activation &amp; syncing for downtime objects generated from ScheduledDowntimes (#6826 ref/IC/9673 ref/NC/585559)
  - Generate a runtime downtime object from already running ScheduledDowntime objects (#6704)
  - DB IDO: Don't enqueue queries when the feature is paused in HA zones (#5876)
  - Crashes with localtime_r errors (#6887)
  * Documentation updates:
  - Ephemeral port range blocking on Windows agents (ref/NC/597307)
  - Technical concepts for the check scheduler (#6775)
  - DB IDO cleanup (#6791)
  - Unified development docs (#6819)
  Details see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2103-2019-02-26</changelog>
  <changelog author="ecsos@opensuse.org" date="1553083200">- update to 2.10.4
  * Bugfixes:
  - Fix TLS connections in Influxdb/Elasticsearch features leaking file descriptors (#6989 #7018 ref/IP/12219)
  - Fixes for delayed and one-time notifications (#5561 #6757)
  - Improve performance for downtimes/comments added in HA clusters (#6885 ref/IP/9235)
  - check_perfmon supports non-localized performance counter names (#5546 #6418)
  Detail see: https://github.com/Icinga/icinga2/blob/master/CHANGELOG.md#2104-2019-03-19</changelog>
  <changelog author="ecsos@opensuse.org" date="1558612800">- update to 2.10.5
  * Core
  - Fix crashes with logrotate signals #6737 (thanks Elias Ohm)
  * API
  - Fix crashes and problems with permission filters from recent
    Namespace introduction #6785 (thanks Elias Ohm) #6874 (backported from 2.11)
  - Reduce log spam with locked connections (real fix is the network stack rewrite in 2.11) #6877
  * Cluster
  - Fix problems with replay log rotation and storage #6932 (thanks Peter Eckel)
  * IDO DB
  - Fix that reload shutdown deactivates hosts and hostgroups (introduced in 2.9) #7157
  * Documentation
  - Improve the REST API chapter: Unix timestamp handling, filters, unify POST requests with filters in the body
  - Better layout for the features chapter, specifically metrics and events
  - Split object types into monitoring, runtime, features
  - Add technical concepts for cluster messages</changelog>
  <changelog author="ecsos@opensuse.org" date="1564488000">- Update to 2.10.6
  * Bugfixes
  - Fix el7 not loading ECDHE cipher suites #7247</changelog>
  <changelog author="ecsos@opensuse.org" date="1568894400">- Update to 2.11.0
  * Core
  - Rewrite Network Stack (cluster, REST API) based on Boost Asio, Beast, Coroutines
  - Technical concept: #7041
  - Requires package updates: Boost &gt;1.66 (either from packages.icinga.com, EPEL or backports). SLES11 &amp; Ubuntu 14 are EOL.
  - Require TLS 1.2 and harden default cipher list
  - Improved Reload Handling (umbrella process, now 3 processes at runtime)
  - Support running Icinga 2 in (Docker) containers natively in foreground
  - Quality: Use Modern JSON for C++ library instead of YAJL (dead project)
  - Quality: Improve handling of invalid UTF8 strings
  * API
  - Fix crashes on Linux, Unix and Windows from Nessus scans #7431
  - Locks and stalled waits are fixed with the core rewrite in #7071
  - schedule-downtime action supports all_services for host downtimes
  - Improve storage handling for runtime created objects in the _api package
  * Cluster
  - HA aware features &amp; improvements for failover handling #2941 #7062
  - Improve cluster config sync with staging #6716
  - Fixed that same downtime/comment objects would be synced again in a cluster loop #7198
  * Checks &amp; Notifications
  - Ensure that notifications during a restart are sent
  - Immediately notify about a problem after leaving a downtime and still NOT-OK
  - Improve reload handling and wait for features/metrics
  - Store notification command results and sync them in HA enabled zones #6722
  * DSL/Configuration
  - Add getenv() function
  - Fix TimePeriod range support over midnight
  - concurrent_checks in the Checker feature has no effect, use the global MaxConcurrentChecks constant instead
  * CLI
  - Permissions: node wizard/setup, feature, api setup now run in the Icinga user context, not root
  - ca list shows pending CSRs by default, ca remove/restore allow to delete signing requests
  * ITL
  - Add new commands and missing attributes
  * Windows
  - Update bundled NSClient++ to 0.5.2.39
  - Refine agent setup wizard &amp; update requirements to .NET 4.6
  * Documentation
  - Service Monitoring: How to create plugins by example, check commands and a modern version of the supported plugin API with best practices
  - Features: Better structure on metrics, and supported features
  - Technical Concepts: TLS Network IO, Cluster Feature HA, Cluster Config Sync
  - Development: Rewritten for better debugging and development experience for contributors including a style guide. Add nightly build setup instructions.
  - Packaging: INSTALL.md was integrated into the Development chapter, being available at https://icinga.com/docs too.</changelog>
  <changelog author="ecsos@opensuse.org" date="1571313600">- Update to 2.11.1
  This release fixes a hidden long lasting bug unveiled with 2.11
  and distributed setups. If you are affected by agents/satellites
  not accepting configuration anymore, or not reloading, please upgrade.
  * Bugfixes
  - Cluster Config Sync
  - Never accept authoritative config markers from other instances #7552
  - This affects setups where agent/satellites are newer than the config master, e.g. satellite/agent=2.11.0, master=2.10.
  - Configuration
  - Error message for command_endpoint should hint that zone is not set #7514
  - Global variable 'ActiveStageOverride' has been set implicitly via 'ActiveStageOverride ... #7521
  * Documentation
  - Docs: Add upgrading/troubleshooting details for repos, config sync, agents #7526
  - Explain repository requirements for 2.11:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#added-boost-166
  - command_endpoint objects require a zone:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#agent-hosts-with-command-endpoint-require-a-zone
  - Zones declared in zones.d are not loaded anymore:
    https://icinga.com/docs/icinga2/latest/doc/16-upgrading-icinga-2/#config-sync-zones-in-zones</changelog>
  <changelog author="ecsos@opensuse.org" date="1571918400">- Update to 2.11.2
  This release fixes a problem where the newly introduced config sync "check-change-then-reload" functionality could cause endless reload loops with agents. The most visible parts are failing command endpoint checks with "not connected" UNKNOWN state. Only applies to HA enabled zones with 2 masters and/or 2 satellites.
  * Bugfixes
  - Cluster Config Sync
  - Config sync checksum change detection may not work within high load HA clusters #7565</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Aloow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916800">- Fix boo#1159869
  Permission error when use the icinga cli wizard.</changelog>
  <changelog author="ecsos@opensuse.org" date="1578916801">- Set minimum require boost version to 1.66</changelog>
  <changelog author="ecsos@opensuse.org" date="1583236800">- Update to 2.11.3
  * Bugfixes
  - Cluster
    Fix JSON-RPC crashes (#7532) in large environments: #7846 #7848 #7849</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1592481600">- Update to 2.11.4
  Version 2.11.4 fixes a crash during a heartbeat timeout with
  clients not yet signed. It also resolves an issue with endpoints
  not reconnecting after a reload/deploy, which caused a lot of
  UNKNOWN states.
  * Bugfixes
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7997
  - Fix endpoints not reconnecting after reload (UNKNOWN hosts/services after reload) #8043
    + Setup
  - Fix exception on trusted cert not readable during node setup #8044
  - prepare-dirs: Only set permissions during directory creation #8046
    + DSL
  - Fix segfault on missing compare function in Array functions (sort, map, reduce, filter, any, all) #8054</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1596628800">- Update to 2.11.5
  Version 2.11.5 fixes file system race conditions
  in the config update process occurring in large HA environments
  and improves the cluster connection liveness mechanisms.
  * Bugfixes
    + Make the config update process mutually exclusive (Prevents file system race conditions) #8093
    + Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #8094
    + Send JsonRpcConnection heartbeat every 20s instead of 10s #8103
    + Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8097</changelog>
  <changelog author="Callum Farmer &lt;callumjfarmer13@gmail.com&gt;" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1600776000">- Update to 2.12.0
  * Breaking changes
  - Deprecate Windows plugins in favor of our
  - PowerShell plugins #8071
  - Deprecate Livestatus #8051
  - Refuse acknowledging an already acknowledged checkable #7695
  - Config lexer: complain on EOF in heredocs, i.e. {{{abc&lt;EOF&gt; #7541
  * Enhancements
    + Core
  - Implement new database backend: Icinga DB #7571
  - Re-send notifications previously suppressed by their time periods #7816
    + API
  - Host/Service: Add acknowledgement_last_change and next_update attributes #7881 #7534
  - Improve error message for POST queries #7681
  - /v1/actions/remove-comment: let users specify themselves #7646
  - /v1/actions/remove-downtime: let users specify themselves #7645
  - /v1/config/stages: Add 'activate' parameter #7535
    + CLI
  - Add pki verify command for better TLS certificate troubleshooting #7843
  - Add OpenSSL version to 'Build' section in --version #7833
  - Improve experience with 'Node Setup for Agents/Satellite' #7835
    + DSL
  - Add get_template() and get_templates() #7632
  - MacroProcessor::ResolveArguments(): skip null argument values #7567
  - Fix crash due to dependency apply rule with ignore_on_error and non-existing parent #7538
  - Introduce ternary operator (x ? y : z) #7442
  - LegacyTimePeriod: support specifying seconds #7439
  - Add support for Lambda Closures (() use(x) =&gt; x and () use(x) =&gt; { return x }) #7417
    + ITL
  - Add notemp parameter to oracle health #7748
  - Add extended checks options to snmp-interface command template #7602
  - Add file age check for Windows command definition #7540
    + Docs
  - Development: Update debugging instructions #7867
  - Add new API clients #7859
  - Clarify CRITICAL vs. UNKNOWN #7665
  - Explicitly explain how to disable freshness checks #7664
  - Update installation for RHEL/CentOS 8 and SLES 15 #7640
  - Add Powershell example to validate the certificate #7603
    + Misc
  - Don't send event::Heartbeat to unauthenticated peers #7747
  - OpenTsdbWriter: Add custom tag support #7357
  * Bugfixes
    + Core
  - Fix JSON-RPC crashes #7532 #7737
  - Fix zone definitions in zones #7546
  - Fix deadlock during start on OpenBSD #7739
  - Consider PENDING not a problem #7685
  - Fix zombie processes after reload #7606
  - Don't wait for checks to finish during reload #7894
    + Cluster
  - Fix segfault during heartbeat timeout with clients not yet signed #7970
  - Make the config update process mutually exclusive (Prevents file system race conditions) #7936
  - Fix check_timeout not being forwarded to agent command endpoints #7861
  - Config sync: Use a more friendly message when configs are equal and don't need a reload #7811
  - Fix open connections when agent waits for CA approval #7686
  - Consider a JsonRpcConnection alive on a single byte of TLS payload, not only on a whole message #7836
  - Send JsonRpcConnection heartbeat every 20s instead of 10s #8102
  - Use JsonRpcConnection heartbeat only to update connection liveness (m_Seen) #8142
  - Fix TLS context not being updated on signed certificate messages on agents #7654
    + API
  - Close connections w/o successful TLS handshakes after 10s #7809
  - Handle permission exceptions soon enough, returning 404 #7528
    + SELinux
  - Fix safe-reload #7858
  - Allow direct SMTP notifications #7749
    + Windows
  - Terminate check processes with UNKNOWN state on timeout #7788
  - Ensure that log replay files are properly renamed #7767
    + Metrics
  - Graphite/OpenTSDB: Ensure that reconnect failure is detected #7765
  - Always send 0 as value for thresholds #7696
    + Scripts
  - Fix notification scripts to stay compatible with Dash #7706
  - Fix bash line continuation in mail-host-notification.sh #7701
  - Fix notification scripts string comparison #7647
  - Service and host mail-notifications: Add line-breaks to very long output #6822
  - Set correct UTF-8 email subject header (RFC1342) #6369
    + Misc
  - DSL: Fix segfault due to passing null as custom function to Array#{sort,map,reduce,filter,any,all}() #8053
  - CLI: pki save-cert: allow to specify --key and --cert for backwards compatibility #7995
  - Catch exception when trusted cert is not readable during node setup on agent/satellite #7838
  - CheckCommand ssl: Fix wrong parameter -N #7741
  - Code quality fixes
  - Small documentation fixes
- Fix boost build error for Tumbleweed.
  - Add patch icinga2-boost-8185-8184.patch
  - Add patch icinga2-boost-8185-8190.patch
  - add patch icinga2-boost-8185-8191.patch</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1602763200">- Update to 2.12.1
  * Bugfixes
    + Core
  - Fix crashes during config update #8348 #8345
  - Fix crash while removing a downtime #8228
  - Ensure the daemon doesn't get killed by logrotate #8170
  - Fix hangup during shutdown #8211
  - Fix a deadlock in Icinga DB #8168
  - Clean up zombie processes during reload #8376
  - Reduce check latency #8276
    + IDO
  - Prevent unnecessary IDO updates #8327 #8320
  - Commit IDO MySQL transactions earlier #8349
  - Make sure to insert IDO program status #8330
  - Improve IDO queue stats logging #8271 #8328 #8379
    + Misc
  - Ensure API connections are closed properly #8293
  - Prevent unnecessary notifications #8299
  - Don't skip null values of command arguments #8174
  - Fix Windows .exe version #8234
  - Reset Icinga check warning after successful config update #8189</changelog>
  <changelog author="ecsos &lt;ecsos@opensuse.org&gt;" date="1603108800">- Info that since version 2.12.0 following security issue is fixed:
  prepare-dirs script allows for symlink attack in the icinga user
  context. boo#1172171 (CVE-2020-14004)</changelog>
</package>
<package pkgid="11a1f2a5eb469c1fa8b6673711c50f39e56bf9b34ab21f8be848c2f2ca711050" name="icu-debuginfo" arch="i586">
  <version epoch="0" ver="65.1" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="6e5739568a1a41e07b927b2b80e6801964ab92907e7681ad9727505d91f87fa2" name="icu-debuginfo" arch="x86_64">
  <version epoch="0" ver="65.1" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="fc93f970a7baa143a285acc90f5d202f6bb2f5769fec3c0f598d49c298f73034" name="icu-debugsource" arch="i586">
  <version epoch="0" ver="65.1" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="a4fe29f7072adbe2b2a5e92e3a3ba7bc1baf92a7623e9b051d4cd64516686b48" name="icu-debugsource" arch="x86_64">
  <version epoch="0" ver="65.1" rel="lp152.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (??). (boo#1112183, bnc#1103893,
    FATE#325570)</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="Cliff Zhao &lt;qzhao@suse.com&gt;" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
</package>
<package pkgid="d5e24b4e5140673c944622d92c8d351794516a059322a41cab81ceb5d85e1481" name="imap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="lp152.6.2.1"/>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1156402])</changelog>
</package>
<package pkgid="05fd0808ed55c89e2f4ebd6cb134035366db082dce1050f992dccbd9cb732f9a" name="imap-debugsource" arch="x86_64">
  <version epoch="0" ver="2007e_suse" rel="lp152.6.2.1"/>
  <changelog author="mskibbe@suse.de" date="1174046400">- fix ports in firewall file</changelog>
  <changelog author="mskibbe@suse.de" date="1199707200">- Bug 351197 - several packages use wrong dir for SuSEfirewall2
  services files</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="chris@computersalat.de" date="1261137600">- update to 2007e which
  o fix bugs
- cleanup spec
  o sort tags
  o {name} macro
- rework patches
  o imap-2002c-c++.diff &gt; imap-2007e-c++.patch
  o imap-2006c1.diff &gt; imap-2007e.patch
- rpmlint
  o deprecated-use-of-%run_ldconfig
  o shlib-policy-name-error
  - renamed sub-pkg 'lib' to 'libc-client2007e_suse'
  o files-duplicate {_includedir}
  - added rpmlintrc</changelog>
  <changelog author="mls@suse.de" date="1386331200">- link libc-client with -lpam (as we link other packages with
  with --as-needed)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455364800">- imap-openssl.patch: Support TLS 1.2 and ECDH ciphersuites.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1457956800">- spec: most C sources need removal of old K&amp;R extern int errno;
  declaration, which does not actually work with glibc where
  errno is a macro that expands to a function call.
- spec: build with -DOPENSSL_NO_DEPRECATED and
  - DOPENSSL_NO_SSL_INTERN to emulate as close as possible
  API/ABI availability of upcoming openSSL releases.
- imap-openssl.patch: remove ephemeral RSA keys support, it is
  considered insecure.openSSL 1.1 no longer supports this feature
  and package will fail to build.
- imap-openssl.patch: remove code that uses insecure tmpnam()
  function, it is not required on linux systems.
- imap-implicit-decls.patch: fix implicit fortify/pointer
  declaration rpmlint warnings.</changelog>
  <changelog author="tchvatal@suse.com" date="1499169600">- Rename README.SuSE to README.SUSE
- Cleanup with spec-cleaner
- Add patches from RH and Debian:
  * imap-2007e-poll.patch
  * imap-2007f-format-security.patch
  * imap-openssl-1.1.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1522065600">- Own %{_sysconfdir}/xinetd.d: filesystem won't own this directory
  much longer (boo#1084457).</changelog>
  <changelog author="pgajdos@suse.com" date="1573473600">- read certificates from /etc/imap/certs
- modified patches
  % imap-2002e-ssl.diff ([bsc#1156402])</changelog>
</package>
<package pkgid="1e77fcced5de512a41e4a4c9f8219daf055c2f9b7a3660f50fe93f61ff5bd279" name="infiniband-diags-debuginfo" arch="i586">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="4bf7cc497011090fa956ec7f0afec4ce25cf5fd1181c46712402cf3800df663e" name="infiniband-diags-debuginfo" arch="x86_64">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="452b8cb32dc289960a38ca08b4b2b582552ec524d2438d9eaa495f69239a4ed4" name="info4-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.13a" rel="lp152.5.3.1"/>
  <changelog author="coolo@suse.com" date="1349524800">- remove prereq on library names</changelog>
  <changelog author="werner@suse.de" date="1353326400">- Be aware that characters of appendix numbering requires a ASCII
  null if used as string (bnc#788574)</changelog>
  <changelog author="werner@suse.de" date="1353412800">- Use latest CVS version for the last patch</changelog>
  <changelog author="schwab@suse.de" date="1360670400">- config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1367841600">- Don't package info.info, already part of emacs-info</changelog>
  <changelog author="davejplater@gmail.com" date="1436702400">- Created texinfo4 package from 0penSUSE:13.2 texinfo poackage to
  enable lilypond's documentation to build again. bnc#936870</changelog>
  <changelog author="schwab@suse.de" date="1542801600">- config-guess-sub-update.patch: remove
- copy config.guess, config.sub from texinfo to texi2html sources</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1542888000">- Update summaries. Remove redundant %clean section. Replace old
  $RPM_* shell vars.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1588852800">- Added links package to help lilypond-doc build use this package.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1597838400">- Remove links sub package and generate links in lilypond build.</changelog>
</package>
<package pkgid="27f68e34856d95bd0409c6135793cdab47c7ae0f0939a88ccf397fdb29d6809b" name="inkscape-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.92.2" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Pass --disable-strict-build to configure: allow to build against
  recent glibmm2 versions with deprecated symbols.</changelog>
  <changelog author="aeszter@gwdg.de" date="1458734400">- Add inkscape-cache-fix.patch: Fix bnc#972343</changelog>
  <changelog author="zaitor@opensuse.org" date="1466769600">- Export -std=c++11 in CXXFLAGS, needed now after removal of patch
  in libsig++ forcing the flag previously. May be removed when
  lp#1488079 is fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add inkscape-appdata.patch to install a translated appdata file;
  patch touches autotools build files, run autoreconf before
  configure.</changelog>
  <changelog author="robby.engelmann@igfs-ev.de" date="1483963200">- update to version 0.92:
  + Mesh Gradients are now supported.
  + Many SVG2 and CSS3 properties are now supported (e.g. paint-order, mix-blend-mode). Not all are available from the GUI.
  + The new Object dialog allows to select, label, hide and lock any object in the drawing from a dialog that lists them all
  + Selection sets make it possible to 'group' objects together regardless of document structure
  + Several new path effects have been added, among them Envelope/Perspective, Lattice Deformation, Mirror and Rotate Copies
  + There are several new extensions (e.g. a seamless pattern extension) and a new filter (colorblindness simulation) included in the release, many old extensions have been updated or got new features
  + Spray tool and measure tool received a set of nifty new features
  + Interactive smoothing for lines created with the Pencil tool
  + BSplines (and more) are available for the Pen tool
  + Checkerboard background can be used to more easily see object transparencies
  + see http://wiki.inkscape.org/wiki/index.php/Release_notes/0.92 for full changelog
- Drop upstream included patches:
  + inkscape-remove-datetime.patch
  + inkscape-cache-fix.patch
  + inkscape-appdata.patch
- Rebased patch
  + inkscape-packages.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="src@posteo.de" date="1487073600">- buildrequire potrace-devel for tracing bitmaps.</changelog>
  <changelog author="mliska@suse.cz" date="1490011200">- Update to version 0.92.1:
  + Text: baseline-spacing related issues with regular and flowed text in legacy Inkscape SVG files (Bug #1655483 and others)
  + Text: Default baseline spacing stored in relative units is always converted to document units (Bug #1645016)
  + Path effects: Crash on ungroup if group contains elements with path effects (Bug #1657591)
  + Clipboard: Pasting a path effect from clipboard fails (Bug #1656093)
  + Clipboard: Fix copy&amp;pasting of groups which contain elements with path effects (Bug #1656527)
  + Selection: Node tool can selected objects on locked layers (Bug #1656141)
  + Clones: Critical warnings with clones and symbols (Bug #1653184)
  + About screen missing for several UI languages (Bug #1659426)
  + Selection: Missing transformation handles after reset of rotation center (Bug #1657874)
  + Bitmap images: Crash when opening files with invalid image links (Bug #1660142)
  + Bitmap images: Fix path separators in relative image links (Windows) (Bug #1659347)
  + File import: Failure to open CDR/Visio/WPG files from paths with special characters (Windows) (Bug #1656763)</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add inkscape-gcc7-buildfix.patch: Fix C++11 errors and warnings
  with g++-7.</changelog>
  <changelog author="plinnell@opensuse.org" date="1502107200">- Update to version 0.92.2:
  + Stability and bug fix release. Several crash bugs fixed.
  + No change log, changes here:
  https://launchpad.net/inkscape/+milestone/0.92.2</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- do not require aspell, require gtkspell [bsc#1052953]</changelog>
  <changelog author="plinnell@opensuse.org" date="1503057600">- drop inkscape-gcc7-buildfix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add inkscape-poppler058-fix.patch: Adapt to poppler 0.58, patch
  from upstream git (lp#1715820).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Rebase inkscape-poppler058-fix.patch: Add yet an upstream commit.</changelog>
  <changelog author="plinnell@opensuse.org" date="1506168001">- Disable IM7 until upstream supports it
- Resolves: https://bugzilla.suse.com/show_bug.cgi?id=1059927</changelog>
  <changelog author="dmueller@suse.com" date="1507550400">- remove env shebang from inkscape extensions subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Add explicit python2-xml BuildRequires: the ./i18n.py script,
  executed during build, imports xml and we are thus responsible to
  have the dependencies in place.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Add patches from upstream (some with slight modifications to apply
  correctly) to adapt to poppler 0.79 (boo#1155596):
  * 0001-Fix-compilation-with-poppler-0.64.patch
  * 0002-Fix-compilation-with-poppler-0.65.patch
  * 0003-Modified-fix-for-compatibility-with-poppler-0.64.patch
  * 0004-fix-1789208-poppler-0.69.patch
  * 0005-fix-poppler-0.71.0-build.patch
  * 0006-fix-poppler-0.72.0-build.patch
  * 0007-Tentative-fix-for-poppler-0.76.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572955200">- Only enable the inkscape-extensions-skencil subpackage in Leap
  and TW since skencil is not available in SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1588766400">- Remove inkscape-extension-skencil completely for Leap 15.2 by now
  (jsc#SLE-12254, bsc#1171258). The extension was built only on
  openSUSE in the past, nowadays:
  * Tumbleweed does not build it since skencil does not support
    python 3.
  * SLE has never built and shipped the extension.
  Hence this submission actually disables the extension on Leap
  15.2 and above to keep it consistent with SLE and TW. The stub
  for packaging the extension is still kept in the spec for future
  needs when we bring skencil back to the release.</changelog>
</package>
<package pkgid="207758ec8d45fd2d19681425a13f9f8f9b6a2365d6665c2e890337a4bf09b056" name="inkscape-debugsource" arch="x86_64">
  <version epoch="0" ver="0.92.2" rel="lp152.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Pass --disable-strict-build to configure: allow to build against
  recent glibmm2 versions with deprecated symbols.</changelog>
  <changelog author="aeszter@gwdg.de" date="1458734400">- Add inkscape-cache-fix.patch: Fix bnc#972343</changelog>
  <changelog author="zaitor@opensuse.org" date="1466769600">- Export -std=c++11 in CXXFLAGS, needed now after removal of patch
  in libsig++ forcing the flag previously. May be removed when
  lp#1488079 is fixed.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add inkscape-appdata.patch to install a translated appdata file;
  patch touches autotools build files, run autoreconf before
  configure.</changelog>
  <changelog author="robby.engelmann@igfs-ev.de" date="1483963200">- update to version 0.92:
  + Mesh Gradients are now supported.
  + Many SVG2 and CSS3 properties are now supported (e.g. paint-order, mix-blend-mode). Not all are available from the GUI.
  + The new Object dialog allows to select, label, hide and lock any object in the drawing from a dialog that lists them all
  + Selection sets make it possible to 'group' objects together regardless of document structure
  + Several new path effects have been added, among them Envelope/Perspective, Lattice Deformation, Mirror and Rotate Copies
  + There are several new extensions (e.g. a seamless pattern extension) and a new filter (colorblindness simulation) included in the release, many old extensions have been updated or got new features
  + Spray tool and measure tool received a set of nifty new features
  + Interactive smoothing for lines created with the Pencil tool
  + BSplines (and more) are available for the Pen tool
  + Checkerboard background can be used to more easily see object transparencies
  + see http://wiki.inkscape.org/wiki/index.php/Release_notes/0.92 for full changelog
- Drop upstream included patches:
  + inkscape-remove-datetime.patch
  + inkscape-cache-fix.patch
  + inkscape-appdata.patch
- Rebased patch
  + inkscape-packages.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="src@posteo.de" date="1487073600">- buildrequire potrace-devel for tracing bitmaps.</changelog>
  <changelog author="mliska@suse.cz" date="1490011200">- Update to version 0.92.1:
  + Text: baseline-spacing related issues with regular and flowed text in legacy Inkscape SVG files (Bug #1655483 and others)
  + Text: Default baseline spacing stored in relative units is always converted to document units (Bug #1645016)
  + Path effects: Crash on ungroup if group contains elements with path effects (Bug #1657591)
  + Clipboard: Pasting a path effect from clipboard fails (Bug #1656093)
  + Clipboard: Fix copy&amp;pasting of groups which contain elements with path effects (Bug #1656527)
  + Selection: Node tool can selected objects on locked layers (Bug #1656141)
  + Clones: Critical warnings with clones and symbols (Bug #1653184)
  + About screen missing for several UI languages (Bug #1659426)
  + Selection: Missing transformation handles after reset of rotation center (Bug #1657874)
  + Bitmap images: Crash when opening files with invalid image links (Bug #1660142)
  + Bitmap images: Fix path separators in relative image links (Windows) (Bug #1659347)
  + File import: Failure to open CDR/Visio/WPG files from paths with special characters (Windows) (Bug #1656763)</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Add inkscape-gcc7-buildfix.patch: Fix C++11 errors and warnings
  with g++-7.</changelog>
  <changelog author="plinnell@opensuse.org" date="1502107200">- Update to version 0.92.2:
  + Stability and bug fix release. Several crash bugs fixed.
  + No change log, changes here:
  https://launchpad.net/inkscape/+milestone/0.92.2</changelog>
  <changelog author="pgajdos@suse.com" date="1502452800">- do not require aspell, require gtkspell [bsc#1052953]</changelog>
  <changelog author="plinnell@opensuse.org" date="1503057600">- drop inkscape-gcc7-buildfix.patch</changelog>
  <changelog author="zaitor@opensuse.org" date="1505476800">- Add inkscape-poppler058-fix.patch: Adapt to poppler 0.58, patch
  from upstream git (lp#1715820).</changelog>
  <changelog author="zaitor@opensuse.org" date="1506168000">- Rebase inkscape-poppler058-fix.patch: Add yet an upstream commit.</changelog>
  <changelog author="plinnell@opensuse.org" date="1506168001">- Disable IM7 until upstream supports it
- Resolves: https://bugzilla.suse.com/show_bug.cgi?id=1059927</changelog>
  <changelog author="dmueller@suse.com" date="1507550400">- remove env shebang from inkscape extensions subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Add explicit python2-xml BuildRequires: the ./i18n.py script,
  executed during build, imports xml and we are thus responsible to
  have the dependencies in place.</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572523200">- Add patches from upstream (some with slight modifications to apply
  correctly) to adapt to poppler 0.79 (boo#1155596):
  * 0001-Fix-compilation-with-poppler-0.64.patch
  * 0002-Fix-compilation-with-poppler-0.65.patch
  * 0003-Modified-fix-for-compatibility-with-poppler-0.64.patch
  * 0004-fix-1789208-poppler-0.69.patch
  * 0005-fix-poppler-0.71.0-build.patch
  * 0006-fix-poppler-0.72.0-build.patch
  * 0007-Tentative-fix-for-poppler-0.76.patch</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1572955200">- Only enable the inkscape-extensions-skencil subpackage in Leap
  and TW since skencil is not available in SLE.</changelog>
  <changelog author="Yifan Jiang &lt;yfjiang@suse.com&gt;" date="1588766400">- Remove inkscape-extension-skencil completely for Leap 15.2 by now
  (jsc#SLE-12254, bsc#1171258). The extension was built only on
  openSUSE in the past, nowadays:
  * Tumbleweed does not build it since skencil does not support
    python 3.
  * SLE has never built and shipped the extension.
  Hence this submission actually disables the extension on Leap
  15.2 and above to keep it consistent with SLE and TW. The stub
  for packaging the extension is still kept in the spec for future
  needs when we bring skencil back to the release.</changelog>
</package>
<package pkgid="68800418b6c0755dffdabe065d4678033bebabbb3386a8888d463b7c6196e0b2" name="inn-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp152.2.3.1"/>
  <changelog author="mls@suse.de" date="1378728000">- make /usr/lib/news/bin owned by root</changelog>
  <changelog author="mls@suse.de" date="1405512000">- update to inn-2.5.4
  * updated control.ctl file
  * improved signature checking in pgpverify
  * new "htmlstatus" config option
  * many bugs fixed
  * removed patches: inn-linereset.diff
  * renamed patches: inn-2.5.2.diff -&gt; inn-2.5.4.diff
- fix innbind file mode
- fix empty history database on 64bit [bnc#876287]</changelog>
  <changelog author="mls@suse.de" date="1418299200">- enable IPv6
- get rid of gpg-offline as we nowadays check signatures in
  the source validator</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms
- updated patches:
  + inn-2.5.4.diff</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Fix tmpfiles.d usage to give it at least a chance to work</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Add directories formerly owned by filesystem
- Require group and user news
- Require group uucp</changelog>
  <changelog author="mls@suse.de" date="1544788800">- update to inn-2.6.2
  * support for compressed newsfeeds
  * many bug fixes and documentation improvements
  * dropped patch: inn-2.5.4.diff
  * new patch: inn-2.6.2.diff
- use native systemd service [#1116017]
  * new file: inn.service</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="mls@suse.de" date="1579867200">- change user to news before touching files in /var/log/news
  [bnc#1154302] [CVE-2019-3692]</changelog>
  <changelog author="mls@suse.de" date="1595592000">- change file owners in /usr/lib/news to root
  [bnc#1172573] [CVE-2020-8026]</changelog>
</package>
<package pkgid="194d6ebbb43f9d3deb260752d371c04837ee0e3b31040c21e3f24691825ec8fa" name="inn-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp152.2.3.1"/>
  <changelog author="mls@suse.de" date="1378728000">- make /usr/lib/news/bin owned by root</changelog>
  <changelog author="mls@suse.de" date="1405512000">- update to inn-2.5.4
  * updated control.ctl file
  * improved signature checking in pgpverify
  * new "htmlstatus" config option
  * many bugs fixed
  * removed patches: inn-linereset.diff
  * renamed patches: inn-2.5.2.diff -&gt; inn-2.5.4.diff
- fix innbind file mode
- fix empty history database on 64bit [bnc#876287]</changelog>
  <changelog author="mls@suse.de" date="1418299200">- enable IPv6
- get rid of gpg-offline as we nowadays check signatures in
  the source validator</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1418472000">- fix bashisms
- updated patches:
  + inn-2.5.4.diff</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Fix tmpfiles.d usage to give it at least a chance to work</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Add directories formerly owned by filesystem
- Require group and user news
- Require group uucp</changelog>
  <changelog author="mls@suse.de" date="1544788800">- update to inn-2.6.2
  * support for compressed newsfeeds
  * many bug fixes and documentation improvements
  * dropped patch: inn-2.5.4.diff
  * new patch: inn-2.6.2.diff
- use native systemd service [#1116017]
  * new file: inn.service</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568116800">- Use -ffat-lto-objects when building static libraries.</changelog>
  <changelog author="mls@suse.de" date="1579867200">- change user to news before touching files in /var/log/news
  [bnc#1154302] [CVE-2019-3692]</changelog>
  <changelog author="mls@suse.de" date="1595592000">- change file owners in /usr/lib/news to root
  [bnc#1172573] [CVE-2020-8026]</changelog>
</package>
<package pkgid="ee0096d618ede03bcc5d49b6e677bddb01f698da402d54d2ab0d3a45379a594d" name="iputils-debuginfo" arch="i586">
  <version epoch="0" ver="s20161105" rel="lp152.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1429531200">- Fix a bogus kernel version check (boo#927831):
  iputils-remove-bogus-check-required-for-2.4.9-kernels.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version s20150815
  * use syntax compatible with busybox date in Makefile
  * Makefile: use #define as in previous code changes
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * tracepath,doc: fix corrupted tag
  * made ping functions protocol independent
  * Allow ping to use IPv6 addresses
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * ping: perform dual-stack ping by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * Use svg instead of png to get better image quality
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
- Update patches
  * iputils-s20101006-ping-interrupt.diff &gt; iputils-ping-interrupt.diff
  * iputils-s20101006-sec-ping-unblock.diff &gt; iputils-sec-ping-unblock.diff
  * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
- Update home project page and download Url
- Remove obsolete %clean section
- Remove UsrMerge process; it has been done for more than two
  openSUSE releases now</changelog>
  <changelog author="mchandras@suse.de" date="1463486400">- Update to version s20160308 (Changes taken from the RELNOTES file)
  * use syntax compatible with busybox date in Makefile
  * 'admin prohibited' should print !X not !S.
  * Makefile: use #define as in previous code changes
  * doc/Makefile: require bash, because we use pushd and popd
  * doc: don't timestamp manpages by default
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * ping: ICMP error replies while errno &lt; 0 is a hard error
  * ping: always use POSIX locale when parsing -i
  * ping: link against libm
  * made ping functions protocol independent
  * ping: perform dual-stack ping by default
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * ping: fix defines and libs in Makefile
  * ping: handle single protocol systems
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * Allow ping to use IPv6 addresses
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * tracepath,doc: fix corrupted tag
  * doc: ping: add missing options and remove ping6
  * ninfod: remove unused variables
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * Fix building with musl
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * Use svg instead of png to get better image quality
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
- Refreshed patches
  * iputils-ping-interrupt.diff
  * iputils-sec-ping-unblock.diff
- Remove ifenslave.c. It has been removed in the linux kernel commit
  b1098bbe1b24("bonding: remove ifenslave.c from kernel source").
  bonding can be done via iproute (netlink)
- dropped iputils-ifenslave.diff
- Append our CFLAGS to the upstream ones instead of overriding them.
- Cleanup old make command since the upstream Makefile does things right
  it seems.
- Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.
- Install utilities to /bin and /sbin until reverse dependencies are
  properly fixed.
- Do not install tftp and traceroute to avoid conflicts with the tftp and
  traceroute packages. Stick to what iputils used to provide in the past.
- Remove iputils-traceroute6-stdint.diff patch since we are not building
  the traceroute* utilities.
- Install tracepath to /usr/bin. (boo#795788)</changelog>
  <changelog author="meissner@suse.com" date="1464091200">- do not install rarpd and rarpd.8 manpage (comes from rarpd rpm currently)</changelog>
  <changelog author="mchandras@suse.de" date="1483444800">- Add ping6 symlink (boo#1017616)</changelog>
  <changelog author="pvorel@suse.cz" date="1504785600">- Update to version s20161105 (Changes taken from the RELNOTES file)
  * ping: eliminate deadcode &amp; simplify
  * ping: do not allow oversized packets to root
  * correctly initialize first hop
  * ping: fix ping -6 -I
  * arping,doc: fix documentation of -I
  * ping: fix error message when getting EACCES from connect()
  * renamed INSTALL to INSTALL.md
  * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
  * ping: Silence GCC warnings when building with -fstrict-aliasing
  * tftpd: Drop supplementary groups for root
  * libgcrypt: fix static linking
  * doc: Inserted a missing word
  * tracepath6: avoid redundant family variable
  * tracepath: borrow everything good from tracepath6
  * tracepath: switch to dual-stack operation
  * tracepath: remove now redundant tracepath6
  * docs: fix parallel build of manpages
  * ping: remove assignments of values that are never read
  * docs: remove references to ping6 and traceroute6
  * ping: work with older kernels that don't support ping sockets
  * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
  * reorder -I option parsing (boo#1057664)
  * ping: also bind the ICMP socket to the specific device
- tracepath6 is now symlink to tracepath.</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1511870400">- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
  now</changelog>
  <changelog author="meissner@suse.com" date="1512043200">- mark ping also verify not caps, as these are changed by the
  permissions package. (bsc#1065835)</changelog>
  <changelog author="mpluskal@suse.com" date="1512820800">- Add systemd service for rarpd</changelog>
  <changelog author="pvorel@suse.cz" date="1512993600">- iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
  (rdisc is in a separate package)</changelog>
  <changelog author="mpluskal@suse.com" date="1512993601">- Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
  was using in.* names is obsolete anyways)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515153600">- Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
  to fix PMTU discovery in ping6. (bsc#1072460)</changelog>
  <changelog author="jcaamano@suse.com" date="1523880000">- Backport license information from upstream (bnc#1082788):
  iputils-add-license-info.diff</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1597752000">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Update iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  (backport 4471ac6 to add changes in header files)
- Use git format for iputils-ping-fix-pmtu-for-ipv6.patch (required by
  %autosetup -p1)
- Use %autosetup -p1</changelog>
</package>
<package pkgid="9f4b11133a0329d46d4120cea33eb0860b7a2fda19ecbfed248bb30dd475640b" name="iputils-debuginfo" arch="x86_64">
  <version epoch="0" ver="s20161105" rel="lp152.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1429531200">- Fix a bogus kernel version check (boo#927831):
  iputils-remove-bogus-check-required-for-2.4.9-kernels.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version s20150815
  * use syntax compatible with busybox date in Makefile
  * Makefile: use #define as in previous code changes
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * tracepath,doc: fix corrupted tag
  * made ping functions protocol independent
  * Allow ping to use IPv6 addresses
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * ping: perform dual-stack ping by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * Use svg instead of png to get better image quality
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
- Update patches
  * iputils-s20101006-ping-interrupt.diff &gt; iputils-ping-interrupt.diff
  * iputils-s20101006-sec-ping-unblock.diff &gt; iputils-sec-ping-unblock.diff
  * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
- Update home project page and download Url
- Remove obsolete %clean section
- Remove UsrMerge process; it has been done for more than two
  openSUSE releases now</changelog>
  <changelog author="mchandras@suse.de" date="1463486400">- Update to version s20160308 (Changes taken from the RELNOTES file)
  * use syntax compatible with busybox date in Makefile
  * 'admin prohibited' should print !X not !S.
  * Makefile: use #define as in previous code changes
  * doc/Makefile: require bash, because we use pushd and popd
  * doc: don't timestamp manpages by default
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * ping: ICMP error replies while errno &lt; 0 is a hard error
  * ping: always use POSIX locale when parsing -i
  * ping: link against libm
  * made ping functions protocol independent
  * ping: perform dual-stack ping by default
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * ping: fix defines and libs in Makefile
  * ping: handle single protocol systems
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * Allow ping to use IPv6 addresses
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * tracepath,doc: fix corrupted tag
  * doc: ping: add missing options and remove ping6
  * ninfod: remove unused variables
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * Fix building with musl
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * Use svg instead of png to get better image quality
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
- Refreshed patches
  * iputils-ping-interrupt.diff
  * iputils-sec-ping-unblock.diff
- Remove ifenslave.c. It has been removed in the linux kernel commit
  b1098bbe1b24("bonding: remove ifenslave.c from kernel source").
  bonding can be done via iproute (netlink)
- dropped iputils-ifenslave.diff
- Append our CFLAGS to the upstream ones instead of overriding them.
- Cleanup old make command since the upstream Makefile does things right
  it seems.
- Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.
- Install utilities to /bin and /sbin until reverse dependencies are
  properly fixed.
- Do not install tftp and traceroute to avoid conflicts with the tftp and
  traceroute packages. Stick to what iputils used to provide in the past.
- Remove iputils-traceroute6-stdint.diff patch since we are not building
  the traceroute* utilities.
- Install tracepath to /usr/bin. (boo#795788)</changelog>
  <changelog author="meissner@suse.com" date="1464091200">- do not install rarpd and rarpd.8 manpage (comes from rarpd rpm currently)</changelog>
  <changelog author="mchandras@suse.de" date="1483444800">- Add ping6 symlink (boo#1017616)</changelog>
  <changelog author="pvorel@suse.cz" date="1504785600">- Update to version s20161105 (Changes taken from the RELNOTES file)
  * ping: eliminate deadcode &amp; simplify
  * ping: do not allow oversized packets to root
  * correctly initialize first hop
  * ping: fix ping -6 -I
  * arping,doc: fix documentation of -I
  * ping: fix error message when getting EACCES from connect()
  * renamed INSTALL to INSTALL.md
  * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
  * ping: Silence GCC warnings when building with -fstrict-aliasing
  * tftpd: Drop supplementary groups for root
  * libgcrypt: fix static linking
  * doc: Inserted a missing word
  * tracepath6: avoid redundant family variable
  * tracepath: borrow everything good from tracepath6
  * tracepath: switch to dual-stack operation
  * tracepath: remove now redundant tracepath6
  * docs: fix parallel build of manpages
  * ping: remove assignments of values that are never read
  * docs: remove references to ping6 and traceroute6
  * ping: work with older kernels that don't support ping sockets
  * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
  * reorder -I option parsing (boo#1057664)
  * ping: also bind the ICMP socket to the specific device
- tracepath6 is now symlink to tracepath.</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1511870400">- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
  now</changelog>
  <changelog author="meissner@suse.com" date="1512043200">- mark ping also verify not caps, as these are changed by the
  permissions package. (bsc#1065835)</changelog>
  <changelog author="mpluskal@suse.com" date="1512820800">- Add systemd service for rarpd</changelog>
  <changelog author="pvorel@suse.cz" date="1512993600">- iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
  (rdisc is in a separate package)</changelog>
  <changelog author="mpluskal@suse.com" date="1512993601">- Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
  was using in.* names is obsolete anyways)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515153600">- Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
  to fix PMTU discovery in ping6. (bsc#1072460)</changelog>
  <changelog author="jcaamano@suse.com" date="1523880000">- Backport license information from upstream (bnc#1082788):
  iputils-add-license-info.diff</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1597752000">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Update iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  (backport 4471ac6 to add changes in header files)
- Use git format for iputils-ping-fix-pmtu-for-ipv6.patch (required by
  %autosetup -p1)
- Use %autosetup -p1</changelog>
</package>
<package pkgid="db606fbc9462209eef9b917a13e0f7a35b4955fd045ba6e1eb805ec14d9b0ac5" name="iputils-debugsource" arch="i586">
  <version epoch="0" ver="s20161105" rel="lp152.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1429531200">- Fix a bogus kernel version check (boo#927831):
  iputils-remove-bogus-check-required-for-2.4.9-kernels.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version s20150815
  * use syntax compatible with busybox date in Makefile
  * Makefile: use #define as in previous code changes
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * tracepath,doc: fix corrupted tag
  * made ping functions protocol independent
  * Allow ping to use IPv6 addresses
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * ping: perform dual-stack ping by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * Use svg instead of png to get better image quality
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
- Update patches
  * iputils-s20101006-ping-interrupt.diff &gt; iputils-ping-interrupt.diff
  * iputils-s20101006-sec-ping-unblock.diff &gt; iputils-sec-ping-unblock.diff
  * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
- Update home project page and download Url
- Remove obsolete %clean section
- Remove UsrMerge process; it has been done for more than two
  openSUSE releases now</changelog>
  <changelog author="mchandras@suse.de" date="1463486400">- Update to version s20160308 (Changes taken from the RELNOTES file)
  * use syntax compatible with busybox date in Makefile
  * 'admin prohibited' should print !X not !S.
  * Makefile: use #define as in previous code changes
  * doc/Makefile: require bash, because we use pushd and popd
  * doc: don't timestamp manpages by default
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * ping: ICMP error replies while errno &lt; 0 is a hard error
  * ping: always use POSIX locale when parsing -i
  * ping: link against libm
  * made ping functions protocol independent
  * ping: perform dual-stack ping by default
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * ping: fix defines and libs in Makefile
  * ping: handle single protocol systems
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * Allow ping to use IPv6 addresses
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * tracepath,doc: fix corrupted tag
  * doc: ping: add missing options and remove ping6
  * ninfod: remove unused variables
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * Fix building with musl
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * Use svg instead of png to get better image quality
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
- Refreshed patches
  * iputils-ping-interrupt.diff
  * iputils-sec-ping-unblock.diff
- Remove ifenslave.c. It has been removed in the linux kernel commit
  b1098bbe1b24("bonding: remove ifenslave.c from kernel source").
  bonding can be done via iproute (netlink)
- dropped iputils-ifenslave.diff
- Append our CFLAGS to the upstream ones instead of overriding them.
- Cleanup old make command since the upstream Makefile does things right
  it seems.
- Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.
- Install utilities to /bin and /sbin until reverse dependencies are
  properly fixed.
- Do not install tftp and traceroute to avoid conflicts with the tftp and
  traceroute packages. Stick to what iputils used to provide in the past.
- Remove iputils-traceroute6-stdint.diff patch since we are not building
  the traceroute* utilities.
- Install tracepath to /usr/bin. (boo#795788)</changelog>
  <changelog author="meissner@suse.com" date="1464091200">- do not install rarpd and rarpd.8 manpage (comes from rarpd rpm currently)</changelog>
  <changelog author="mchandras@suse.de" date="1483444800">- Add ping6 symlink (boo#1017616)</changelog>
  <changelog author="pvorel@suse.cz" date="1504785600">- Update to version s20161105 (Changes taken from the RELNOTES file)
  * ping: eliminate deadcode &amp; simplify
  * ping: do not allow oversized packets to root
  * correctly initialize first hop
  * ping: fix ping -6 -I
  * arping,doc: fix documentation of -I
  * ping: fix error message when getting EACCES from connect()
  * renamed INSTALL to INSTALL.md
  * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
  * ping: Silence GCC warnings when building with -fstrict-aliasing
  * tftpd: Drop supplementary groups for root
  * libgcrypt: fix static linking
  * doc: Inserted a missing word
  * tracepath6: avoid redundant family variable
  * tracepath: borrow everything good from tracepath6
  * tracepath: switch to dual-stack operation
  * tracepath: remove now redundant tracepath6
  * docs: fix parallel build of manpages
  * ping: remove assignments of values that are never read
  * docs: remove references to ping6 and traceroute6
  * ping: work with older kernels that don't support ping sockets
  * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
  * reorder -I option parsing (boo#1057664)
  * ping: also bind the ICMP socket to the specific device
- tracepath6 is now symlink to tracepath.</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1511870400">- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
  now</changelog>
  <changelog author="meissner@suse.com" date="1512043200">- mark ping also verify not caps, as these are changed by the
  permissions package. (bsc#1065835)</changelog>
  <changelog author="mpluskal@suse.com" date="1512820800">- Add systemd service for rarpd</changelog>
  <changelog author="pvorel@suse.cz" date="1512993600">- iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
  (rdisc is in a separate package)</changelog>
  <changelog author="mpluskal@suse.com" date="1512993601">- Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
  was using in.* names is obsolete anyways)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515153600">- Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
  to fix PMTU discovery in ping6. (bsc#1072460)</changelog>
  <changelog author="jcaamano@suse.com" date="1523880000">- Backport license information from upstream (bnc#1082788):
  iputils-add-license-info.diff</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1597752000">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Update iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  (backport 4471ac6 to add changes in header files)
- Use git format for iputils-ping-fix-pmtu-for-ipv6.patch (required by
  %autosetup -p1)
- Use %autosetup -p1</changelog>
</package>
<package pkgid="93a268897a01b9e0b76e3fe3d251b494ab54782de67245db167c49afabd533e8" name="iputils-debugsource" arch="x86_64">
  <version epoch="0" ver="s20161105" rel="lp152.8.3.1"/>
  <changelog author="tiwai@suse.de" date="1429531200">- Fix a bogus kernel version check (boo#927831):
  iputils-remove-bogus-check-required-for-2.4.9-kernels.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1448971200">- Update to version s20150815
  * use syntax compatible with busybox date in Makefile
  * Makefile: use #define as in previous code changes
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * tracepath,doc: fix corrupted tag
  * made ping functions protocol independent
  * Allow ping to use IPv6 addresses
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * ping: perform dual-stack ping by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * Use svg instead of png to get better image quality
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
- Update patches
  * iputils-s20101006-ping-interrupt.diff &gt; iputils-ping-interrupt.diff
  * iputils-s20101006-sec-ping-unblock.diff &gt; iputils-sec-ping-unblock.diff
  * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
- Update home project page and download Url
- Remove obsolete %clean section
- Remove UsrMerge process; it has been done for more than two
  openSUSE releases now</changelog>
  <changelog author="mchandras@suse.de" date="1463486400">- Update to version s20160308 (Changes taken from the RELNOTES file)
  * use syntax compatible with busybox date in Makefile
  * 'admin prohibited' should print !X not !S.
  * Makefile: use #define as in previous code changes
  * doc/Makefile: require bash, because we use pushd and popd
  * doc: don't timestamp manpages by default
  * ping: status() now returns received/transmitted instead of trans/recv
  * ping: don't mess with internals of struct msghdr
  * ping: ICMP error replies while errno &lt; 0 is a hard error
  * ping: always use POSIX locale when parsing -i
  * ping: link against libm
  * made ping functions protocol independent
  * ping: perform dual-stack ping by default
  * ping: remove obsolete preprocessor directives
  * ping: avoid name clashes between IPv4 and IPv6 code
  * ping: merge all ping header files into a single one
  * ping: merge `ping6` command into `ping`
  * ping: refactor ping options
  * ping: refactor ping socket code
  * ping: merge IPv4 and IPv6 `pr_addr()`
  * ping: fix defines and libs in Makefile
  * ping: handle single protocol systems
  * iputils ping/ping6: Add a function to check if a packet is ours
  * ping: Add &lt;linux/types.h&gt; to fix compilation error.
  * ping6: Use GNUTLS API directly for MD5. (v2)
  * ping6: Use libgcrypt instead of gnutls for MD5.
  * Allow ping to use IPv6 addresses
  * ping,ping6 doc: More description on CAP_NET_RAW usage.
  * if IPv4 resolving fails fallback to ping6
  * ping: in usage print the 'ping -6' options as well
  * ping: allow option -4 which forces IPv4
  * combine sock and errno into a single structure
  * This patch allows running ping and ping6 without root privileges on
  * use better names for socket variables
  * tracepath,doc: fix corrupted tag
  * doc: ping: add missing options and remove ping6
  * ninfod: remove unused variables
  * ninfod: Regenerate configure by autoconf-2.69.
  * ninfod: libgcrypt support.
  * Fix building with musl
  * travis.yml: install nettle-dev
  * Allow using nettle instead of libgcrypt for MD5
  * avoid compiler warning caused by snapshot.h
  * make `getaddrinfo()` and `getnameinfo()` usage consistent
  * enable IDN by default
  * remove IPV4_TARGETS and IPV6_TARGETS
  * Use svg instead of png to get better image quality
  * spec: Configure before building ninfod.
  * spec: Fix date in %changelog.
  * make,spec: Add rpm target.
- Refreshed patches
  * iputils-ping-interrupt.diff
  * iputils-sec-ping-unblock.diff
- Remove ifenslave.c. It has been removed in the linux kernel commit
  b1098bbe1b24("bonding: remove ifenslave.c from kernel source").
  bonding can be done via iproute (netlink)
- dropped iputils-ifenslave.diff
- Append our CFLAGS to the upstream ones instead of overriding them.
- Cleanup old make command since the upstream Makefile does things right
  it seems.
- Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.
- Install utilities to /bin and /sbin until reverse dependencies are
  properly fixed.
- Do not install tftp and traceroute to avoid conflicts with the tftp and
  traceroute packages. Stick to what iputils used to provide in the past.
- Remove iputils-traceroute6-stdint.diff patch since we are not building
  the traceroute* utilities.
- Install tracepath to /usr/bin. (boo#795788)</changelog>
  <changelog author="meissner@suse.com" date="1464091200">- do not install rarpd and rarpd.8 manpage (comes from rarpd rpm currently)</changelog>
  <changelog author="mchandras@suse.de" date="1483444800">- Add ping6 symlink (boo#1017616)</changelog>
  <changelog author="pvorel@suse.cz" date="1504785600">- Update to version s20161105 (Changes taken from the RELNOTES file)
  * ping: eliminate deadcode &amp; simplify
  * ping: do not allow oversized packets to root
  * correctly initialize first hop
  * ping: fix ping -6 -I
  * arping,doc: fix documentation of -I
  * ping: fix error message when getting EACCES from connect()
  * renamed INSTALL to INSTALL.md
  * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
  * ping: Silence GCC warnings when building with -fstrict-aliasing
  * tftpd: Drop supplementary groups for root
  * libgcrypt: fix static linking
  * doc: Inserted a missing word
  * tracepath6: avoid redundant family variable
  * tracepath: borrow everything good from tracepath6
  * tracepath: switch to dual-stack operation
  * tracepath: remove now redundant tracepath6
  * docs: fix parallel build of manpages
  * ping: remove assignments of values that are never read
  * docs: remove references to ping6 and traceroute6
  * ping: work with older kernels that don't support ping sockets
  * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
  * reorder -I option parsing (boo#1057664)
  * ping: also bind the ICMP socket to the specific device
- tracepath6 is now symlink to tracepath.</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Cleanup with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1511870400">- Reintroduce rarpd as subpackage
- Explicitly list content in filelist as we have two subpackages
  now</changelog>
  <changelog author="meissner@suse.com" date="1512043200">- mark ping also verify not caps, as these are changed by the
  permissions package. (bsc#1065835)</changelog>
  <changelog author="mpluskal@suse.com" date="1512820800">- Add systemd service for rarpd</changelog>
  <changelog author="pvorel@suse.cz" date="1512993600">- iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
  (rdisc is in a separate package)</changelog>
  <changelog author="mpluskal@suse.com" date="1512993601">- Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
  was using in.* names is obsolete anyways)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1515153600">- Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
  to fix PMTU discovery in ping6. (bsc#1072460)</changelog>
  <changelog author="jcaamano@suse.com" date="1523880000">- Backport license information from upstream (bnc#1082788):
  iputils-add-license-info.diff</changelog>
  <changelog author="Petr Vorel &lt;pvorel@suse.cz&gt;" date="1597752000">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Update iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  (backport 4471ac6 to add changes in header files)
- Use git format for iputils-ping-fix-pmtu-for-ipv6.patch (required by
  %autosetup -p1)
- Use %autosetup -p1</changelog>
</package>
<package pkgid="3ecb73bb41886f425c482fc814459c79c7bc8ba0defea13c9883900bcc07812e" name="irqbalance-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422014400">- Update to version 1.0.8
  * No ChangeLog available
- Fix home page and download source Url
- Update bug-893478_warn-once.patch; (submitted and accepted to/by
  upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Clenup spec file with spec-cleaner
- Remove bug-893478_warn-once.patch
- Update to 1.0.9
  * PCI quirk support
  * System Logging compatibility
  * isolcpus inheritance
  * Misc. Bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1447070400">- enable build for %arm</changelog>
  <changelog author="mbrugger@suse.com" date="1447761600">- enable build for aarch64</changelog>
  <changelog author="mbrugger@suse.com" date="1447848000">- Only exclude arch s390 and s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.1.0
  * Banning support fixes
  * Load calculation improvements
  * Documentation fixes
  * Fix command line preservation across re-scan
  * Memory leak fixes
  * Misc. bug fixes
  * ARM irq support
  * New --banmod option
  * New sleep interval option</changelog>
  <changelog author="schwab@suse.de" date="1456228800">- fix-aarch64-support.patch: Fix AArch64 support</changelog>
  <changelog author="msuchanek@suse.com" date="1476446400">- Set-fd-limit.patch: Increase limit on file descriptors (bsc#998399) (fate#321645)</changelog>
  <changelog author="dmueller@suse.com" date="1484222400">- update to 1.2.0:
  * sort_irq logic rework to fix unintended ordering
  * removal of the affinity_hint infrastructure as its not needed
  * fixes for invalid cpumask parsing
  * many other minior fixes (see git log)
  * Aarch64 support
  * live interactive monitoring of irqbalance and live adjustment with irqbalance-ui
- remove fix-aarch64-support.patch: upstreamed
- add install-man-pages.patch
- add aarch64-compile-fixes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Switch to ncurses6: use ncurses6-config to find the correct
  CFLAGS and libraries (boo#1021328).</changelog>
  <changelog author="fschnizlein@suse.com" date="1488369600">- Remove superfluous comment out man package packing</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="egotthold@suse.com" date="1538395200">- Removed aarch64-compile-fixes.patch because it is mainline now.
- Update to version 1.4.0:
  * Fixed an erroneous calculation of min_load that restricted candidates to a
    subset of objects
  * Fixed powerpc hotplug detection
  * Cleaned up syslog target dependency
  * Added some self test infrastructure (via make check)
- Update to version 1.3.0
  * New features in this release:
    optimization of platform device irq detection
    Added sample udev rules to trigger irq rescans on device add/remove
    Made irqbalance ui an optional compile component
    Added support for Intel CoD
    Add -v | --version option to command line
  * Bug fixes in this release:
    Misc compiler warning fixes and spelling errors
    Compilation error fix on aarch64
    Compilation error fix when using clang in c99 mode
    Unused variable cleanup
    Lots of memory leak cleanup in irqbalance-ui
    Prevent irqbalance from running in a container
    Fix irq affinity assignment in some cases to wrong numa node
    Fix oneshot mode
    exclude legacy irq 255
  * Deprecations:
    without-glib2 is removed, we just need it enough that we can't dummy it up
    anymore</changelog>
  <changelog author="trenn@suse.de" date="1538654400">- Allow compilation with SLE-12 and before by:
  * removing -std=C99 Latest compiler version does not complain
  anymore, SLE12 SPx and before did.
  * Fix a possible buffer overflow compiler warning
  A fix_buffer_overflow_compiler.patch</changelog>
  <changelog author="ohering@suse.de" date="1572004800">- In HyperV VMs all NVME MSI interrupts are set to unmanaged to
  compensate the lack of matrix.c in pre-v4.20 kernels.
  Irqbalanced is supposed to spread the load. (bsc#1119461, bsc#1154905, bsc#1138190)
  Performance can be improved further with --hintpolicy=subset
- add 0001-Revert-remove-affinity_hint-infrastructure.patch
- add set-numa-node.patch
- add 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="ohering@suse.de" date="1573732800">- Revert previous changes for kernel 5.3+
- remove 0001-Revert-remove-affinity_hint-infrastructure.patch
- remove set-numa-node.patch
- remove 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1614859200">- Due to a bug in irqbalance's parsing of /sys/devices/system/cpu/cpu*/node*
  entries, all CPUs is considered to be on NUMA node 0. Backport fix for
  ambiguous parsing of *node* entries in /sys from upstream to fix this issue.
  (bsc#1156315, bsc#1182254)
- add fix-ambiguous-parsing-of-node-entries-in-sys.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615291200">- Correctly detect the NUMA node of non-PCI devices.
  (bsc#1156315 bsc#1183157)
- add also-fetch-node-info-for-non-PCI-devices.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615550400">- Adapt also-fetch-node-info-for-non-PCI-devices.patch to v1.4.0, and
  backport process_one_line() and get_int() which is required for it
  to work.</changelog>
</package>
<package pkgid="526b7a35e7803b6f7d77e3220bb642db66cc59113130c97cf98eea8e68daf868" name="irqbalance-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp152.4.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422014400">- Update to version 1.0.8
  * No ChangeLog available
- Fix home page and download source Url
- Update bug-893478_warn-once.patch; (submitted and accepted to/by
  upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Clenup spec file with spec-cleaner
- Remove bug-893478_warn-once.patch
- Update to 1.0.9
  * PCI quirk support
  * System Logging compatibility
  * isolcpus inheritance
  * Misc. Bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1447070400">- enable build for %arm</changelog>
  <changelog author="mbrugger@suse.com" date="1447761600">- enable build for aarch64</changelog>
  <changelog author="mbrugger@suse.com" date="1447848000">- Only exclude arch s390 and s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.1.0
  * Banning support fixes
  * Load calculation improvements
  * Documentation fixes
  * Fix command line preservation across re-scan
  * Memory leak fixes
  * Misc. bug fixes
  * ARM irq support
  * New --banmod option
  * New sleep interval option</changelog>
  <changelog author="schwab@suse.de" date="1456228800">- fix-aarch64-support.patch: Fix AArch64 support</changelog>
  <changelog author="msuchanek@suse.com" date="1476446400">- Set-fd-limit.patch: Increase limit on file descriptors (bsc#998399) (fate#321645)</changelog>
  <changelog author="dmueller@suse.com" date="1484222400">- update to 1.2.0:
  * sort_irq logic rework to fix unintended ordering
  * removal of the affinity_hint infrastructure as its not needed
  * fixes for invalid cpumask parsing
  * many other minior fixes (see git log)
  * Aarch64 support
  * live interactive monitoring of irqbalance and live adjustment with irqbalance-ui
- remove fix-aarch64-support.patch: upstreamed
- add install-man-pages.patch
- add aarch64-compile-fixes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Switch to ncurses6: use ncurses6-config to find the correct
  CFLAGS and libraries (boo#1021328).</changelog>
  <changelog author="fschnizlein@suse.com" date="1488369600">- Remove superfluous comment out man package packing</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="egotthold@suse.com" date="1538395200">- Removed aarch64-compile-fixes.patch because it is mainline now.
- Update to version 1.4.0:
  * Fixed an erroneous calculation of min_load that restricted candidates to a
    subset of objects
  * Fixed powerpc hotplug detection
  * Cleaned up syslog target dependency
  * Added some self test infrastructure (via make check)
- Update to version 1.3.0
  * New features in this release:
    optimization of platform device irq detection
    Added sample udev rules to trigger irq rescans on device add/remove
    Made irqbalance ui an optional compile component
    Added support for Intel CoD
    Add -v | --version option to command line
  * Bug fixes in this release:
    Misc compiler warning fixes and spelling errors
    Compilation error fix on aarch64
    Compilation error fix when using clang in c99 mode
    Unused variable cleanup
    Lots of memory leak cleanup in irqbalance-ui
    Prevent irqbalance from running in a container
    Fix irq affinity assignment in some cases to wrong numa node
    Fix oneshot mode
    exclude legacy irq 255
  * Deprecations:
    without-glib2 is removed, we just need it enough that we can't dummy it up
    anymore</changelog>
  <changelog author="trenn@suse.de" date="1538654400">- Allow compilation with SLE-12 and before by:
  * removing -std=C99 Latest compiler version does not complain
  anymore, SLE12 SPx and before did.
  * Fix a possible buffer overflow compiler warning
  A fix_buffer_overflow_compiler.patch</changelog>
  <changelog author="ohering@suse.de" date="1572004800">- In HyperV VMs all NVME MSI interrupts are set to unmanaged to
  compensate the lack of matrix.c in pre-v4.20 kernels.
  Irqbalanced is supposed to spread the load. (bsc#1119461, bsc#1154905, bsc#1138190)
  Performance can be improved further with --hintpolicy=subset
- add 0001-Revert-remove-affinity_hint-infrastructure.patch
- add set-numa-node.patch
- add 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="ohering@suse.de" date="1573732800">- Revert previous changes for kernel 5.3+
- remove 0001-Revert-remove-affinity_hint-infrastructure.patch
- remove set-numa-node.patch
- remove 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1614859200">- Due to a bug in irqbalance's parsing of /sys/devices/system/cpu/cpu*/node*
  entries, all CPUs is considered to be on NUMA node 0. Backport fix for
  ambiguous parsing of *node* entries in /sys from upstream to fix this issue.
  (bsc#1156315, bsc#1182254)
- add fix-ambiguous-parsing-of-node-entries-in-sys.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615291200">- Correctly detect the NUMA node of non-PCI devices.
  (bsc#1156315 bsc#1183157)
- add also-fetch-node-info-for-non-PCI-devices.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615550400">- Adapt also-fetch-node-info-for-non-PCI-devices.patch to v1.4.0, and
  backport process_one_line() and get_int() which is required for it
  to work.</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1617278400">- not balancing interrupts in Xen guests (bsc#1178477, bsc#1183405)
  A procinterrupts-check-xen-dyn-event-more-flexible.patch</changelog>
</package>
<package pkgid="6260e0c2926018b668fbb43ee2df259db7d80c70843bed366a41ebea6428eadc" name="irqbalance-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp152.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1422014400">- Update to version 1.0.8
  * No ChangeLog available
- Fix home page and download source Url
- Update bug-893478_warn-once.patch; (submitted and accepted to/by
  upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Clenup spec file with spec-cleaner
- Remove bug-893478_warn-once.patch
- Update to 1.0.9
  * PCI quirk support
  * System Logging compatibility
  * isolcpus inheritance
  * Misc. Bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1447070400">- enable build for %arm</changelog>
  <changelog author="mbrugger@suse.com" date="1447761600">- enable build for aarch64</changelog>
  <changelog author="mbrugger@suse.com" date="1447848000">- Only exclude arch s390 and s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.1.0
  * Banning support fixes
  * Load calculation improvements
  * Documentation fixes
  * Fix command line preservation across re-scan
  * Memory leak fixes
  * Misc. bug fixes
  * ARM irq support
  * New --banmod option
  * New sleep interval option</changelog>
  <changelog author="schwab@suse.de" date="1456228800">- fix-aarch64-support.patch: Fix AArch64 support</changelog>
  <changelog author="msuchanek@suse.com" date="1476446400">- Set-fd-limit.patch: Increase limit on file descriptors (bsc#998399) (fate#321645)</changelog>
  <changelog author="dmueller@suse.com" date="1484222400">- update to 1.2.0:
  * sort_irq logic rework to fix unintended ordering
  * removal of the affinity_hint infrastructure as its not needed
  * fixes for invalid cpumask parsing
  * many other minior fixes (see git log)
  * Aarch64 support
  * live interactive monitoring of irqbalance and live adjustment with irqbalance-ui
- remove fix-aarch64-support.patch: upstreamed
- add install-man-pages.patch
- add aarch64-compile-fixes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Switch to ncurses6: use ncurses6-config to find the correct
  CFLAGS and libraries (boo#1021328).</changelog>
  <changelog author="fschnizlein@suse.com" date="1488369600">- Remove superfluous comment out man package packing</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="egotthold@suse.com" date="1538395200">- Removed aarch64-compile-fixes.patch because it is mainline now.
- Update to version 1.4.0:
  * Fixed an erroneous calculation of min_load that restricted candidates to a
    subset of objects
  * Fixed powerpc hotplug detection
  * Cleaned up syslog target dependency
  * Added some self test infrastructure (via make check)
- Update to version 1.3.0
  * New features in this release:
    optimization of platform device irq detection
    Added sample udev rules to trigger irq rescans on device add/remove
    Made irqbalance ui an optional compile component
    Added support for Intel CoD
    Add -v | --version option to command line
  * Bug fixes in this release:
    Misc compiler warning fixes and spelling errors
    Compilation error fix on aarch64
    Compilation error fix when using clang in c99 mode
    Unused variable cleanup
    Lots of memory leak cleanup in irqbalance-ui
    Prevent irqbalance from running in a container
    Fix irq affinity assignment in some cases to wrong numa node
    Fix oneshot mode
    exclude legacy irq 255
  * Deprecations:
    without-glib2 is removed, we just need it enough that we can't dummy it up
    anymore</changelog>
  <changelog author="trenn@suse.de" date="1538654400">- Allow compilation with SLE-12 and before by:
  * removing -std=C99 Latest compiler version does not complain
  anymore, SLE12 SPx and before did.
  * Fix a possible buffer overflow compiler warning
  A fix_buffer_overflow_compiler.patch</changelog>
  <changelog author="ohering@suse.de" date="1572004800">- In HyperV VMs all NVME MSI interrupts are set to unmanaged to
  compensate the lack of matrix.c in pre-v4.20 kernels.
  Irqbalanced is supposed to spread the load. (bsc#1119461, bsc#1154905, bsc#1138190)
  Performance can be improved further with --hintpolicy=subset
- add 0001-Revert-remove-affinity_hint-infrastructure.patch
- add set-numa-node.patch
- add 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="ohering@suse.de" date="1573732800">- Revert previous changes for kernel 5.3+
- remove 0001-Revert-remove-affinity_hint-infrastructure.patch
- remove set-numa-node.patch
- remove 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1614859200">- Due to a bug in irqbalance's parsing of /sys/devices/system/cpu/cpu*/node*
  entries, all CPUs is considered to be on NUMA node 0. Backport fix for
  ambiguous parsing of *node* entries in /sys from upstream to fix this issue.
  (bsc#1156315, bsc#1182254)
- add fix-ambiguous-parsing-of-node-entries-in-sys.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615291200">- Correctly detect the NUMA node of non-PCI devices.
  (bsc#1156315 bsc#1183157)
- add also-fetch-node-info-for-non-PCI-devices.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615550400">- Adapt also-fetch-node-info-for-non-PCI-devices.patch to v1.4.0, and
  backport process_one_line() and get_int() which is required for it
  to work.</changelog>
</package>
<package pkgid="0357a4245037ffdb4e20d3449848012d7e22c2681f6e3405f122870b628c1259" name="irqbalance-debugsource" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="lp152.4.6.1"/>
  <changelog author="p.drouand@gmail.com" date="1422014400">- Update to version 1.0.8
  * No ChangeLog available
- Fix home page and download source Url
- Update bug-893478_warn-once.patch; (submitted and accepted to/by
  upstream)</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Clenup spec file with spec-cleaner
- Remove bug-893478_warn-once.patch
- Update to 1.0.9
  * PCI quirk support
  * System Logging compatibility
  * isolcpus inheritance
  * Misc. Bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1447070400">- enable build for %arm</changelog>
  <changelog author="mbrugger@suse.com" date="1447761600">- enable build for aarch64</changelog>
  <changelog author="mbrugger@suse.com" date="1447848000">- Only exclude arch s390 and s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 1.1.0
  * Banning support fixes
  * Load calculation improvements
  * Documentation fixes
  * Fix command line preservation across re-scan
  * Memory leak fixes
  * Misc. bug fixes
  * ARM irq support
  * New --banmod option
  * New sleep interval option</changelog>
  <changelog author="schwab@suse.de" date="1456228800">- fix-aarch64-support.patch: Fix AArch64 support</changelog>
  <changelog author="msuchanek@suse.com" date="1476446400">- Set-fd-limit.patch: Increase limit on file descriptors (bsc#998399) (fate#321645)</changelog>
  <changelog author="dmueller@suse.com" date="1484222400">- update to 1.2.0:
  * sort_irq logic rework to fix unintended ordering
  * removal of the affinity_hint infrastructure as its not needed
  * fixes for invalid cpumask parsing
  * many other minior fixes (see git log)
  * Aarch64 support
  * live interactive monitoring of irqbalance and live adjustment with irqbalance-ui
- remove fix-aarch64-support.patch: upstreamed
- add install-man-pages.patch
- add aarch64-compile-fixes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Switch to ncurses6: use ncurses6-config to find the correct
  CFLAGS and libraries (boo#1021328).</changelog>
  <changelog author="fschnizlein@suse.com" date="1488369600">- Remove superfluous comment out man package packing</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="egotthold@suse.com" date="1538395200">- Removed aarch64-compile-fixes.patch because it is mainline now.
- Update to version 1.4.0:
  * Fixed an erroneous calculation of min_load that restricted candidates to a
    subset of objects
  * Fixed powerpc hotplug detection
  * Cleaned up syslog target dependency
  * Added some self test infrastructure (via make check)
- Update to version 1.3.0
  * New features in this release:
    optimization of platform device irq detection
    Added sample udev rules to trigger irq rescans on device add/remove
    Made irqbalance ui an optional compile component
    Added support for Intel CoD
    Add -v | --version option to command line
  * Bug fixes in this release:
    Misc compiler warning fixes and spelling errors
    Compilation error fix on aarch64
    Compilation error fix when using clang in c99 mode
    Unused variable cleanup
    Lots of memory leak cleanup in irqbalance-ui
    Prevent irqbalance from running in a container
    Fix irq affinity assignment in some cases to wrong numa node
    Fix oneshot mode
    exclude legacy irq 255
  * Deprecations:
    without-glib2 is removed, we just need it enough that we can't dummy it up
    anymore</changelog>
  <changelog author="trenn@suse.de" date="1538654400">- Allow compilation with SLE-12 and before by:
  * removing -std=C99 Latest compiler version does not complain
  anymore, SLE12 SPx and before did.
  * Fix a possible buffer overflow compiler warning
  A fix_buffer_overflow_compiler.patch</changelog>
  <changelog author="ohering@suse.de" date="1572004800">- In HyperV VMs all NVME MSI interrupts are set to unmanaged to
  compensate the lack of matrix.c in pre-v4.20 kernels.
  Irqbalanced is supposed to spread the load. (bsc#1119461, bsc#1154905, bsc#1138190)
  Performance can be improved further with --hintpolicy=subset
- add 0001-Revert-remove-affinity_hint-infrastructure.patch
- add set-numa-node.patch
- add 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="ohering@suse.de" date="1573732800">- Revert previous changes for kernel 5.3+
- remove 0001-Revert-remove-affinity_hint-infrastructure.patch
- remove set-numa-node.patch
- remove 0001-Revert-Types-clean-out-unused-variables-from-irq_inf.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1614859200">- Due to a bug in irqbalance's parsing of /sys/devices/system/cpu/cpu*/node*
  entries, all CPUs is considered to be on NUMA node 0. Backport fix for
  ambiguous parsing of *node* entries in /sys from upstream to fix this issue.
  (bsc#1156315, bsc#1182254)
- add fix-ambiguous-parsing-of-node-entries-in-sys.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615291200">- Correctly detect the NUMA node of non-PCI devices.
  (bsc#1156315 bsc#1183157)
- add also-fetch-node-info-for-non-PCI-devices.patch</changelog>
  <changelog author="Shung-Hsi Yu &lt;shung-hsi.yu@suse.com&gt;" date="1615550400">- Adapt also-fetch-node-info-for-non-PCI-devices.patch to v1.4.0, and
  backport process_one_line() and get_int() which is required for it
  to work.</changelog>
  <changelog author="Thomas Renninger &lt;trenn@suse.de&gt;" date="1617278400">- not balancing interrupts in Xen guests (bsc#1178477, bsc#1183405)
  A procinterrupts-check-xen-dyn-event-more-flexible.patch</changelog>
</package>
<package pkgid="ee3351b26e386cb9872966940c422315fba6d061c0c907351e5c1060a30e6cbb" name="irssi-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp152.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1474459200">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549368000">- Trim filler wording from description.</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1549886400">- update to 1.2.0
  * Improved the /STATUSBAR commands (#858)
  * /SET no longer shows `=' between setting and value (#886)
  * /CUBES removed from default config (available as script)
    (#956)
  * /1 /2 /3 ... removed from default config (available as new
    setting window_number_commands) (#958)
  * Always redraw the screen on resize. By David Phillips (#896)
  * Private notices intended for channels are now displayed on
    the channel (new setting notice_channel_context) (#959)
  + Imported the "Off-the-record" module into Irssi tree (#854,
    [#589], #196)
  + Initial support for sideways split windows (#697, #431,
    [#224], #807, FS#310, #947, #955, #989)
  + Change the implementation of `wcwidth'. This is used to
    calculate the width of emojis on your terminal screen (#917,
    [#720])
  + Make the wcwidth functions available from Perl (#973):
    string_width(str)
    string_chars_for_width(str, width)
    wcwidth(char)
  + Added completion_keep_word setting (#979)
  + Allow activity_hide_targets to hide activity in itemless
    windows (#967, #997, #1001, #1003)
  + Added activity_hide_visible setting (#990)
  + Allow hiding of lines through the /IGNORE system (#901,
    [#900], #892, #890, #884, #937)
  + Add window_default_hidelevel setting. By Doug Freed (#941)
  + Add activity_hide_window_hidelevel setting, defaulting to ON
    (#938)
  + Add autolog_only_saved_channels setting, to autolog only
    channels that are in the config (#968)
  + Add format support for the input line. By Ben Paxton,
    originally by Jonas Hurrelmann (#764, FS#621, #1004)
    use Irssi::TextUI;
    gui_input_set_extent(pos, text)
    gui_input_set_extents(pos, len, left, right)
    gui_input_clear_extents(pos, len)
    gui_input_get_extent(pos)
    gui_input_get_text_and_extents()
    gui_input_set_text_and_extents(...)
  + Parsing of IRCv3 CAP 3.2 (#775, #869)
  + Show CAP-related events in the user interface (#918, #916,
    [#870], #704)
  + Continue using separators when addressing multiple nicks
    with tab completion. By Manish Goregaokar (#822)
  + Bind Shift-tab by default. By Niklas Luokkala (#830, #829)
  + Fuzzing more things (#913, #780, #813)
  - Disconnect SASL properly in case the SASL module got
    unloaded from server (#931, #629, #618, #616)
  - Fix backward completion jumping to the first instead of last
    word (#979)
  - Improve empty topic handling (#961, #905, #911, #897, #888)
  - Prevent config truncation when no space left. By dequis and
    Lukas Waymann (#922, #925, #910, #909, #906, #871, #817)
  - Also time-out servers in lookup phase (#866, #130)
  - Fix build with LibreSSL 2.7. By Dorian Harmans (#865)
  - Fix a crash when appending to a textbuffer without
    line. Reported by Jari Matilainen (#862)
  - Fix segfault on sending large messages (#803, #796, #802)
  - Fix segfault on invalid statusbar config (#993, #994)
  - Fix random memory writes on restoring queries of foreign
    protocols (#999, #1000)
  - Make default keybinds deletable (#859, #507)
  - Fix freeze when resizing Irssi very small (#946)
  - Compare channels case-insensitively, avoiding confusions
    with the config file (#857, #856)
  - Fix DCC GET on Android. By Martin Staron (#844)
  - Improve rawlog performance (#957)
  - Fix nick escaping erroneously escaping quotes (#978, #974,
    [#709])
  - Protect against theme recursion, improve padding
    performance, limit alignment padding. Credit to Oss-Fuzz
    (#835, #851, #850, #846, #848)
  - Fix recursive loop in replaces (#833, GL#23)
  - Fix headers for compilation of C modules (#939)
  - Documentation. By Zero King (#814). (#852)
  - Sync NEWS, docs, scripts (#849, #855)
  - Build system (#868, #867, #985, #988)
  - Fix build on IBM i and AIX. By Calvin Buckley (#975)
  - Misc fixes (#840, #839, #843, #953, #962). Tests (#806,
    [#875], #905, #964, #1011). Fuzzing (#929).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561723200">- update to 1.2.1
  ! Contains all changes from 1.1.3
  ! Contains all changes from 1.0.8
  - Fix a test on big endian machines (#1014)
  - Fix the compile time conditionality of wcwidth
    implementation (#1019, gentoo#677804, #720)
  - Fix /save no longer working on old Solaris (pre
    POSIX.1-2008) (#1042, #1043)
  - Fix regression of #764 where display of 8-bit (legacy
    encoding) in the input prompt was broken (#1018,
    [#1057]). Initial patch by ????? ???????
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1567080000">- update to 1.2.2
  - Fix a use after free issue when receiving IRCv3 CAP
    information from the server (GL#34) CVE-2019-15717
  - Fix a crash during startup when windows weren't fully
    initialised yet (#1114, bdo#935813)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1588075200">- added glib-2-63.patch:
  - Backport a fix that froze Irssi on GLib &gt;2.62 when typing
    Ctrl+Space (#1180, #1183)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1617969600">- update to 1.2.3 (boo#1184848)
  - Fix the compilation of utf8proc (#1021)
  - Fix wrong call to free. By Zero King (#1076)
  - Fix a colour reset in true colour themes when encountering
    mIRC colours (#1059)
  - Fix memory leak on malformed CAP requests (#1120)
  - Fix an erroneous free of SASL data. Credit to Oss-Fuzz (#1128,
    [#1130])
  - Re-set the TLS flag when reconnecting (#1027, #1134)
  - Fix the scrollback getting stuck after /clear (#1115, #1136)
  - Fix the input of Ctrl+C as the first character (#1153,  #1154)
  - Fix crash on quit during unloading of modules on certain
    platforms (#1167)
  - Fix Irssi freezing input after Ctrl+Space on GLib &gt;2.62 (#1180,
    [#1183])
  - Fix layout of IDCHANs. By Lauri Tirkkonen (#1197)
  - Fix crash when server got reconnected before it was properly
    connected (#1210, #1211)
  - Fix multiple identical active caps (#1249)
  - Minor help corrections (#1156, #1213, #1214, #1255)
  - Remove erroneous colour in the colorless theme. Reported and
    fixed by Nutchanon Wetchasit (#1220, #1221)
  - Fix invalid bounds calculation when editing the text
    entry. Found and fixed by Sergey Valentey (#1269)
  - Fix passing of negative size in buffer writes. Found and
    fixed by Sergey Valentey (#1270)
  - Fix Irssi freezing on slow hardware and fast DCC transfers (#159,
    [#1271])
  - Fix compilation on Solaris (#1291)
  - Fix null pointer dereference when receiving broken JOIN
    record. Credit to Oss-Fuzz (#1292)
  - Fix crash on /connect to some sockets (#1239, #1298)
  - Fix Irssi rendering on Apple ARM. By Misty De Méo (#1267,
    [#1268], #1290)
  - Fix crash on /lastlog with broken lines (#1281, #1299)
  - Fix memory leak when receiving bogus SASL authentication
    data. Found and fixed by Sergey Valentey (#1293)</changelog>
</package>
<package pkgid="e51c4d5644eb8529423419f026d4afed167f5b3d88e16df9c35e66a80a611cba" name="irssi-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.3" rel="lp152.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1474459200">- disable PIE on sle11</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- irssi-0.8.20-buf.pl.patch: Fixed a information disclosure in buf.pl
  (CVE-2016-7553 bsc#1001215)</changelog>
  <changelog author="astieger@suse.com" date="1483704000">- irssi 0.8.21 fixes four vulnerabilities that could result in
  denial of service (remote crash) when connecting to malicious
  servers or receiving specially crafted data [boo#1018357]:
  * CVE-2017-5193: NULL pointer dereference in the nickcmp function
  * CVE-2017-5194: out of bounds read in certain incomplete control codes
  * CVE-2017-5195: out of bounds read in certain incomplete character sequences
  * CVE-2017-5196: Correct an error when receiving invalid nick message
  * CVE-2017-5356: out of bounds read in format string [boo#1019809]
- drop irssi-0.8.20-buf.pl.patch, upstream</changelog>
  <changelog author="idonmez@suse.com" date="1483704001">- Update to version 1.0.0
  * irssiproxy can now forward all tags through a single port.
  * The kill buffer now remembers consecutive kills. New bindings
    were added: yank_next_cutbuffer and append_next_kill.
  * autolog_ignore_targets and activity_hide_targets learn a new
    syntax tag/* and * to ignore whole networks or everything.
  * hilight got a -matchcase flag to hilight case sensitively.
  * Display TLS connection information upon connect. You can disable
    this by setting tls_verbose_connect to FALSE
  * Certificate pinning for TLS certificates
  * /names and $[?] now uses utf8 string operations.
  * New setting completion_nicks_match_case
  * /channel /server /network now support modify subcommand.
  * New option sasl_disconnect_on_failure to disconnect when SASL
    log-in failed.
- Drop not applied irssi-0.8.15_ssl_proxy.patch
- Run through spec-cleaner, remove support for old openSUSE/SUSE
  releases.</changelog>
  <changelog author="astieger@suse.com" date="1486382400">- irssi 1.0.1:
  * Fix Perl compilation in object dir
  * Fix incorrect HELP SERVER example
  * Correct memory leak in /OP and /VOICE
  * Fix regression that broke second level completion
  * Correct missing NULL termination in perl_parse boo#1023638
  * Sync broken mail.pl script
  * Prevent a memory leak during the processing of the SASL
    response boo#1023637</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1489233600">- irssi 1.0.2 fixes a vulnerability that could result in denial of
  service or worse during a netjoin in certain circumstances (CVE
  pending) bsc#1029020
  - Prevent some null-pointer crashes (GL!9).
  - Fix compilation with OpenSSL 1.1.0 (#628, #597).
  - Correct dereferencing of already freed server objects during
    output of netjoins. Found by APic (GL!10, GL#7).
  - Fix in command arg parser to detect missing arguments in tail place
    (#652, #651).
  - Fix regression that broke incoming DCC file transfers (#667, #656).
  - Fix issue with escaping \ in evaluated strings (#669, #520).
- Added regex-patch-653.patch from Upstream PR#653 to improve UTF8
  support in GRegex</changelog>
  <changelog author="astieger@suse.com" date="1489406400">- add references to previous change</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1496750400">- update to 1.0.3
  - Fix out of bounds read when scanning expandos (GL!11).
  - Fix invalid memory access with quoted filenames in DCC
    (GL#8, GL!12). bsc#1043052 CVE-2017-9469
  - Fix null-pointer dereference on DCC without address (GL#9, GL!13).
    bsc#1043051 CVE-2017-9468
  - Improve integer overflow handling. Originally reported by
    oss-fuzz#525 (#706).
  - Improve nicklist performance from O(N^2) to O(N) (#705).
  - Fix initial screen redraw delay. By Stephen Oberholtzer
    (#680, bdo#856201).
  - Fix incorrect reset of true colours when resetting background. (#711).
  - Fix missing -notls option in /SERVER. By Jari Matilainen (#117, #702).
  - Fix minor history glitch on overcounter (#462, #685).
  - Improved OpenSSL detection at compile time. By Rodrigo Rebello (#677).
  - Improved NetBSD Terminfo detection. By Maya Rashish (#694, #698).
  - Add missing syntax info for COMPLETION (#687, #688).
  - Minor typo correction in help. By Michael Hansen (#707).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1499342400">- update to 1.0.4
  - Fix null pointer dereference when parsing invalid timestamp (GL#10,
    GL!15). Reported by Brian 'geeknik' Carpenter. CVE-2017-10965
    boo#1047709
  - Fix use-after-free condition when removing nicks from the internal
    nicklist (GL#11, GL!16). Reported by Brian 'geeknik' Carpenter.
    CVE-2017-10966
  - Fix incorrect string comparison in DCC file names (#714).
  - Fix regression in Irssi 1.0.3 where it would claim "Invalid time '-1'"
    (#716, #722).
  - Fix a bug when using \n to separate lines with expand_escapes (#723).
  - Retain screen output on improper exit, to better see any error
    messages (#287, #721).
  - Minor help update (#729).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1508673600">- update to 1.0.5 (boo#1064540)
  - Fix missing -sasl_method '' in /NETWORK (#718, #719).
  - Fix incorrect restoration of term state when hitting SUSP
    inside screen (#737, #733).
  - Fix out of bounds read when compressing colour
    sequences. Found by Hanno Böck (GL#12, GL!18). CVE-2017-15228
  - Fix use after free condition during a race condition when
    waiting on channel sync during a rejoin (GL#13, GL!19).
    CVE-2017-15227
  - Fix null pointer dereference when parsing certain malformed
    CTCP DCC messages (GL#14, GL!20).
    CVE-2017-15721
  - Fix crash due to null pointer dereference when failing to
    split messages due to overlong nick or target (GL#15, GL!21).
    CVE-2017-15723
  - Fix out of bounds read when trying to skip a safe channel ID
    without verifying that the ID is long enough (GL#16, GL!22).
    CVE-2017-15722
  - Fix return of random memory when inet_ntop failed (#769).
  - Minor statusbar help update. By Robert Bisewski (#758,
    [#763]).</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1515240000">- update to 1.0.6 (bsc#1074958)
  - Fix invalid memory access when reading hilight configuration
    (#787, #788).
  - Fix null pointer dereference when the channel topic is set
    without specifying a sender (GL#20, GL!25). CVE-2018-5206
  - Fix return of random memory when using incomplete escape
    codes (GL#21, GL!26). CVE-2018-5205
  - Fix heap buffer overflow when completing certain strings
    (GL#19, GL!27). CVE-2018-5208
  - Fix return of random memory when using an incomplete
    variable argument (GL#18, GL!28). CVE-2018-5207</changelog>
  <changelog author="avindra@opensuse.org" date="1516104000">- update to 1.1.0
  * Changes
    + Colour is now re-set when reaching a comma, matching mIRC
    behaviour
    + Irssi now shows the initial nick and name on first start
    + lynx is no longer required to run autogen.sh
    + The command history no longer permits wrapping around
    + /foreach now correctly sends arguments as commands, stopping
    you from embarassing AMSGs
    + /server does not connect to servers anymore, use /server
    connect to change servers
    + The net_ip_compare API function is now deprecated, and the
    previously deprecated net_connect has been removed
  * Additions
    + Add an option to ignore all channels or ignore all queries
    using /set activity_hide_targets
    + Add a startup warning if the TERM var is wrong inside tmux /
    screen
    + Add option to hide certain levels from the textbuffer using /
    window hidelevel
    + Irssi now has its first unit test (for mode parsing)
    + Added access to global command history when using window
    history, and a binding to erase entries from the command
    history (erase_history_entry)
    + -alternate_nick is now available as a network specific
    property
    + On FreeBSD, Irssi now supports Capsicum sandbox (/capsicum
    enter)
    + Filenames (directories) ending with a / now tab-complete
    + UTF-8 should now work in regular expressions when using
    GRegex (the default)
    + Nicks are now properly escaped on completion
    + /server add -port now works
    + Add a setting key_timeout to make key sequences
    automatically re-set when not finished
    + Warn users about expired client certificates, as servers
    may refuse them
    + Add a new net_start_ssl function for StartTLS. This is
    available from ABI 8 and can be used by protocol modules
    + The %# code is now stored in the textbuffer, so for example
    web scripts can make use of it
    + Add new setting break_wide which can be used to enable
    breaking of wide characters (for east-asian users)
    + Add fuzzing code
  * Fixes
    + Netsplits show properly again
    + Do not error on blank lines when using /exec -o
    + Detect used nickname as reported by server
    + Prevent use after free error during the execution of some
    commands
    + Fix MODE parameter parsing when colon was used at a place
    Irssi didn't expect
    + Fixed code to compile with -Werror=declaration-after-statement
    + Clang-format is now supported for git-clang-format
    + Fix use after free when changing the network of hilights
    + Fix positioning error when tab-completing non-ascii strings
    + In-development issues
    + Clarify Alis in /help list
    + Improve /lastlog performance from O(N^2) to O(N)
    + Fix a segfault on "script destroyed" signal
    + Fix early ISON error
    + Documentation improvements
    + Minor cleanups
    + Fix space issue in glib-2.0.m4
- cleanup with spec-cleaner
- drop regex-patch-653.patch
  * fixed upstream in 79bbca4644cad7f2dee89c7ac6b8f9acc2c8b427</changelog>
  <changelog author="ailin.nemui@gmail.com" date="1518696000">- update to 1.1.1 (bsc#1081238):
  - Restore compatibility with OpenSSL &lt; 1.0.2 (#820, #831)
  - Fix test compilation on some platforms (#815, #816)
  - Fix portability and backwards compatibility of test runner
    (#818, #845)
  - Prevent use after free error during the execution of some
    commands. Found by Joseph Bisch (GL#17, GL!24).
  - Revert netsplit print optimisation due to crashes (#465, #809,
    [#812], #819, #824). CVE-2018-7054
  - Fix use after free when SASL messages are received in
    unexpected order (GL#26, GL!33). CVE-2018-7053
  - Fix null pointer dereference in the tab completion when an
    empty nick is joined (GL#24, GL!31). CVE-2018-7050
  - Fix use after free when entering oper password (GL#22,
    GL!32).
  - Fix null pointer dereference when too many windows are
    opened (GL#27, #837). CVE-2018-7052
  - Fix out of bounds access in theme strings when the last
    escape is incomplete. Credit to Oss-Fuzz (#842). CVE-2018-7051
  - Fix out of bounds write when using negative counts on window
    resize (GL#25, GL#29, #836).
  - Minor help correction. By William Jackson (#834).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1547035200">- update to 1.1.2
  - Fix the resetting of window hiddenlevel (#861)
  - Fix clearing of hidelevel in layout (#951)
  - Fix accessing unallocated text when checking entry position
    (#930)
  - Fix uninitialised memory on empty lines (#873, GL#31, #878,
    [#877], #907, #914)
  - Fix use-after-free on expiration of hidden lines (#948)
    (CVE-2019-5882 boo#1121396)
  - Fix use-after-frees. By Maya Rashish (#919)
  - Fix out of bounds access in help display when window width
    is small (#949)
  - Fix paste_join_multiline (#971)
  - Correctly check for errno when displaying SSL errors. By
    Janik Rabe (#895)
  - Fix wrong signal emission argument count (#965)
  - Documentation (#920). Sync NEWS, scripts (#849)
  - Fix Perl detection on MacOS. By Dominyk Tiller (#927)
  - Misc fixes. By Jaroslav ?karvada (#982)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1549368000">- Trim filler wording from description.</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1549886400">- update to 1.2.0
  * Improved the /STATUSBAR commands (#858)
  * /SET no longer shows `=' between setting and value (#886)
  * /CUBES removed from default config (available as script)
    (#956)
  * /1 /2 /3 ... removed from default config (available as new
    setting window_number_commands) (#958)
  * Always redraw the screen on resize. By David Phillips (#896)
  * Private notices intended for channels are now displayed on
    the channel (new setting notice_channel_context) (#959)
  + Imported the "Off-the-record" module into Irssi tree (#854,
    [#589], #196)
  + Initial support for sideways split windows (#697, #431,
    [#224], #807, FS#310, #947, #955, #989)
  + Change the implementation of `wcwidth'. This is used to
    calculate the width of emojis on your terminal screen (#917,
    [#720])
  + Make the wcwidth functions available from Perl (#973):
    string_width(str)
    string_chars_for_width(str, width)
    wcwidth(char)
  + Added completion_keep_word setting (#979)
  + Allow activity_hide_targets to hide activity in itemless
    windows (#967, #997, #1001, #1003)
  + Added activity_hide_visible setting (#990)
  + Allow hiding of lines through the /IGNORE system (#901,
    [#900], #892, #890, #884, #937)
  + Add window_default_hidelevel setting. By Doug Freed (#941)
  + Add activity_hide_window_hidelevel setting, defaulting to ON
    (#938)
  + Add autolog_only_saved_channels setting, to autolog only
    channels that are in the config (#968)
  + Add format support for the input line. By Ben Paxton,
    originally by Jonas Hurrelmann (#764, FS#621, #1004)
    use Irssi::TextUI;
    gui_input_set_extent(pos, text)
    gui_input_set_extents(pos, len, left, right)
    gui_input_clear_extents(pos, len)
    gui_input_get_extent(pos)
    gui_input_get_text_and_extents()
    gui_input_set_text_and_extents(...)
  + Parsing of IRCv3 CAP 3.2 (#775, #869)
  + Show CAP-related events in the user interface (#918, #916,
    [#870], #704)
  + Continue using separators when addressing multiple nicks
    with tab completion. By Manish Goregaokar (#822)
  + Bind Shift-tab by default. By Niklas Luokkala (#830, #829)
  + Fuzzing more things (#913, #780, #813)
  - Disconnect SASL properly in case the SASL module got
    unloaded from server (#931, #629, #618, #616)
  - Fix backward completion jumping to the first instead of last
    word (#979)
  - Improve empty topic handling (#961, #905, #911, #897, #888)
  - Prevent config truncation when no space left. By dequis and
    Lukas Waymann (#922, #925, #910, #909, #906, #871, #817)
  - Also time-out servers in lookup phase (#866, #130)
  - Fix build with LibreSSL 2.7. By Dorian Harmans (#865)
  - Fix a crash when appending to a textbuffer without
    line. Reported by Jari Matilainen (#862)
  - Fix segfault on sending large messages (#803, #796, #802)
  - Fix segfault on invalid statusbar config (#993, #994)
  - Fix random memory writes on restoring queries of foreign
    protocols (#999, #1000)
  - Make default keybinds deletable (#859, #507)
  - Fix freeze when resizing Irssi very small (#946)
  - Compare channels case-insensitively, avoiding confusions
    with the config file (#857, #856)
  - Fix DCC GET on Android. By Martin Staron (#844)
  - Improve rawlog performance (#957)
  - Fix nick escaping erroneously escaping quotes (#978, #974,
    [#709])
  - Protect against theme recursion, improve padding
    performance, limit alignment padding. Credit to Oss-Fuzz
    (#835, #851, #850, #846, #848)
  - Fix recursive loop in replaces (#833, GL#23)
  - Fix headers for compilation of C modules (#939)
  - Documentation. By Zero King (#814). (#852)
  - Sync NEWS, docs, scripts (#849, #855)
  - Build system (#868, #867, #985, #988)
  - Fix build on IBM i and AIX. By Calvin Buckley (#975)
  - Misc fixes (#840, #839, #843, #953, #962). Tests (#806,
    [#875], #905, #964, #1011). Fuzzing (#929).</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1561723200">- update to 1.2.1
  ! Contains all changes from 1.1.3
  ! Contains all changes from 1.0.8
  - Fix a test on big endian machines (#1014)
  - Fix the compile time conditionality of wcwidth
    implementation (#1019, gentoo#677804, #720)
  - Fix /save no longer working on old Solaris (pre
    POSIX.1-2008) (#1042, #1043)
  - Fix regression of #764 where display of 8-bit (legacy
    encoding) in the input prompt was broken (#1018,
    [#1057]). Initial patch by ????? ???????
  - Fix regression of #779 where autolog_ignore_targets would
    not matching itemless windows anymore (#1012, #1013)
  - Fix a use after free issue when sending the SASL login on
    (automatic and manual) reconnects (#1055, #1058). Reported
    by ilbelkyr. CVE-2019-13045</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1567080000">- update to 1.2.2
  - Fix a use after free issue when receiving IRCv3 CAP
    information from the server (GL#34) CVE-2019-15717
  - Fix a crash during startup when windows weren't fully
    initialised yet (#1114, bdo#935813)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1588075200">- added glib-2-63.patch:
  - Backport a fix that froze Irssi on GLib &gt;2.62 when typing
    Ctrl+Space (#1180, #1183)</changelog>
  <changelog author="Ailin Nemui &lt;ailin.nemui@gmail.com&gt;" date="1617969600">- update to 1.2.3 (boo#1184848)
  - Fix the compilation of utf8proc (#1021)
  - Fix wrong call to free. By Zero King (#1076)
  - Fix a colour reset in true colour themes when encountering
    mIRC colours (#1059)
  - Fix memory leak on malformed CAP requests (#1120)
  - Fix an erroneous free of SASL data. Credit to Oss-Fuzz (#1128,
    [#1130])
  - Re-set the TLS flag when reconnecting (#1027, #1134)
  - Fix the scrollback getting stuck after /clear (#1115, #1136)
  - Fix the input of Ctrl+C as the first character (#1153,  #1154)
  - Fix crash on quit during unloading of modules on certain
    platforms (#1167)
  - Fix Irssi freezing input after Ctrl+Space on GLib &gt;2.62 (#1180,
    [#1183])
  - Fix layout of IDCHANs. By Lauri Tirkkonen (#1197)
  - Fix crash when server got reconnected before it was properly
    connected (#1210, #1211)
  - Fix multiple identical active caps (#1249)
  - Minor help corrections (#1156, #1213, #1214, #1255)
  - Remove erroneous colour in the colorless theme. Reported and
    fixed by Nutchanon Wetchasit (#1220, #1221)
  - Fix invalid bounds calculation when editing the text
    entry. Found and fixed by Sergey Valentey (#1269)
  - Fix passing of negative size in buffer writes. Found and
    fixed by Sergey Valentey (#1270)
  - Fix Irssi freezing on slow hardware and fast DCC transfers (#159,
    [#1271])
  - Fix compilation on Solaris (#1291)
  - Fix null pointer dereference when receiving broken JOIN
    record. Credit to Oss-Fuzz (#1292)
  - Fix crash on /connect to some sockets (#1239, #1298)
  - Fix Irssi rendering on Apple ARM. By Misty De Méo (#1267,
    [#1268], #1290)
  - Fix crash on /lastlog with broken lines (#1281, #1299)
  - Fix memory leak when receiving bogus SASL authentication
    data. Found and fixed by Sergey Valentey (#1293)</changelog>
</package>
<package pkgid="e8bb08f9b32c7f48f375d1c8205b55c3b998f67282a2af2c94904b054d30a509" name="iscsiuio-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.12.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908
  (which addresses CVE-2020-17437, CVE-2020-17438, CVE-2020-13987,
  and CVE-2020-13988), changes include:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1611662400">- Update to latest upstream (no new tag yet). To fix
  bsc#1181313. Changes since last update added to
  open-iscsi-SUSE-latest.diff.bz2:
  * Fix iscsiadm segfault when exiting
  * iscsid: Add NO_SYSTEMD to CFLAGS
  * Change mkdir permissions to 0770, adjust usmask
  * Fix typo in util.py
  * iscsid: Do not allow conflicting pid-file options
  * iscsiadm: Fix memory leak in iscsiadm
  * libopeniscsiusr: Fix memory leak in iscsi_sessions_get()
  * libopeniscsiusr: Fix memory leak in iscsi_nodes_get()
  * idbm: Fix memory leak and NULL pointer dereference in idbm_rec_update_param()
  * Add etc/systemd/iscsi-init.service to SYSTEMDFILES Makefile variable</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1615464000">- Updated to latest upstream 2.1.4 as 2.1.4-suse, which contains
  these changes not already present:
  * Enable iscsi.service asynchronous logins, cleanup services
    (bsc#1183421)
  * libopeniscsiusr: dont error loudly if a session isn't found when
    working through iscsi_sessions_get()
  * libopeniscsiusr: skip over removed sessions
  * libopeniscsiusr: fix error messages
  * Avoid hardcoding pkg-config to fix cross build
  * Fix iscsistart login issue when target is delayed.</changelog>
</package>
<package pkgid="f0b5435df6cd1bba68b58581ed62a7f2073f2456cbacfd07ca7d08d3cc94dd35" name="iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.12.1"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908
  (which addresses CVE-2020-17437, CVE-2020-17438, CVE-2020-13987,
  and CVE-2020-13988), changes include:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1611662400">- Update to latest upstream (no new tag yet). To fix
  bsc#1181313. Changes since last update added to
  open-iscsi-SUSE-latest.diff.bz2:
  * Fix iscsiadm segfault when exiting
  * iscsid: Add NO_SYSTEMD to CFLAGS
  * Change mkdir permissions to 0770, adjust usmask
  * Fix typo in util.py
  * iscsid: Do not allow conflicting pid-file options
  * iscsiadm: Fix memory leak in iscsiadm
  * libopeniscsiusr: Fix memory leak in iscsi_sessions_get()
  * libopeniscsiusr: Fix memory leak in iscsi_nodes_get()
  * idbm: Fix memory leak and NULL pointer dereference in idbm_rec_update_param()
  * Add etc/systemd/iscsi-init.service to SYSTEMDFILES Makefile variable</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1615464000">- Updated to latest upstream 2.1.4 as 2.1.4-suse, which contains
  these changes not already present:
  * Enable iscsi.service asynchronous logins, cleanup services
    (bsc#1183421)
  * libopeniscsiusr: dont error loudly if a session isn't found when
    working through iscsi_sessions_get()
  * libopeniscsiusr: skip over removed sessions
  * libopeniscsiusr: fix error messages
  * Avoid hardcoding pkg-config to fix cross build
  * Fix iscsistart login issue when target is delayed.</changelog>
</package>
<package pkgid="bbc4663347c170b979f385e2ce7d6c927eb5b62bde655ab19940bb94a0e930a5" name="iscsiuio-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.3.1"/>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Added latest upstream changes, including:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Add Restart=on-failure option to iscsid.service
  * Fix node print return value when no nodes.
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1559649600">- Added latest upstream changes, including:
  - iscsiuio: Stop using /var directory for PIDfile and locks
  - iscsiuio: improve daemon synchronization (bsc#1135070)
  - fix pipe notification code
  - add systemd support for iscsiuio
  - make iscsid systemd usage optional
  - fix possible discovery hang timeout
  - fix iscsiuio systemd disablement
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Added latest upstream changes, including:
  * iscsiuio: update version to 0.7.8.6
  * iscsiuio: allow processing of iscsid requests in DHCP failure condition
  * rec update: disable the idbm_lock in read/write when updating the rec
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1563364800">- Ensure /etc/iscsi/initiatorname.iscsi has reproducible size
  works around https://github.com/rpm-software-management/rpm/pull/229,
  updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
</package>
<package pkgid="158256836c575b13cf16410546f2fb628364c17d6993afbf9c6373cc05dfa164" name="iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.3.1"/>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1553601600">- Added latest upstream changes, including:
  * Fix output of node printing for multiple paths.
  * Fix printing of node database again.
  * Add Restart=on-failure option to iscsid.service
  * Fix node print return value when no nodes.
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1559649600">- Added latest upstream changes, including:
  - iscsiuio: Stop using /var directory for PIDfile and locks
  - iscsiuio: improve daemon synchronization (bsc#1135070)
  - fix pipe notification code
  - add systemd support for iscsiuio
  - make iscsid systemd usage optional
  - fix possible discovery hang timeout
  - fix iscsiuio systemd disablement
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1562673600">- Added latest upstream changes, including:
  * iscsiuio: update version to 0.7.8.6
  * iscsiuio: allow processing of iscsid requests in DHCP failure condition
  * rec update: disable the idbm_lock in read/write when updating the rec
  Updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1563364800">- Ensure /etc/iscsi/initiatorname.iscsi has reproducible size
  works around https://github.com/rpm-software-management/rpm/pull/229,
  updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
</package>
<package pkgid="2fb5a13d718c44d6ffb48e100da6db60b99bd02e621fa99dc7597835eec1e714" name="iscsiuio-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1563364800">- Ensure /etc/iscsi/initiatorname.iscsi has reproducible size
  works around https://github.com/rpm-software-management/rpm/pull/229,
  updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908,
  including:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
</package>
<package pkgid="b63e1d4d76a89d9feb9c74c66e3549886300ed188ef2061754618653504b51cd" name="iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.6.1"/>
  <changelog author="Bernhard Wiedemann &lt;bwiedemann@suse.com&gt;" date="1563364800">- Ensure /etc/iscsi/initiatorname.iscsi has reproducible size
  works around https://github.com/rpm-software-management/rpm/pull/229,
  updating the SPEC file</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908,
  including:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
</package>
<package pkgid="8bd19038b605256afe039a654bcbec62ff726758e73eb103e15b8fbd3ee3237d" name="iscsiuio-debuginfo" arch="i586">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.9.1"/>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908,
  including:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1611662400">- Update to latest upstream (no new tag yet). To fix
  bsc#1181313. Changes since last update added to
  open-iscsi-SUSE-latest.diff.bz2:
  * Fix iscsiadm segfault when exiting
  * iscsid: Add NO_SYSTEMD to CFLAGS
  * Change mkdir permissions to 0770, adjust usmask
  * Fix typo in util.py
  * iscsid: Do not allow conflicting pid-file options
  * iscsiadm: Fix memory leak in iscsiadm
  * libopeniscsiusr: Fix memory leak in iscsi_sessions_get()
  * libopeniscsiusr: Fix memory leak in iscsi_nodes_get()
  * idbm: Fix memory leak and NULL pointer dereference in idbm_rec_update_param()
  * Add etc/systemd/iscsi-init.service to SYSTEMDFILES Makefile variable</changelog>
</package>
<package pkgid="0d206dea04c6ebaa2fa58d63313dfbcad10e93af9cf4c380402cbe91b1e062c9" name="iscsiuio-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.7.8.6" rel="lp152.18.9.1"/>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1564660800">- Disable LTO (Link Time Optimization) on aarch64 since it seems
  to fail -- iscsiadm core dumps almost immediately (bsc#1143192),
  updating the SPEC file.</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1565611200">- Enable LTO on aarch64 as the gcc9 package issue is fixed:
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91386</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1568376000">- Upgraded to upstream version 2.0.878, which becomes 2.0.878-suse
  with our (few) SUSE-specific changes needed for our build system.
  Changes include:
  * general bug fixes in iscsid, iscsiadm, and libopeniscsiusr,
    including better lock handling for multiple instances of iscsiadm
  * iscsiuio/qedi updates
  * systemd service-file updates/cleanups
  This replaces open-iscsi-2.0.877-suse.tar.bz2 with
  open-iscsi-2.0.878-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.0.878.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1571400000">- Merge in latest upstream, with fixes for:
  * Support CHAP SHA-1, SHA-256, SHA3-256 vis openssl libcrypto
  - this requires an update of the SPEC file, as well
  * Initialize timeout for printing specific session info
  Updating (in addition to the SPEC file):
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1572609600">- Fix issue where CHAP was not working after latest update
  (bsc#1155510), updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1573300800">- Use SPEC-file macro for systemd generator directory, since
  the libexec macro is changing from /usr/lib to /usr/libexec.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1574078400">- Merged in latest upstream (2.1.0), including more fixes for
  iscsiuio, and cleanup/bug-fixes of new CHAP code.
  This replaces open-iscsi-2.0.878-suse.tar.bz2 with
  open-iscsi-2.1.0-suse.tar.bz2, and it resets
  open-iscsi-SUSE-latest.diff.bz2 with fixes after 2.1.0-suse.
  Also, updated the Summary lines in the spec file that
  started with "iSCSI ...", since rpmlint didn't like
  them starting with a non-capital letter, and updated the
  version number for iscsiuio to match the code.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1580472000">- Bug fixes, including addig support for "-fno-common"
  compiler option, 586 bug fixes, a bug fix for SHA1
  handling, and other needed but small fixes (bsc#1160287),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1583236800">- Merged in latest upstream (2.1.1), which is mainly a bug-fix
  release over 2.1.0, including changing the test suite from
  shell-based to python3-based, replacing
  open-iscsi.2.1.0-suse.tar.bz2 with open-iscsi-2.1.1-suse.tar.bz2
  and resetting open-iscsi-SUSE-latest-diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585224000">- Update SPEC file to work around issue with installcheck
  SUSE script. Update the SPEC file while there.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1585742400">- Update with two upstream commits:
  * Fix issue where "iscsi-iname -p" core dumps. (found upstream)
  * Fix iscsi.service so it handles restarts better (bsc#1163499)
  * Add Wants=remote-fs-pre.target for sequencing. (bsc#1158536)
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1586260800">- Updated service_del_preun and service_del_postun for iscsi and
  iscsiuio packges in SPEC file, so that services get started/
  stopped in the correct order, and changed systemd macros so
  that iscsi login service iscsi.service is not restarted during
  package upgrade (bsc#1166650)</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1588420800">- Update SPEC file to handle the fact that the
  service_del_postun_without_restart RPM macro exists
  in factory but not in SLE. No functional change
  for factory.</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1591617600">- Merged in latest upstream. Summary:
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  Note that the "Add iscsi-init.service" change adds a new systemd
  service called "iscsi-init", that creates the iSCSI initiator name
  file /etc/iscsi/initiatorname.iscsi, if and only if it does not
  exist. This obviates the need to do this from the SPEC file, now
  updated.
  Since this was not a version-number update, in addition to modifying
  the SPEC file, also updates:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1595678400">- Upgrade to upstream vresion 2.1.2 as 2.1.2-suse (for
  jre#SES-1081), including:
  * use openssl for random data generation
  * Misspelled socket name might cause confusion to inexperienced user.
  * iscsi/libopeniscsiusr:add libopeniscsiuser_node.h to HEADERS
  * Let initiator name be created by iscsi-init.service.
  * iscsi: fix fd leak
  * iscsi: Add break to while loop
  * Fix compiler complaint about string copy in iscsiuio
  * Fix a compiler complaint about writing one byte
  * Fix issue with zero-length arrays at end of struct
  * Add iscsi-init.service
  * Proper disconnect of TCP connection
  * Fix dependency on new systemd RPM macro
  * Fix SIGPIPE loop in signal handler
  * Update iscsi-iname.c
  * log:modify iSCSI shared memory permissions for logs
  * Sequence systemd services correctly when upgrading
  * Ignore iface.example in iface match checks
  * More changes for musl.
  * Fix type mismatch under musl.
  * Change include of &lt;sys/poll.h&gt; to &lt;poll.h&gt;
  * Add Wants=remote-fs-pre.target for sequencing.
  * Add workaround in SPEC file for installcheck.
  * Fix issue where "iscsi-iname -p" core dumps.
  * iscsi-iname: fix iscsi-iname -p access NULL pointer without given IQN prefix
  * Fix iscsi.service so it handles restarts better
  Replacing open-iscsi-2.1.1-suse.tar.bz2 with open-iscsi-2.1.2-suse.tar.bz2,
  and updating open-iscsi-SUSE-latest.diff.bz2 to empty, since initially
  there are no differences.</changelog>
  <changelog author="Franck Bui &lt;fbui@suse.com&gt;" date="1604404800">- %service_del_postun_without_restart is now available on SLE
  More accurately it's been introduced in SLE12-SP2+ and SLE15+
  +-------------------------------------------------------------------</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1604491200">- Updated to latest upstream, including async login ability:
  * TODO: Update to todo list.
  * Implement login "no_wait" for iscsiadm NODE mode
  * iscsiadm buffer overflow regression when discovering many targets at once
  * iscsid: Check Invalid Session id for stop connection
  * Add ability to attempt target logins asynchronously</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1606737600">- Updatged to latest upstream, including:
  * iscsiadm: Optimize the the verification of mode paramters
  * iscsid: Poll timeout value to 1 minute for iscsid
  * iscsiadm: fix host stats mode coredump
  * iscsid: fix logging level when starting and shutting down daemon
  * Updated iscsiadm man page.
  * Fix memory leak in sysfs_get_str
  * libopeniscsiusr: Compare with max int instead of max long
- Systemd unit files should not depend on network.target (bsc#1179440),
  updating:
  * open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1609416000">- Updated to upstream version 2.1.3 as 2.1.3-suse, for bsc#1179908,
  including:
  * uip: check for TCP urgent pointer past end of frame
  * uip: check for u8 overflow when processing TCP options
  * uip: check for header length underflow during checksum calculation
  * fwparam_ppc: Fix memory leak in fwparam_ppc.c
  * iscsiuio: Remove unused macro IFNAMSIZ defined in iscsid_ipc.c
  * fwparam_ppc: Fix illegal memory access in fwparam_ppc.c
  * sysfs: Verify parameter of sysfs_device_get()
  * fwparam_ppc: Fix NULL pointer dereference in find_devtree()
  * open-iscsi: Clean user_param list when process exit
  * iscsi_net_util: Fix NULL pointer dereference in find_vlan_dev()
  * open-iscsi: Fix NULL pointer dereference in mgmt_ipc_read_req()
  * open-iscsi: Fix invalid pointer deference in find_initiator()
  * iscsiuio: Fix invalid parameter when call fstat()
  * iscsi-iname: Verify open() return value before calling read()
  * iscsi_sysfs: Fix NULL pointer deference in iscsi_sysfs_read_iface</changelog>
  <changelog author="Lee Duncan &lt;lduncan@suse.com&gt;" date="1611662400">- Update to latest upstream (no new tag yet). To fix
  bsc#1181313. Changes since last update added to
  open-iscsi-SUSE-latest.diff.bz2:
  * Fix iscsiadm segfault when exiting
  * iscsid: Add NO_SYSTEMD to CFLAGS
  * Change mkdir permissions to 0770, adjust usmask
  * Fix typo in util.py
  * iscsid: Do not allow conflicting pid-file options
  * iscsiadm: Fix memory leak in iscsiadm
  * libopeniscsiusr: Fix memory leak in iscsi_sessions_get()
  * libopeniscsiusr: Fix memory leak in iscsi_nodes_get()
  * idbm: Fix memory leak and NULL pointer dereference in idbm_rec_update_param()
  * Add etc/systemd/iscsi-init.service to SYSTEMDFILES Makefile variable</changelog>
</package>
<package pkgid="a277fbe7785dd7d89506407f694cd98d3a6bf6cb55a38d471992e5ac7dcbd261" name="isync-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp152.4.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1514548800">- Update to version 1.3.0, fixes build against openSSL
  1.1.0, see https://sourceforge.net/projects/isync/files/isync/1.3.0
  for the full list of changes</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1579176000">- Update to version 1.3.1
  - SSL now uses SNI, which for example GMail requires
  - fixed fallbacks for missing UIDPLUS extension (with e.g. DavMail)
  - fixed UIDVALIDITY recovery with really long Message-id headers
  - fixed GSSAPI authentication with Kerberos
  - fixed support for IMAP servers which do not sort search results (e.g.,
    poczta.o2.pl)
  - fixed CopyArrivalDate on platforms without glibc
  - fixed useless SASL warnings with certain plugins
  - the perl 5.14 requirement is now made explicit
  - improved OpenBSD support
  - fixed a bunch of compiler warnings</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1582718400">- drop sources signature as there is no published key to verify them</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1594209600">- Update to version 1.3.2
  - increased PassCmd buffer size to accomodate XOAUTH2 tokens
  - improved SSL error handling
  - improved resilience to IMAP server bugs relating to FETCH
  - fixed handling of non-uppercase IMAP iNbOx spellings
  - fixed timeouts while uploading big messages
  - fixed parsing of NIL hierarchy delimiters in IMAP LIST responses
  - fixed crash when using Tunnel in an IPv6-enabled build
  - fixed libcrypto detection from OpenSSL 1.1+ without pkg-config
  - made --debug-crash work with Yama ptrace protection
- use more scriptlets
- don't include COPYING twice and drop TODO from %doc
- reenable gpg source verification</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1596542400">- Update to version 1.3.3
  * Network timeout handling has been added.
  * Support for proper Maildir++ and a Maildir sub-folder naming
    style.
  * without extra dots have been added.
  * Support for TLS client certificates was added.
  * Support for recovering from baseless UID validity changes was
    added.
  * The get-cert script was renamed to mbsync-get-cert.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609934400">- fix homepage url</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614513600">- Update to version 1.3.5 (boo#1182488)
  * This is a security release that fixes CVE-2021-20247.
- Update to version 1.3.4
  This is a maintenance release that contains exactly one change:
  * fixed regression in handling NAMESPACE 'INBOX.', introduced in
    v1.3.2</changelog>
</package>
<package pkgid="b02019bfc8ef7696997d434286ae4dc3e3e9d8421c1fd67d6c417c820770bb72" name="isync-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp152.4.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1437998400">- bump to 1.2.0
  Changes:
  The 'isync' compatibility wrapper is now deprecated.
  An IMAP Path/NAMESPACE rooted in INBOX won't be handled specially
  any more. This means that some Patterns may need adjustment.
  The default output is a lot less verbose now.
  The meanings of the -V and -D options changed significantly.
  The SSL/TLS configuration has been re-designed. SSL is now
  explicitly enabled or disabled - "use SSL if available" is gone.
  Notice: Tunnels are assumed to be secure and thus default to no SSL.
  Support for SASL (flexible authentication) has been added.
  Support for Windows file systems has been added.
  Support for compressed data transfer has been added.
  Folder deletions can be propagated now.</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447675200">- bump to 1.2.1
  - fixed IPv6-enabled builds crashing upon host name resolution failure
  - fixed updating Maildir flags crashing on OpenBSD
  - fixed deadlocks with NFS home directories
  - fixed SASL authentication with GSS-API
  - fixed messages being uploaded again and again with some servers
  - fixed duplicate mailboxes with IMAP NAMESPACE "INBOX."
  - fixed some problems in the IMAP command submission code
  - fixed build with static libdb, libnsl, and libsocket
  - the dependencies on Berkeley DB and zlib (and the features they enable) can be explicitly disabled now
  - it is now possible to nest a Maildir Store's Path into its Inbox
  - fixed -DN not implying -Dn
- clean the spec with spec-cleaner
- add isync.keyring</changelog>
  <changelog author="mpluskal@suse.com" date="1462536000">- Cleanup spec file with spec-cleaner
- Use pkgconfig() style dependencies
- Update dependencies
  * Enable sasl</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1464868800">- add COPYING README AUTHORS ChangeLog to the package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1514548800">- Update to version 1.3.0, fixes build against openSSL
  1.1.0, see https://sourceforge.net/projects/isync/files/isync/1.3.0
  for the full list of changes</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1579176000">- Update to version 1.3.1
  - SSL now uses SNI, which for example GMail requires
  - fixed fallbacks for missing UIDPLUS extension (with e.g. DavMail)
  - fixed UIDVALIDITY recovery with really long Message-id headers
  - fixed GSSAPI authentication with Kerberos
  - fixed support for IMAP servers which do not sort search results (e.g.,
    poczta.o2.pl)
  - fixed CopyArrivalDate on platforms without glibc
  - fixed useless SASL warnings with certain plugins
  - the perl 5.14 requirement is now made explicit
  - improved OpenBSD support
  - fixed a bunch of compiler warnings</changelog>
  <changelog author="Michal Hrusecky &lt;michal.hrusecky@opensuse.org&gt;" date="1582718400">- drop sources signature as there is no published key to verify them</changelog>
  <changelog author="Dan ?erm&#xE1;k &lt;dcermak@suse.com&gt;" date="1594209600">- Update to version 1.3.2
  - increased PassCmd buffer size to accomodate XOAUTH2 tokens
  - improved SSL error handling
  - improved resilience to IMAP server bugs relating to FETCH
  - fixed handling of non-uppercase IMAP iNbOx spellings
  - fixed timeouts while uploading big messages
  - fixed parsing of NIL hierarchy delimiters in IMAP LIST responses
  - fixed crash when using Tunnel in an IPv6-enabled build
  - fixed libcrypto detection from OpenSSL 1.1+ without pkg-config
  - made --debug-crash work with Yama ptrace protection
- use more scriptlets
- don't include COPYING twice and drop TODO from %doc
- reenable gpg source verification</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1596542400">- Update to version 1.3.3
  * Network timeout handling has been added.
  * Support for proper Maildir++ and a Maildir sub-folder naming
    style.
  * without extra dots have been added.
  * Support for TLS client certificates was added.
  * Support for recovering from baseless UID validity changes was
    added.
  * The get-cert script was renamed to mbsync-get-cert.</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1609934400">- fix homepage url</changelog>
  <changelog author="Martin Hauke &lt;mardnh@gmx.de&gt;" date="1614513600">- Update to version 1.3.5 (boo#1182488)
  * This is a security release that fixes CVE-2021-20247.
- Update to version 1.3.4
  This is a maintenance release that contains exactly one change:
  * fixed regression in handling NAMESPACE 'INBOX.', introduced in
    v1.3.2</changelog>
</package>
<package pkgid="3c567002dda3f93d00fa35d9c9726881b98d84b4b4f7158c981b1d47aa3942e5" name="iwpmd-debuginfo" arch="i586">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="3615f3967e5b94decd63f7521e98f401879c89e94a2f8a022b95149d082bf65a" name="iwpmd-debuginfo" arch="x86_64">
  <version epoch="0" ver="27.1" rel="lp152.2.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1533211200">- Add two patches for rxe_cfg
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to rdma-core v20.1 (fate#325887, fate#325919, fate#326000)
  * No release notes available
- Drop patches merged upstream:
  * suse-Add-recommends-for-rxe_cfg-requirements.patch
    adds recommends for the relevant packages
  * rxe-switch-to-iproute2-for-rxe_cfg.patch
    switches to iproute2 commands</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1543579200">- Update to rdma-core v21 (fate#325939, fate#326991)
  * No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1549454400">- Update to rdma-core v22.1 (bsc#1104280)
  * No release notes available</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1551441600">- Add patches to enable Broadcom's 57500 RoCE adapter (bsc#1125651):
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1555675200">- Update to rdma-core v23
  - No release notes available
- Enable pyverbs package
- Remove patches that were merged upstream
  - Update-kernel-headers.patch
  - bnxt_re-lib-Enable-Broadcom-s-57500-RoCE-adapter.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1557748800">- Update to rdma-core v23.1
  - No release notes available
- Replace prebuild-pandoc.sh by post_download.sh to patch the spec
  file form upstream for OBS setup</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1567771200">- Update to rdma-core v25.1 (bsc#996146)
  - No release notes available
- Add rdma-core-rpmlintrc to hide non applicable rpmlint warnings</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1570017600">- Have rsocket conflicts with older librdmacm-tools (bsc#1137140)
- Have librdmacm-utils obsolete and provide librdmacm-tools (bsc#1137138)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1573041600">- BuildRequire valgrind-client-headers instead of full valgrind-devel
  where available.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1573560000">- Add libefa1 to baselibs.conf
- Fix baselibs.conf</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574683200">- Update to rdma-core v26.1 (jsc#SLE-8388, jsc#SLE-8394, jsc#SLE-8463, jsc#SLE-8399,
  jsc#SLE-8254, jsc#SLE-9840, jsc#SLE-9763, jsc#SLE-9925, jsc#SLE-9846, jsc#SLE-9913,
  jsc#SLE-9729, jsc#SLE-8666)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1574942400">- Add Broadcom fixes (bsc#1157891)
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="Nicolas Morey-Chaisemartin &lt;nmoreychaisemartin@suse.com&gt;" date="1602676800">- Move rxe_cfg to libibverbs-utils (bsc#1177699)</changelog>
</package>
<package pkgid="ef040087f4204a12b53922ce365b5c3bbd93e08f664ba01f08634b8080e88707" name="jasper-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp152.7.3.1"/>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
</package>
<package pkgid="897af43ce08b0a579fe62fe31d67faa09a5ad811bfa96f0ddcbac4faf2572526" name="jasper-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp152.7.3.1"/>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
</package>
<package pkgid="f8bbf98769a83c7ed464fcbe026921098cd009c1d2a9b4b4dbc3ff18aef0cb42" name="jasper-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp152.7.6.1"/>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
</package>
<package pkgid="701a4555012a4eecc56c697f9b73254c5e935d099b928fe0ac1941577df2a93b" name="jasper-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp152.7.6.1"/>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
</package>
<package pkgid="f9ab20c4adca5b3c07bd217e3e00525fa41ff7b2cf840f0a86cf2cde12a04967" name="jasper-debugsource" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp152.7.3.1"/>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
</package>
<package pkgid="3929ccba4330754839a6133803e4ba7585e4b0077d02ca6e3423e7b15702c238" name="jasper-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp152.7.3.1"/>
  <changelog author="fstrba@suse.com" date="1481630400">- Added patches:
  * jasper-CVE-2016-8654.patch
  - Upstream fix for bsc#1012530, CVE-2016-8654: Heap-based
    buffer overflow in QMFB code in JPC codec
  * jasper-CVE-2016-9395.patch
  - Upstream fix for bsc#1010977, CVE-2016-9395: jas_seq.c:90:
    jas_matrix_t *jas_seq2d_create(int, int, int, int): Assertion
    'xstart &lt;= xend &amp;&amp; ystart &lt;= yend' failed
  * jasper-CVE-2016-9398.patch
  - Fix for bsc#1010979, CVE-2016-9398: jpc_math.c:94: int
    jpc_floorlog2(int): Assertion 'x &gt; 0' failed
  * jasper-CVE-2016-9560.patch
  - Upstream fix for bsc#1011830, CVE-2016-9560: stack-based
    buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c)</changelog>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
</package>
<package pkgid="d2e1eb247cabace2c915eec2bbc115f4efbe5477e9b4d97ff6d982a0046a027c" name="jasper-debugsource" arch="i586">
  <version epoch="0" ver="2.0.14" rel="lp152.7.6.1"/>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
</package>
<package pkgid="b71fdcf12449b20165d92c44537ce1290327a6c05d5521060085cc6a225b9a4f" name="jasper-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="lp152.7.6.1"/>
  <changelog author="fstrba@suse.com" date="1482321600">- Added patch:
  * jasper-CVE-2016-9591.patch
  - Fix for bsc#1015993, CVE-2016-9591: Use-after-free on heap in
    jas_matrix_destroy</changelog>
  <changelog author="sbrabec@suse.com" date="1488801600">- Add -D_BSD_SOURCE to fix redefinition of system types in
  jas_config.h and breakage in ppc64le, s390 and s390x
  (bsc#1028070).</changelog>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="Adam Majer &lt;adam.majer@suse.de&gt;" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
</package>
<package pkgid="a0d4119084ea19cba9a6be5df31f3c48d6454519d6a738d22feba8b8209e8025" name="java-11-openjdk-accessibility-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="e24103a2fc3e270ac691f5400f50d4ff889274e8f6b134eeb31b1fa37ac0ba4a" name="java-11-openjdk-accessibility-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="988ee153dcd5fdfa42dc3b3d7b9e940ec06711e9d843e233b43ae48f7a0bc6d8" name="java-11-openjdk-accessibility-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="2aa1036b7b9659634db1c2a206e204563d81f2ef34619ac7ac17b3f5f6c1b071" name="java-11-openjdk-accessibility-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="2c2c898914466a5429acf4c319bc70b90926cea789307cf0bf4ccde560c7474f" name="java-11-openjdk-accessibility-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="9503e36b9a152f68529346896183732df8d14add022b2a2cd5da9e9a6047ffbe" name="java-11-openjdk-accessibility-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="c0b7bbc9f49309049b840364ef5fc068376a0813a5c53a65efd37c0be6d8d5e5" name="java-11-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="557fe25ecc4726a435244d21039e9933466b337aaa81dbbd2f9b7bc1e08a4438" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="500ffa223c5a438c5654e2b3d00e387287d59cfd943a067ddaa797f1147792af" name="java-11-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="db9a369de178f81a156043f4b694c4360655c955bde5796bdbb92b674aeb9e77" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="8c0c74417ccd5e730c95f6d2a2523dce0057924e5f747e978760fdc612ccf848" name="java-11-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="34b935e0b01e0496025c35959adfb69abca4308cdf257f84a95f873bfa01cf7f" name="java-11-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="803bcc5d3beeea9943c7e743ac338732608601ea112bbbb7c09ffbed26a615b1" name="java-11-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="d8f1c9abd2461ffcb7d8b7e0a1b938f27b0e64b8a91e7edc26fea6860480c28b" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="11.0.10.0" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611230400">- Update to upstream tag jdk-11.0.10-9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
</package>
<package pkgid="c1fcf1736bf36c2622a27bddb71d4b1aa0050e64f053e70a2ca055b7395baf29" name="java-11-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="214cbdf9813d20cf04f6806e9d6508c82c2eb89cc5d2f9eb1aa9dae50b35fafc" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="11.0.8.0" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1540296000">- Merge into the JDK following modules from github.com/javaee:
  * com.sum.xml.fastinfoset
  * org.jvnet.staxex
  * com.sun.istack.runtime
  * com.sun.xml.txw2
  * com.sun.xml.bind
    + This provides a default implementation of JAXB-API that
    existed in JDK before Java 11 and that some applications
    depend on.</changelog>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
</package>
<package pkgid="8b38fc10350c3afc2084051d0bda1727d919e1b893a3d6a2dfd2a6f15cf3e23f" name="java-11-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="777ae1195370cffc675b634b5383767978bc747ead6524578694556fd3458ee5" name="java-11-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="11.0.9.0" rel="lp152.2.6.2"/>
  <changelog author="Antoine Belvire &lt;antoine.belvire@opensuse.org&gt;" date="1540468800">- Remove hardcoded Java version in jconsole desktop file.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121600">- Do not resolve by default the added JavaEE modules (fixes
  bsc#1120431)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547121601">- Added patch:
  * loadAssistiveTechnologies.patch
    + Do not crash the whole JVM if assistive technologies crash</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1547640000">- Update to upstream tag jdk-11.0.2+7 (Oracle January 2019 CPU)
  * Security fixes:
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210866, CVE-2018-11212, bsc#1122299: Improve JPEG
    processing
  * Security-In-Depth fixes:
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210870: Libsunmscapi improved interactions
  * Fixes
    + S8021335: Missing synchronization when reading counters for
    live threads and peak thread count
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8196902: Better HTTP Redirection
    + S8203688: [testbug] Nashorn test
    test/nashorn/script/nosecurity/treeapi/diagnostic.js fails
    + S8203850: java.net.http HTTP client should allow specifying
    Origin and Referer headers
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + S8205633: TestOptionsWithRanges.java of
    '-XX:TLABSize=2147483648' fails intermittently
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206107: [x86_32] jck tests for ldc2_w bytecode fail
    + S8207059: Update test certificates in QuoVadisCA.java test
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207343: Automate vtable/itable stub size calculation
    + S8207395: jar has issues with UNC-path arguments for the jar
  - C parameter [windows]
    + S8207810: Remove jdk-11.0.1+2 tag from source repository
    + S8207924: serviceability/sa/TestUniverse.java#id0
    intermittently fails with
    assert(get_instanceKlass()-&gt;is_loaded()) failed: must be at
    least loaded
    + S8208209: Improve TLS connection stability again
    + S8208350: Disable all DES cipher suites
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8208647: switch jtreg to 4.2b13
    + S8208661: JDK 11.0.1 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8209357: [PPC64] Fix build which was broken by 8208672
    (Enable -Wreorder)
    + S8209433: [s390] Fix build, broken by 8208672 (Enable
  - Wreorder)
    + S8209511: C2 asserts with UseSSE &lt; 4 and AVX enabled: "Label
    was never bound to a location, but it was used as a jmp target'
    + S8209544: AES encrypt performance regression in jdk11b11
    + S8209576: java.nio.file.Files.writeString writes garbled
    UTF-16 instead of UTF-8
    + S8209588: SIGSEGV in MethodArityHistogram() with
  - XX:+CountCompiledCalls
    + S8209916: NPE in SupportedGroupsExtension
    + S8209950: SIGBUS in CodeHeapState::print_names()
    + S8209965: The "supported_groups" extension in ServerHellos
    + S8210040: TestOptionsWithRanges.java is very slow
    + S8210043: Invalid assert(HeapBaseMinAddress &gt; 0) in
    ReservedHeapSpace::initialize_compressed_heap
    + S8210319: [s390]: Use of shift operators not covered by cpp
    standard
    + S8210334: TLS 1.3 server fails if ClientHello doesn't have
    pre_shared_key and psk_key_exchange_modes
    + S8210345: The Japanese message of FileNotFoundException
    garbled
    + S8210355: Minimal and Zero non-PCH builds fail after
    JDK-8207343 (Automate vtable/itable stub size calculation)
    + S8210357: Zero builds fail after JDK-8207343 (Automate
    vtable/itable stub size calculation)
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans compiled
    without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8210490: TimeZone.getDisplayName given Locale.US doesn't
    always honor the Locale.
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a disconnection
    + S8210754: print_location is not reliable enough (printing
    register info)
    + S8210764: Update avx512 implementation
    + S8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when
    used on the client side with mutual auth
    + S8210912: Build error in src/jdk.crypto.cryptoki/share/native/
    /libj2pkcs11/p11_convert.c after JDK-8029661
    + S8210918: Add test to exercise server-side client hello
    processing
    + S8210964: add more ld preloading related info to hs_error
    file on Linux
    + S8211061: Tests fail with
    assert(VM_Version::supports_sse4_1()) on ThreadRipper CPU
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211251: Default mask register for avx512 instructions
    + S8211268: Disable unsupported GCs for Zero
    + S8211272: x86_32 build failures after JDK-8210764 (Update
    avx512 implementation)
    + S8211375: Minimal VM build failures after JDK-8211251
    (Default mask register for avx512 instructions)
    + S8211420: com.sun.net.httpserver.HttpServer returns
    Content-length header for 204 response code
    + S8211437: 8211437 java.net.http.HttpClient hangs on 204 reply
    without Content-length 0
    + S8211451: ~2.5% regression on compression benchmark starting
    with 12-b11
    + S8211714: Need to update vm_version.cpp to recognise VS2017
    minor versions
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
    + S8211806: TLS 1.3 handshake server name indication is missing
    on a session resume
    + S8211844: [aix] ProcessBuilder: Piping between created
    processes does not work.
    + S8211852: inspect stack during error reporting
    + S8211883: Disable anon and NULL cipher suites
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8211931: [ppc][testbug] runtime/jni/terminatedThread/
    /TestTerminatedThread.java fails as threads don't terminate
    immediately
    + S8212005: Epsilon elastic TLAB sizing may cause misalignment
    + S8212070: Introduce diagnostic flag to abort VM on failed JIT
    compilation
    + S8212100: AppCDS crashes for some uses with JRuby
    + S8212116: IIOException "tEXt chunk length is not proper" on
    opening png file
    + S8212177: Epsilon alignment adjustments can overflow max TLAB
    size
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212197: OpenDataException thrown when constructing
    CompositeData for StackTraceElement
    + S8212481: PPC64: Enable POWER9 CPU detection
    + S8212613: Bump update version for jdk11.0.2 cpu forest
    + S8212645: Need change jdk 11.0.2 milestone to ea
    + S8212754: Build failure: undefined
    JvmtiSampledObjectAllocEventCollector::object_alloc_is_safe_to_sample
    + S8212795: ThreadInfoCompositeData.toCompositeData fails to
    map ThreadInfo to CompositeData
    + S8212926: HttpClient does not retrieve files with large sizes
    over HTTP/1.1
    + S8212937: Parent class loader may not have a referred
    ClassLoaderData instance when obtained in
    Klass::class_in_module_of_loader
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213086: Compiler thread creation should be bounded by
    available space in memory and Code Cache
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213367: JDK 11.0.2 l10n resource file update
    + S8213410: UseCompressedOops requirement check fails fails on
    32-bit system
    + S8213527: [testbug] Fix PrintMetaspaceDcmd test using
    UseCompressedOops for 32-bit.
    + S8213763: Need change jdk 11.0.2 milestone to fcs
    + S8213834: JVMTI ResourceExhausted should not be posted in
    CompilerThread
    + S8213942: URLStreamHandler initialization race
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214059: Undefined behaviour in ADLC
    + S8214061: Buffer written into itself
    + S8214105: [TESTBUG] Bit test is always false in
    serviceability/jvmti/StartPhase/AllowedFunctions
    + S8214108: [TESTBUG] Incorrect Function parameter lists in
    vmTestbase/nsk/jvmti/scenarios/extension/EX03/ex03t001
    + S8214295: Populate handlers while holding streamHandlerLock
    + S8214476: ZGC: Build ZGC by default
    + S8214892: Delayed starting of debugging via jcmd
    + S8215128: Test library OSInfo.getSolarisVersion cannot
    determine Solaris version
    + S8215637: client VM variant build error: zgc (enabled)
    depends on opto (disabled)
    + S8215975: [testbug] Adapt nsk tests to the PPC, S390 and AIX
    platforms.
    + S8216290: Register to register spill may use AVX 512 move
    instruction on unsupported platform.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1555502400">- Update to upstream tag jdk-11.0.3+7 (April 2019 CPU)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8214809: CDS storage improvements
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
  * Other changes
    + S8034802: (zipfs) newFileSystem throws UOE when the zip file
    is located in a custom file system
    + S8165675: Trace event for thread park has incorrect unit for
    timeout
    + S8172695: (scanner) java/util/Scanner/ScanTest.java fails
    + S8187364: Unable to enter zero width non-joiner (ZWNJ) symbol
    in Swing text component
    + S8197398: (zipfs) Files.walkFileTree walk indefinitelly while
    processing JAR file with "/" as a directory inside.
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8201818: [macosx] Printing attributes break page size set via
    "java.awt.print.Book" object
    + S8204142: AWT hang occurs when sequenced events arrive out of
    sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + S8207849: Allow the addition of more number to the Java
    version string
    + S8208275: C2 crash in Node::add_req(Node*)
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8209615: ParseError in XMLEventReader on a valid input
    + S8209758: 2 classes with same name G1PrintCollectionSetClosure
    cause crash when logging is enabled
    + S8209960: -Xlog:jfr* doesn't work with the JFR
    + S8210192: Hsperf counter ParNew::CMS should be ParNew:CMS
    + S8210394: (zipfs) jdk/nio/zipfs/ZFSTests.java rootdir.zip: The
    process cannot access the file because it is being used by
    another process
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210874: Test for JDK-8209615
    + S8210974: No extensions debug log for ClientHello
    + S8210989: RSASSA-PSS certificate cannot be selected for client
    auth on TLSv1.2
    + S8211049: Second parameter of "initialize" method is not used
    + S8211064: [AArch64] Interpreter and c1 don't correctly handle
    jboolean results in native calls
    + S8211100: hotspot C1 issue with comparing long numbers on x86
    32-bit
    + S8211163: UNIX version of Java_java_io_Console_echo does not
    return a clean boolean
    + S8211267: StackOverflowError happened by
    TextField.setFont(...)
    + S8211295: DriverManager.getConnection fails when called from
    com.sun.rowset.JdbcRowSetImpl
    + S8211320: Aarch64: unsafe.compareAndSetByte() and
    unsafe.compareAndSetShort() c2 intrinsics broken with negative
    expected value
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211698: Crash in C2 compiled code during execution of double
    array heavy processing code
    + S8211765: JarFile constructor throws undocumented exception
    + S8211787: javax/net/ssl/TLSCommon/TLSTest.java throws
    java.net.SocketTimeoutException: Read timed out
    + S8211821: PrintStringTableStatistics crashes JVM
    + S8212173: Thread._stack_base/_stack_size initialized too late
    for new threads
    + S8212232: Wrong metadata for the configuration of the cutoff
    for old object sample events
    + S8212233: javadoc fails on jdk12 with "The code being
    documented uses modules but the packages defined in $URL are
    in the unnamed module."
    + S8212885: TLS 1.3 resumed session does not retain peer
    certificate chain
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213183: InputMethod cannot be used after its restarting
    + S8213202: Possible race condition in TLS 1.3 session resumption
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213421: Line number information for execution samples
    always 0
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files
    + S8213754: PPC64: Add Intrinsics for
    isDigit/isLowerCase/isUpperCase/isWhitespace
    + S8213782: NullPointerException in
    sun.security.ssl.OutputRecord.changeWriteCiphers
    + S8213829: Remove circular dependency between g1CollectedHeap
    and g1ConcurrentMark
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213966: The ZGC JFR events should be marked as experimental
    + S8213983: [macosx] Keyboard shortcut ?cmd +`? stops working
    properly if popup window is displayed
    + S8214063: OpenJDK will not build on AIX while using the xlc
    13.1 compiler
    + S8214100: use of keystore probing results in unnecessary
    exception thrown
    + S8214118: HeapRegions marked as archive even if CDS mapping
    fails
    + S8214122: JDWP is broken on 32 bit Windows: transport library
    missing onLoad entry
    + S8214129: SSL session resumption/SNI with TLS1.2 causes
    StackOverflowError
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run with
  - XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8214339: SSLSocketImpl erroneously wraps SocketException
    + S8214352: C1: Unnecessary "compilation bailout: block join
    failed" with JVMTI
    + S8214451: PPC64/s390: Clean up unused CRC32 prototype and
    function
    + S8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + S8214688: TLS 1.3 session resumption with hello retry request
    failed with "illegal_parameter"
    + S8214827: Incorrect call
    ClassLoaders.toFileURL("jrt:/java.compiler")
    + S8215100: AArch64: fix compareTo intrinsic with four-character
    Latin/Unicode
    + S8215175: Inconsistencies in JFR event metadata
    + S8215202: AArch64: jtreg test
    test/jdk/sun/nio/cs/FindEncoderBugs.java fails
    + S8215317: [GRAAL] unit test CheckGraalIntrinsics failed after
    8213754
    + S8215330: javax.xml.catalog.CatalogResolverImpl:
    GroupEntry.matchURI fails to match
    + S8215362: JFR GTest JfrTestNetworkUtilization fails
    + S8215397: jsig.c missing classpath exception
    + S8215727: Restore JFR thread sampler loop to old / previous
    behavior
    + S8215947: JVM crash with -XX:+DumpSharedSpaces
    + S8215951: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8215962: Support ThreadPriorityPolicy mode 1 for non-root
    users on linux/bsd
    + S8216049: stringTable::intern creates redundant String when
    looking up existing one
    + S8216060: [PPC64] Vector CRC implementation should be used by
    interpreter and be faster for short arrays
    + S8216280: Allow later Symantec Policy distrust date for two
    Apple SubCAs
    + S8216302: StackTraceElement::fill_in can use cached Class.name
    + S8216308: StackTraceElement::fill_in can use injected Class
    source-file
    + S8216350: AArch64: monitor unlock fast path not called
    + S8216546: Support new Japanese era in java.lang.Character for
    Java SE 11
    + S8216578: Remove unused/obsolete method in JFR code
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217014: Epsilon should not ignore Metadata GC causes
    + S8217315: Proper units should print more significant digits
    + S8217321: [TESTBUG] utilities/test_globalDefinitions.cpp
    should use _LP64, not LP64
    + S8217342: Build failed with excluding JFR
    + S8217378: UseCriticalCMSThreadPriority is broken
    + S8217427: (dc) nio/channels/DatagramChannel/UseDGWithIPv6.java
    fails without IPv6
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217459: [PPC64] Cleanup non-vector version of CRC32
    + S8217471: [TESTBUG] gc/epsilon/TestClasses.java fails on some
    platforms - OOME Metaspace
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after
    8211883
    + S8217597: [TESTBUG] old version docker does not support --cpus
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217628: Verbose ArrayIndexOutOfBoundsException message also
    in JNI calls.
    + S8217657: Move the test for default value of
    jdk.includeInExceptions into own test
    + S8217994: os::print_hex_dump should be more resilient against
    unreadable memory
    + S8218156: "jcmd VM.metaspace basic" misreports free chunk
    space
    + S8218192: Remove copy constructor for MemRegion
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219251: Langtools tests default memory size needs to be 768m
    + S8219260: Default number of test jobs needs to be consistently
    calculated
    + S8219461: Bump update version for OpenJDK jdk11.0.3
    + S8219650: [Testbug] Fix potential crashes in new test hotspot
    gtest "test_print_hex_dump"
    + S8219651: compiler/ciReplay/TestServerVM.java is failing on
    windows
    + S8219714: [testbug] com/sun/jdi/RedefineNestmateAttr/
    /TestNestmateAttr.java must pass classpath to subprocess
    + S8219789: [TESTBUG] TestOptionsWithRanges.java produces
    hs_err_pidXXXXX.log file for
    VMThreadStackSize=9007199254740991
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8220283: ZGC fails to build on GCC 4.4.7: ATTRIBUTE_ALIGNED
    compatibility issue
    + S8220294: ZGC fails to build on GCC 4.4.7: Type parameter
    issue
    + S8221769: Revert JDK-8221767 mistakenly pushed to jdk11u
    11.0.3
- Modified patch:
  * java11-improved-fonts.patch
    + Adapted to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556020800">- Require update-ca-certificates by the headless subpackage
  (bsc#1131378)
- Removed patch:
  * java11-improved-fonts.patch
    + broken with the recent changes in font rendering</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1559649600">- Provide and Obsolete the corresponding java-10-openjdk-&lt;sub&gt;
  packages to assure smooth upgrade (fate#326347, bsc#1137264)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Added patch:
  * JDK-8208602.patch
    + Backport upstream fix for JDK-8208602: Cannot read PEM X.509
    cert if there is whitespace after the header or footer
    (bsc#1140461)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328001">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563364800">- Update to upstream tag jdk-11.0.4+11 (July 2019 CPU)
  * Security fixes
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219775: Certificate validation improvements
    + S8220517: Enhanced GIF support
    + S8221345, CVE-2019-2818, bsc#1141788: Better Poly1305 support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8222678, CVE-2019-2821, bsc#1141781: Improve TLS negotiation
  * Other fixes
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8163805: hotspot/test/serviceability/sa/sadebugd/
    /SADebugDTest.java failed with timed out
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8174691: [TESTBUG] A number of native hotspot unit tests
    fail when executed in stand-alone mode
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
    + S8181143: Introduce diagnostic flag to abort VM on too long
    VM operations
    + S8188133: C2: Static field accesses in clinit can trigger
    deoptimizations
    + S8190361: Incorrect version info in jaccessinspector.exe and
    jaccesswalker.exe
    + S8195793: Remove GTE CyberTrust Global Root
    + S8200286: (testbug) MOptionTest test fails with
    java.lang.AssertionError: Classfiles too old!
    + S8200613: SA: jstack throws UnmappedAddressException with a
    CDS core file
    + S8201317: X25519/X448 code improvements
    + S8201633: Problems with AES-GCM native acceleration
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8202794: Native Unix code should use readdir rather than
    readdir_r
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8204308: SA: serviceability/sa/TestInstanceKlassSize*.java
    fails when running in CDS mode
    + S8205574: Loop predication "assert(f &lt;= 1 &amp;&amp; f &gt;= 0) failed
    Incorrect frequency"
    + S8205611: Improve the wording of LinkageErrors to include
    module and class loader information
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207340: (fs) UnixNativeDispatcher close and readdir usages
    should be fixed
    + S8207748: Fix for 8202794 breaks tier1 builds
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8208634: Add x-IBM-1129 charset
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208702: javax/swing/reliability/
    /HangDuringStaticInitialization.java may hang on macos
    + S8208996: X11 icon window color handing bug
    + S8209055: c.s.t.javac.code.DeferredCompletionFailureHandler
    seems to use WeakHashMap incorrectly
    + S8209414: AArch64: method handle invocation does not respect
    JVMTI interp_only mode
    + S8209415: Fix JVMTI test failure HS202
    + S8209573: [TESTBUG] gc/epsilon/TestMemoryMXBeans should retry
    on failure
    + S8209914: javadoc search sometimes generates bad URIs
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8210008: custom extension for make/SourceRevision.gmk
    + S8210197: javac can't tell during speculative attribution if
    a diamond expression is creating an anonymous inner class or
    not
    + S8210283: Support git as an SCM alternative in the build
    + S8210320: PPC64: Fix uninitialized variable in C1 LIR
    assembler code
    + S8210457: JVM crash in ResolvedMethodTable::add_method(Handle)
    + S8210483: AssertionError in DeferredAttr at setOverloadKind
    caused by JDK-8203679
    + S8210519: build/releaseFile/CheckSource.java failed additional
    sources found
    + S8210739: Calling JSpinner's setFont with null throws
    NullPointerException
    + S8210782: Upgrade HarfBuzz to the latest 2.3.1
    + S8210803: Compilation failure in codeBlob.cpp for Windows
    32-bit
    + S8210837: Add libXrandr-devel to the Linux devkits
    + S8210863: Remove Xrandr include files from JDK sources
    + S8210880: Remove HPKeysym.h from JDK sources
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210899: (zipfs) ZipFileSystem.EntryOutputStreamCRC32
    mistakenly set the crc32 value into size field
    + S8211266: [TESTBUG] ZipFSTester.java failed intermittently in
    ZipFSTester.checkRead(): bound must be positive
    + S8211350: Remove jprt support
    + S8211393: Memory leak issue on awt_InputMethod.c
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211698: Crash in C2 compiled code during execution of
    double array heavy processing code
    + S8211810: X11 Time stamp data should be unsigned
    + S8211826: StringIndexOutOfBoundsException happens via
    GetStringUTFRegion()
    + S8211841: [testbug] sun/nio/cs/OLD/TestIBMDB.java does not
    compile (aix)
    + S8211969: test/jdk/lib/security/CheckBlacklistedCerts.java
    searching for wrong paths
    + S8211971: Move security/cacerts/VerifyCACerts.java and
    security/CheckBlacklistedCerts.java
    + S8212202: [Windows] Exception if no printers are installed.
    + S8212205: VM asserts after CDS archive has been unmapped
    + S8212562: To remove lib/security from test/jdk/TEST.groups
    + S8212676: AWT SystemColor setting on CDE
    + S8212677: X11 default visual support for IM status window on
    VNC
    + S8212678: Windows IME related patch
    + S8212794: IBM-964 is required for AIX default charset
    + S8212828: (process) Provide a way for Runtime.exec to use
    posix_spawn on linux
    + S8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + S8213213: Remove src/java.desktop/unix/classes/sun/awt/
    /X11/keysym2ucs.h
    + S8213232: Unix/X11 setCompositionEnableNative issue
    + S8213292: Input freezes after MacOS key-selector (press&amp;hold)
    usage on macOS Mojave
    + S8213294: Upgrade IANA LSR data
    + S8213515: Improve freetype detection on linux/ppc64/ppc64le/
    /s390x
    + S8213614: DnD operation change feature does not work with
    64bit big endian CPU
    + S8213617: JFR should record the PID of the recorded process
    + S8213618: IBM970 charset has missing entry and remove
    unexpected entries
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8213944: Fix AIX build after the removal of Xrandr.h and add
    a configure check for it
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8214109: XToolkit is not correctly displayed color on 16-bit
    high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the same
    on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8214468: jQuery UI upgrade from 1.11.4 to 1.12.1
    + S8214533: IBM-29626C is required for AIX default charset
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8214935: Upgrade IANA LSR data
    + S8215026: Incorrect amount of memory unmapped with
    ImageFileReader::close()
    + S8215123: Crash in runtime image built with jlink --compress=2
    + S8215284: Reduce noise induced by periodic task getFileSize()
    + S8215296: do not disable c99 on Solaris
    + S8215342: [Zero] Build fails after JDK-8200613
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215374: 32-bit build failures after JDK-8181143 (Introduce
    diagnostic flag to abort VM on too long VM operations)
    + S8215398: -Xlog option usage =&gt; Invalid decorator
    '\temp\app_cds.log'.
    + S8215443: The use of TransportContext.fatal() leads to bad
    coding style
    + S8215472: (zipfs) Cleanups in implementation classes of
    jdk.zipfs and tests
    + S8215707: [macosx] fix pthread_getschedparam and
    pthread_setschedparam calls
    + S8215757: C2: PhaseIdealLoop::create_new_if_for_predicate()
    computes wrong IDOM
    + S8215790: Delegated task created by SSLEngine throws
    java.nio.BufferUnderflowException
    + S8216045: The size of key_exchange may be wrong on FFDHE
    + S8216355: missing NULL checks in libnet in interface iteration
    and potential resource leak in getMacAddress
    + S8216556: Unnecessary liveness computation with JVMTI
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo
    after JDK-6913047
    + S8216970: condy causes JVM crash
    + S8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak)
    after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
    + S8217094: HttpClient SSL race if a socket IOException is
    raised before ALPN is available
    + S8217263: Automate DashOffset test
    + S8217311: Improve Exception thrown when
    MulticastSocket.setInterface fails on AIX(Unix)
    + S8217564: idempotent protection missing in crc32c.h
    + S8217647: JFR: recordings on 32-bit systems unreadable
    + S8217690: Update public suffix version
    + S8217707: JNICALL declaration breaks Splash screen functions
    + S8217765: Internal Error (javaCalls.cpp:61)
    guarantee(thread-&gt;can_call_java()) failed
    + S8217786: Provide virtualization related info in the hs_error
    file on linux s390x
    + S8217878: ENVELOPING XML signature no longer works in JDK 11
    + S8217879: hs_err should print more instructions in hex dump
    + S8217880: AIX build issue after JDK-8214533
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8218060: JDK-8217786 breaks build due to remaining unused
    function
    + S8218063: JDK-8218060 breaks build for S390
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8218469: JSlider display issue with slider for GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8218618: Program fails when using JDK addressed by UNC path
    and using Security Manager
    + S8218629: XML Digital Signature throws NAMESPACE_ERR exception
    on OpenJDK 11, works 8/9/10
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
    + S8218733: SA: CollectedHeap provides broken implementation for
    used() and capacity()
    + S8218781: Localized names for Japanese era Reiwa in COMPAT
    provider
    + S8218811: replace open by os::open in hotspot coding
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8218960: CONFIG level logging statements printed in
    CLDRCalendarDataProviderImpl.java even when default log Level
    is INFO
    + S8218991: s390: Add intrinsic for GHASH algorithm
    + S8219006: AArch64: Register corruption in slow subtype check
    + S8219011: Implement MacroAssembler::warn method on AArch64
    + S8219112: name_and_sig_as_C_string usages in frame_s390 miss
    ResourceMark
    + S8219335: "failed: unexpected type" assert failure in
    ConnectionGraph::split_unique_types() with unsafe accesses
    + S8219389: Delegated task created by SSLEngine throws
    BufferUnderflowException
    + S8219414: SA: jhsdb jsnap throws UnmappedAddressException with
    core generated by gcore
    + S8219448: split-if update_uses accesses stale idom data
    + S8219460: ppc: adjust NativeGeneralJump::insert_unconditional
    to stack allocated MacroAssembler
    + S8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + S8219574: Minimal VM build failure after JDK-8219414
    + S8219582: PPC: Crash after C1 checkcast patched and GC
    + S8219584: Try to dump error file by thread which causes
    safepoint timeout
    + S8219698: aarch64: SIGILL triggered when specifying
    unsupported hardware features
    + S8219710: Bump update version for OpenJDK: jdk11.0.4
    + S8219746: Provide virtualization related info in the hs_error
    file on linux ppc64 / ppc64le
    + S8219915: [TESTBUG] Fix test langtools/tools/javac/processing/
    /model/completionfailure/SymbolsDontCumulate.java in
    Standalone mode
    + S8219918: ProblemList hotspot tests failing in SAP testing.
    + S8220165: Encryption using GCM results in RuntimeException-
    input length out of bound
    + S8220166: Performance regression in deserialization (4-6% in
    SPECjbb)
    + S8220198: Lots of com/sun/crypto/provider/Cipher tests fail
    on x86_32 due to missing SHA512 stubs
    + S8220281: IBM-858 alias name is missing on IBM00858 charset
    + S8220293: Deadlock in JFR string pool
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220353: [TESTBUG] TestRegisterRestoring uses SafepointALot
    without UnlockDiagnosticVMOptions
    + S8220374: C2: LoopStripMining doesn't strip as expected
    + S8220441: [PPC64] Clobber memory effect missing for memory
    barriers in atomics
    + S8220495: Update GIFlib library to the 5.1.8
    + S8220513: Wrapper Key may get deleted when closing sessions in
    SunPKCS11 crypto provider
    + S8220625: tools/javac/classreader/8171132/
    /BadConstantValue.java failed with "did not see expected
    error"
    + S8220707: [TESTBUG] serviceability/sa/
    /TestHeapDumpForLargeArray.java fails with jtreg
  - vmoption:-Xmx &lt; 8g
    + S8220714: C2 Compilation failure when accessing off-heap
    memory using Unsafe
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8220781: linux-s390 : os::get_summary_cpu_info gives bad
    output
    + S8220794: PPC64: Fix signal handler for SIGSEGV on branch to
    illegal address
    + S8221083: [ppc64] Wrong oop compare in C1-generated code
    + S8221175: Fix bad function case for controlled JVM crash on
    PPC64 big-endian
    + S8221244: Unexpected behavior of
    PropertyDescription.getReadMethod for boolean properties
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221304: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java
    + S8221400: java/lang/String/StringRepeat.java test requests
    too much heap
    + S8221401: java/math/BigInteger/LargeValueExceptions.java test
    should be disabled on 32-bit platforms
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8221437:
    assert(java_lang_invoke_ResolvedMethodName::vmtarget(resolved_method())
    == m()) failed: Should not change after link resolution
    + S8221470: Print methods in exception messages in java-like
    Syntax.
    + S8221479: Fix JFR profiling on s390
    + S8221483: TestOopCmp.java fails due to "Multiple garbage
    collectors selected"
    + S8221535: add steal tick related information to hs_error file
    [linux]
    + S8221610: Resurrect (legacy) JRE bundle target
    + S8221639: [i386] expand_exec_shield_cs_limit workaround is
    undefined code after JDK-8199717
    + S8221833: Readability check in Symbol::is_valid not performed
    for some addresses
    + S8221870: use driver to run CtwRunner in applications/ctw
    tests
    + S8221880: Better customization for Windows RC properties
    FileDescription and ProductName
    + S8221915: cleanup ticks related coding in os_perf_aix.cpp
    [aix]
    + S8221917: serviceability/sa/TestPrintMdo.java fails on 32-bit
    platforms
    + S8221924: get(null) on single-entry unmodifiable Map returns
    null instead of throwing NPE
    + S8222027: java/util/logging/LogManager/TestLoggerNames.java
    generates intermittent ClassCastException
    + S8222032: x86_32 fails with "wrong size of mach node" on
    AVX-512 machine
    + S8222089: [TESTBUG] sun/security/lib/cacerts/
    /VerifyCACerts.java fails due to cert within 90-day expiry
    window
    + S8222133: Add temporary exceptions for root certs that are
    due to expire soon
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8222397: x86_32 tests with UseSHA1Intrinsics SEGV due to
    garbled registers
    + S8222410: java/nio/file/attribute/BasicFileAttributeView/
    /UnixSocketFile hangs when "nc" does not accept "-U"
    + S8222522: Add configure options for Mac Bundle creation
    + S8222532: (zipfs) Performance regression when writing
    ZipFileSystem entries in parallel
    + S8222913: Add Jib support for VERSION_EXTRA*
    + S8222930: ConcurrentSkipListMap.clone() shares size variable
    between original and clone
    + S8223266: PPC64: Check for branch to illegal address before
    checking for mem serialization
    + S8223395: PPC64: Improve comments in the JVM signal handler
    to match ISA text
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223555: Cleanups in cacerts tests
    + S8223597: jdk/nio/zipfs/ZipFSTester.java RuntimeException:
    CHECK_FAILED! (getAttribute.crc &lt;entries20&gt; failed 6af4413c
    vs 0 ...)
    + S8223665: SA: debugd options should follow jhsdb style
    + S8224474: harfbuzz 2.3.1 code fails to compile with gcc
    4.4.7
    + S8224671: AArch64: mauve System.arraycopy test failure
    + S8224727: Problem list test security/infra/java/security/cert/
    /CertPathValidator/certification/ActalisCA.java
    + S8224828: aarch64: rflags is not correct after safepoint poll
    + S8224880: AArch64: java/javac error with
    AllocatePrefetchDistance
    + S8225402: events logging in deoptimization.cpp should go to
    deopt-log
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
    + S8226876: Assertion in sun/util/locale/provider/
    /CalendarDataUtility on Windows after JDK-8218960
    + S8226880: Backport of JDK-8208698 (Improved ECC
    Implementation) should not bring parts of JDK-8205476
    (KeyAgreement#generateSecret is not reset for ECDH based
    algorithm)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1571832000">- Update to upstream tag jdk-11.0.5-10 (October 2019 CPU,
  bsc#1154212)
  * Security fixes:
    + S8209901: Canonical file handling
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223886: Add in font table referene
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224062, CVE-2019-2977: Improve String index handling
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Other fixes:
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8076988: reevaluate trivial method policy
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8133489: Better messaging for PKIX path validation matching
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8148188: Enhance the security libraries to record events of
    interest
    + S8163363: AArch64: Stack size in tools/launcher/Settings.java
    needs to be adjusted
    + S8163511: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + S8170639: [Linux] jsig is limited to a maximum of 64 signals
    + S8177899: Tests fail due to code cache exhaustion on machines
    with many cores
    + S8180901: Transformer.reset() resets the state only once
    + S8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + S8194231: java/net/DatagramSocket/ReuseAddressTest.java
    failed with java.net.BindException: Address already in use:
    Cannot bind
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + S8200365: TestOptionsWithRanges.java of
    '-XX:TLABWasteTargetPercent=100' fails intermittently
    + S8200400: Restrict Sasl mechanisms
    + S8202035: Archive the set of ModuleDescriptor and
    ModuleReference objects for observable system modules with
    unnamed initial module.
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8202952: C2: Unexpected dead nodes after matching
    + S8203629: Produce events in the JDK without a dependency on
    jdk.jfr
    + S8204203: Many pkcs11 tests failed in Provider
    initialization, after compiler on Windows changed
    + S8204521: compiler/jsr292/
    /RedefineMethodUsedByMultipleMethodHandles.java fails trying
    to delete temp file
    + S8205421: AARCH64: StubCodeMark should be placed after
    alignment
    + S8205654: serviceability/dcmd/framework/HelpTest.java timed
    out
    + S8206074: nsk/jdi/EventRequestManager/createStepRequest/
    /crstepreq001/TestDescription.java is timing out
    + S8206879: Currency decimal marker incorrect for Peru
    + S8207965: C2-only debug build fails
    + S8208269: Javadoc does not support module-info in a
    multi-release jar
    + S8208499: NMT: Missing memory tag for Safepoint polling page
    + S8208655: use JTreg skipped status in hotspot tests
    + S8208701: Fix for JDK-8208655 causes test failures in CI tier1
    + S8208706: compiler/tiered/ConstantGettersTransitionsTest.java
    fails to compile
    + S8208780: (se) test
    SelectWithConsumer.testReadableAndWriteable(): failure
    + S8209186: Rename SimpleThresholdPolicy to
    TieredThresholdPolicy
    + S8209413: AArch64: NPE in clhsdb jstack command
    + S8209420: Track membars for volatile accesses so they can be
    properly optimized
    + S8209684: Intrinsics that assume some input non null should
    use GraphKit::must_be_not_null()
    + S8209939: [testbug][ppc] Test SafepointPollingPages fails
    after 8208499 with UseSIGTRAP on.
    + S8210063: ZGC: Enable load barriers for IN_NATIVE runtime
    barriers
    + S8210130: java/net/httpclient/UnknownBodyLengthTest.java
    failed
    + S8210314: [aix] NMT does not show "Safepoint" memory type
    + S8210389: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + S8210390: C2 still crashes with "assert(mode ==
    ControlAroundStripMined &amp;&amp; use == sfpt) failed: missed a node"
    + S8210408: Refactor java.util.ResourceBundle:i18n shell tests
    to plain java tests
    + S8210729: Clean up macosx static library handling
    + S8210919: Remove statically linked libjli on Windows
    + S8210926: vmTestbase/nsk/jvmti/scenarios/allocation/AP11/
    /ap11t001/TestDescription.java failed with
    JVMTI_ERROR_INVALID_CLASS in CDS mode
    + S8210985: Update the default SSL session cache size to 20480
    + S8211097: aix: fix build after JDK-8210919
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8211233: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8211727: Adjust default concurrency settings for running
    tests on Sparc
    + S8212528: Wrong cgroup subsystem being used for some CPU
    Container Metrics
    + S8212970: TZ database in "vanguard" format support
    + S8212992: Change mirror accessor in Klass::verify_on() to use
    AS_NO_KEEPALIVE
    + S8213017: jspawnhelper: need to handle pipe write failure
    when sending return code
    + S8213117: adoptNode corrupts attribute values
    + S8213134: AArch64: vector shift failed with MaxVectorSize=8
    + S8213172: CDS and JFR tests fail with
    assert(JdkJfrEvent::is(klass)) failed: invariant
    + S8213325: (props) Properties.loadFromXML does not fully
    comply with the spec
    + S8213406: (fs) More than one instance of built-in FileSystem
    observed in heap
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8213734: SAXParser.parse(File, ..) does not close resources
    when Exception occurs.
    + S8214003: Limit default test jobs based on memory size
    + S8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + S8214161: java.lang.IllegalAccessError: class
    jdk.internal.event.X509CertificateEvent (in module java.base)
    cannot access class jdk.jfr.internal.handlers.EventHandler
    (in module jdk.jfr) because module java.base does not read
    module jdk.jfr
    + S8214287: SpecJbb2005StressModule got uncaught exception
    + S8214579: JFrame does not paint content in XVFB / X11vnc
    environment
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8214777: Avoid some GCC 8.X strncpy() errors in HotSpot
    + S8214857: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8215044: C2 crash in loopTransform.cpp with
    assert(cl-&gt;trip_count() &gt; 0) failed: peeling a fully unrolled
    loop
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8215281: Use String.isEmpty() when applicable in java.base
    + S8215380: Backout accidental change to String::length
    + S8215451: JNI IsSameObject should not keep objects alive
    + S8215483: Off heap memory accesses should be vectorized
    + S8215505: Cleanup jvm.cpp obsolete code after JDK-8210094:
    Better loading of classloader classes
    + S8215534: [testbug] some jfr test don't check @requires
    vm.hasJFR
    + S8215694: keytool cannot generate RSASSA-PSS certificates
    + S8215756: Memory leaks in the AWT on macOS
    + S8215792: AArch64: String.indexOf generates incorrect result
    + S8215879: AArch64: ReservedStackAccess may leave stack guard
    in inconsistent state
    + S8215901: [TESTBUG] TestCheckedEnsureLocalCapacity.java fails
    intermittently
    + S8215961: jdk/jfr/event/os/TestCPUInformation.java fails on
    AArch64
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + S8216046: test/jdk/java/beans/PropertyEditor/Test6397609.java
    failing
    + S8216155: C4819 warning at libfreetype sources on Windows
    + S8216199: Local variable arg defined but never used in
    BCEscapeAnalyzer::compute_escape_for_intrinsic()
    + S8216205: Java API documentation formatting error in
    System.getEnv
    + S8216261: Javap ignores default modifier on interfaces
    + S8216326: SSLSocket stream close() does not close the
    associated socket
    + S8216375: Revert JDK-8145579 after JDK-8076988 is resolved
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8216427: ciMethodData::load_extra_data() does not always
    unpack the last entry
    + S8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + S8216549: Mismatched unsafe access to non escaping object
    fails
    + S8216562: UnknownBodyLength sometimes fails due to
    "Connection reset by peer"
    + S8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + S8216989: CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + S8217093: Support extended-length paths in parse_manifest.c
    on windows
    + S8217344: Make comparison overflow-aware in
    ECDHKeyAgreement.engineGenerateSecret()
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217364: Custom URLStreamHandler for jrt or file protocol
    can override default handler
    + S8217366: ZoneStrings are not populated for all the Locales
    + S8217368: AArch64: C2 recursive stack locking optimisation
    not triggered
    + S8217371: Incorrect LP64 guard in x86.ad after JDK-8210764
    (Update avx512 implementation)
    + S8217576: C1 atomic access handlers use incorrect decorators
    + S8217676: Upgrade libpng to 1.6.37
    + S8217760: C2: Missing symbolic info on a call from intrinsics
    when invoked through MethodHandle
    + S8217766: Container Support doesn't work for some Join
    Controllers combinations
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
    + S8217896: Make better use of LCPUs when building on AIX
    + S8217990: C2 UseOptoBiasInlining: load of markword optimized
    to 0 if running with -XX:-EliminateLocks
    + S8218163: C2: Continuous deoptimization w/
    Reason_speculate_class_check and Action_none
    + S8218185: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218553: Enhance keystore load debug output
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8218566: NMT: missing memory tag for assert poison page
    + S8218581: Incorrect exception message generation
    + S8218682: [TEST_BUG] DashOffset fails in mach5
    + S8218705: Test sun/tools/jcmd/TestJcmdDefaults.java fails on
    Linux
    + S8218715: [TESTBUG]
    TestUseOptoBiasInliningWithoutEliminateLocks needs to unlock
    WhiteBoxAPI
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218723: Use SunJCE Mac in SecretKeyFactory PBKDF2
    implementation
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8218879: Keep track of memory accesses originated from Unsafe
    + S8218966: AArch64: String.compareTo() can read memory after
    string
    + S8219013: Update Apache Santuario (XML Signature) to version
    2.1.3
    + S8219241: Provide basic virtualization related info in the
    hs_error file on linux/windows x86_64
    + S8219244: NMT: Change ThreadSafepointState's allocation type
    from mtInternal to mtThread
    + S8219370: NMT: Move synchronization primitives from
    mtInternal to mtSynchronizer
    + S8219513: compiler/codegen/aes/
    /TestCipherBlockChainingEncrypt.java timeout on Solaris-sparc
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8219562: Line of code in osContainer_linux.cpp L102 appears
    unreachable
    + S8219583: Windows build failure after JDK-8214777 (Avoid some
    GCC 8.X strncpy() errors in HotSpot)
    + S8219635: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + S8219993: AArch64: Compiled CI stubs are unsafely modified
    + S8219997: [TESTBUG] Create test for JFR events in Docker
    container: CPU, Memory and Process Info
    + S8220037: Inconsistencies of generated timezone files between
    Windows and Linux
    + S8220072: GCC 8.3 reports errors in java.base
    + S8220173: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + S8220227: Host Locale Provider getDisplayCountry returns
    error message under non-English Win10
    + S8220313: [TESTBUG] Update base image for Docker testing to
    OL 7.6
    + S8220341: Class redefinition fails with
    assert(!is_unloaded()) failed: unloaded method on the stack
    + S8220355: Improve assertion texts and exception messages in
    eventHandlerVMInit
    + S8220570: Additonal trace when native thread creation fails
    + S8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + S8220657: JFR.dump does not work when filename is set
    + S8220672: [TESTBUG] TestCPUSets should check that cpuset does
    not exceed available cores
    + S8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + S8220682: Heap dumping and inspection fails with JDK-8214712
    + S8220690: ATTRIBUTE_ALIGNED requires GNU extensions enabled
    + S8221120: CopyOnWriteArrayList.set should always have
    volatile write semantics
    + S8221220: AArch64: Add StoreStore membar explicitly for
    Volatile Writes in TemplateTable
    + S8221253: TLSv1.3 may generate TLSInnerPlainText longer than
    2^14+1 bytes
    + S8221325: Add information about swap space to
    print_memory_info() on MacOS
    + S8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + S8221342: [TESTBUG] Generate Dockerfile for docker testing
    + S8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + S8221408: Windows 32bit build build errors/warnings in hotspot
    + S8221411: NullPointerException in RasterPrinterJob without
    PrinterResolution
    + S8221434: Fix typo in lib-x11 autoconf error message about
    missing headers
    + S8221480: jcmd VM.metaspace shall print limits in basic mode
    + S8221497: Optional Panes in Swing
    + S8221527: [TESTBUG] DockerBasicTest.java contains hard-coded
    reference to JDK 10
    + S8221529: [TESTBUG] Docker tests use old/deprecated image on
    AArch64
    + S8221710: [TESTBUG] more configurable parameters for docker
    testing
    + S8221725: AArch64 build failures after JDK-8221408 (Windows
    32bit build build errors/warnings in hotspot)
    + S8221730: jcmd process name matching broken
    + S8221801: Update src/java.base/share/legal/public_suffix.md
    + S8221892: ThreadPoolExecutor: Thread.isAlive() is not
    equivalent to not being startable
    + S8221894: Add comments for docker tests in the test doc
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
    + S8222154: upgrade gtest to 1.8.1
    + S8222280: Provide virtualization related info in the hs_error
    file on AIX
    + S8222299: [TESTBUG] move hotspot container tests to
    hotspot/containers
    + S8222362: Upgrade to Freetype 2.10.0
    + S8222387: Out-of-bounds access to CPU _family_id_xxx array
    + S8222415: Xerces 2.12.0: Parsing Configuration
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8222720: Provide extended VMWare/vSphere virtualization
    related info in the hs_error file on linux/windows x86_64
    + S8222743: Xerces 2.12.0: DOM Implementation
    + S8222914: Partial backport of JDK-8218266
    + S8222968: ByteArrayPublisher is not thread-safe resulting in
    broken re-use of HttpRequests
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8222987: sun/security/tools/keytool/PSS.java times out on
    Solaris-SPARC
    + S8222991: Xerces 2.12.0: Validation
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8223244: Fix usage of ARRAYCOPY_DISJOINT decorator
    + S8223336: Assert in
    VirtualMemoryTracker::remove_released_region when running the
    SharedArchiveConsistency.java test with
  - XX:NativeMemoryTracking=detail
    + S8223482: Unsupported ciphersuites may be offered by a TLS
    client
    + S8223518: Unexpected exception in jjs
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8223553: Fix code constructs that do not compile with the
    Eclipse Java Compiler
    + S8223572: ~ThreadInVMForHandshake() should call
    handle_special_runtime_exit_condition()
    + S8223574: add more thread-related system settings info to
    hs_error file on AIX
    + S8223660: jtreg: Decouple Unsafe from RTM tests
    + S8223814: SA: jhsdb common help needs to be more detailed
    + S8223886: Add in font table referene
    + S8224033: os::snprintf should be used in
    virtualizationSupport.cpp
    + S8224034: [TESTBUG] runtime/ErrorHandlerTest/ErrorHandler
    fails intermittently for case 13 on Windows
    + S8224090: [PPC64] Fix SLP patterns for filling an array with
    double float literals
    + S8224165: [TESTBUG] Docker tests produce excessive output
    + S8224181: On child process spawn, child may write to random
    file descriptor instead of the fail pipe
    + S8224202: Speed up Properties.load
    + S8224221: add memprotect calls to event log
    + S8224230: [PPC64, s390] Support AsyncGetCallTrace
    + S8224252: [TESTBUG]
    hotspot/test/serviceability/sa/sadebugd/SADebugDTest.java is
    timing out again after fix for JDK-8163805
    + S8224487: outputStream should not be copyable
    + S8224531: SEGV while collecting Klass statistics
    + S8224558: Fix replicateB encoding
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8224589: Improve startup behavior of SecurityProperties
    + S8224658: Unsafe access C2 compile fails with assert(flat !=
    TypePtr::BOTTOM) failed: cannot alias-analyze an untyped ptr:
    adr_type = NULL
    + S8224698: ConcurrentSkipListMap.java does not compile with
    the Eclipse Java Compiler
    + S8224825: java/awt/Color/AlphaColorTest.java fails in
    linux-x64 system
    + S8224838: Bump update version for OpenJDK: jdk-11.0.5
    + S8224991: Problemlist
    javax/net/ssl/ServerName/SSLEngineExplorerMatchedSNI.java
    + S8225005: Xerces 2.12.0: License file
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8225178: [Solaris] os::signal() should call sigaction() with
    SA_SIGINFO
    + S8225189: Multiple JNI calls within critical region in ZIP
    Library
    + S8225257: sun/security/tools/keytool/PSS.java timed out
    + S8225286: Better rendering of native glyphs
    + S8225298: Improve TLS connection support
    + S8225347: [s390] Unexpected exit from stack overflow test
    + S8225386: test for JDK-8216261 fails in Windows
    + S8225388: Running jcmd Compiler.CodeHeap_Analytics all 0
    cause crash.
    + S8225390: ProblemList sun/security/pkcs11/sslecc/
    /ClientJSSEServerJSSE.java due to JDK-8161536
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8225543: Jcmd fails to attach to the Java process on Linux
    using the main class name if whitespace options were used to
    launch the process
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
    + S8225636: SA can't handle prelinked libraries
    + S8225644: C1 dumps incorrect class name in ClassCastException
    message
    + S8225663: [testbug] Missing JNIEXPORT in XAbortProvoker
    native function
    + S8225715: jhsdb jmap fails to write binary heap dump of a
    jshell process
    + S8226409: Enable argument profiling for
    sun.misc.Unsafe.put*/get*
    + S8226468: [aix] loadquery failed error message displayed
    + S8226530: ZipFile reads wrong entry size from ZIP64 entries
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + S8227041: runtime/memory/RunUnitTestsConcurrently.java has a
    memory leak
    + S8227117: normal interpreter table is not restored after
    single stepping with TLH
    + S8227247: tools/sjavac/IdleShutdown.java fails with
    AssertionError: Error too big on windows
    + S8227277: HeapInspection::find_instances_at_safepoint walks
    dead objects
    + S8227392: Colors with alpha are painted incorrectly on Linux,
    after JDK-8214579
    + S8227594: sadebugd/DebugdConnectTest.java fails due to
    "java.rmi.NotBoundException: SARemoteDebugger"
    + S8227630: adjust format specifiers in loadlib_aix.cpp
    + S8227834: build.log output from failing commands : include
    the hs_error file path in case of crashes in build
    + S8227869: fix wrong format specifiers in os_aix.cpp
    + S8227919: 8213232 causes crashes on solaris sparc64
    + S8228337: problemList failing/ignored manual tests in
    security-libs
    + S8228400: Remove built-in AArch64 simulator
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8228485: JVM crashes when bootstrap method for condy
    triggers loading of class whose static initializer throws
    ve thread creation fails
    + S8220579: [Containers] SubSystem.ja  exception
    + S8228501: java_props_macosx.c - provide missing CFRelease for
    CFLocaleCopyCurrent
    + S8228578: fix CFData object leak in macosx KeystoreImpl.m
    + S8228585: jdk/internal/platform/cgroup/TestCgroupMetrics.java
  - NumberFormatException because of large long values (memory
    limit_in_bytes)
    + S8228596: Class redefinition fails when condy instructions
    are removed
    + S8228601: AArch64: Fix interpreter code at JVMCI
    deoptimization entry
    + S8228618: s390: c1/c2 fail to add a metadata relocation in
    the static call stub.
    + S8228649: [PPC64] SA reads wrong slots from interpreter frames
    + S8228658: test GetTotalSafepointTime.java fails on fast Linux
    machines with Total safepoint time 0 ms
    + S8228711: Path rendered incorrectly when it goes outside the
    clipping region
    + S8228725: AArch64: Purge method call format support
    + S8228764: New library dependencies due to JDK-8222720
    + S8229118: [TESTBUG] serviceability/sa/ClhsdbFindPC fails on
    AArch64
    + S8229352: Use of an uninitialized register in 32-bit ARM
    template interpreter
    + S8229406: ZGC: Fix incorrect statistics
    + S8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + S8229773: Resolve permissions for code source URLs lazily
    + S8229887: (zipfs) zip file corruption when replacing an
    existing STORED entry
    + S8229925: [s390, PPC64] Exception check missing in interpreter
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8230099: Prepare for backport of JDK-8217368
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230850: Test sun/tools/jcmd/TestProcessHelper.java fails
    intermittently
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
- Modified patch:
  * system-pcsclite.patch
    + adapt to changed context</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1576584000">- Switch back armv6 from zero platform to client JVM</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579089600">- Update to upstream tag jdk-11.0.6+10 (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225261: Better method resolutions
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229728: Implement negotiation parameters
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231780, CVE-2020-2655: Better TLS messaging support
    + S8231790: Provide better FileSystemProviders
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Other changes
    + S8016914: CoreDocumentImpl.setXmlVersion NPE
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
    + S8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + S8144125: [macOS] java/awt/event/ComponentEvent/
    /MovedResizedTwiceTest/MovedResizedTwiceTest.java failed
    automatically
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8176837: SunPKCS11 provider needs to check more details on
    PKCS11 Mechanism
    + S8185898: setRequestProperty(key, null) results in HTTP header
    without colon in request
    + S8190737: use unicode version of the canonicalize() function
    to handle long path on windows
    + S8191521: handle long relative path specified in
  - Xbootclasspath/a on windows
    + S8193255: Root Certificates should be stored in text format
    and assembled at build time
    + S8193325: StackFrameInfo::getByteCodeIndex returns wrong value
    if bci &gt; 32767
    + S8198882: Add 10 JNDI tests to com/sun/jndi/dns/AttributeTests
    + S8200381: Typos in javadoc - missing verb "be" and alike
    + S8202359: [GRAAL] compiler/uncommontrap/TestDeoptOOM.java
    failed with OutOfMemoryError
    + S8205516: JFR tool
    + S8206115: Use shared macros for JavaClasses::compute_offsets
    and MetaspaceShared::serialize_well_known_classes
    + S8207263: Store the Configuration for system modules into CDS
    archive.
    + S8207922: ctw of jdk.security.auth failed with "Unexpected
    zero exit codebefore finishing all compilations"
    + S8208179: Devanagari not shown with logical fonts on Windows
    after removal of Lucida Sans from JDK
    + S8208236: [TESTBUG] vmTestbase/nsk/stress/stack tests fail by
    timeout
    + S8208364: java/lang/reflect/callerCache/
    /ReflectionCallerCacheTest.java missing module dependencies
    declaration
    + S8208582: Introduce native oop barriers in C1 for OopHandle
    + S8208601: Introduce native oop barriers in C2 for OopHandle
    + S8209003: Consolidate use of empty collections in
    java.lang.module
    + S8209120: Archive the Integer.IntegerCache
    + S8209178: Proxied HttpsURLConnection doesn't send BODY when
    retrying POST request
    + S8209545: Simplify HeapShared::archive_module_graph_objects
    + S8209647: constantPoolHandle::constantPoolHandle(ConstantPool*)
    when precompiled header is disabled
    + S8209691: Allow MemBar on single memory slice
    + S8209771: jdk.test.lib.Utils::runAndCheckException error
    + S8209790: SA tools not providing option to connect to debug
    server
    + S8209833: C2 compilation fails with
    "assert(ex_map-&gt;jvms()-&gt;same_calls_as(_exceptions-&gt;jvms()))
    failed: all collected exceptions must come from the same
    place"
    + S8209835: Aarch64: elide barriers on all volatile operations
    + S8209972: [GRAAL] Don't run RTM tests with Graal
    + S8210158: Accessorize JFR getEventWriter() intrinsics
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210387: C2 compilation fails with
    "assert(node-&gt;_last_del == _last) failed: must have deleted
    the edge just produced"
    + S8210403: Refactor java.util.Locale:i18n shell tests to plain
    java tests
    + S8210559: ClassLoaderData Symbols can leak
    + S8210776: Upgrade X Window System 6.8.2 to the latest
    XWD 1.0.7
    + S8210789: langtools/tools/javac/T8152616.java missing @modules
    + S8211037: Load jib jars dynamically from JibArtifactManager
    + S8211147: Incorrect comparator
    com.sun.beans.introspect.MethodInfo.MethodOrder
    + S8211385: (zipfs) ZipDirectoryStream yields a stream of
    absolute paths when directory is relative
    + S8211740: [AOT] -XX:AOTLibrary doesn't accept windows path
    + S8211866: TLS 1.3 CertificateRequest message sometimes offers
    disallowed signature algorithms
    + S8211919: ZipDirectoryStream should provide a stream of paths
    that are relative to the directory
    + S8211992: GraphicsConfiguration.getDevice().getDisplayMode()
    causes JVM crash on Mac
    + S8212028: Use run-test makefile framework for testing in
    Oracle's Mach5
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8212627: [TESTBUG] runtime/CreateMirror/
    /ArraysNewInstanceBug.java timed out
    + S8212673: jtreg/applications/runthese/RunThese30M.java fails
    in C2 with "assert(!had_error) failed: bad dominance"
    + S8212738: Incorrectly named signature scheme
    ecdsa_secp512r1_sha512
    + S8212752: Typo in SSL log message related to inactive/disabled
    signature scheme
    + S8213005: Missing symbols in hs_err files on Windows after
    JDK-8212028
    + S8213008: Cipher with UNWRAP_MODE should support the
    generation of an AES key type
    + S8213014: Crash in CompileBroker::make_thread due to OOM
    + S8213119: [macos] java/awt/GraphicsDevice/
    /CheckDisplayModes.java fails
    + S8213381: Hook to allow GC to inject Node::Ideal() calls
    + S8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + S8213568: Typo in java/awt/GraphicsEnvironment/LoadLock/
    /GE_init5.java
    + S8213604: Fix missing includes after JDK-8212673
    + S8214046: [macosx] Undecorated Frame does not Iconify when
    set to
    + S8214052: [testbug] vmTestbase/vm/compiler/
    /CodeCacheInfoOnCompilation - wrong shell used
    + S8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash
    constructor check backwards.
    + S8214311: dtrace gensrc has missing dependencies
    + S8214315: G1: fatal error: acquiring lock SATB_Q_FL_lock/1 out
    of order with lock tty_lock/0
    + S8214321: Misleading code in SSLCipher
    + S8214542: JFR: Old Object Sample event slow on a deep heap in
    debug builds
    + S8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + S8214773: Replace use of thread unsafe strtok
    + S8214896: JFR Tool left files behind
    + S8214925: JFR tool fails to execute
    + S8214975: No hs-err file if fatal error is raised during
    dynamic initialization
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8215105: java/awt/Robot/HiDPIScreenCapture/
    /ScreenCaptureTest.java: Wrong Pixel Color
    + S8215200: IllegalArgumentException in
    sun.lwawt.macosx.CPlatformWindow
    + S8215411: some GetByteArrayElements calls miss corresponding
    Release
    + S8215449: Several tests failing when jtreg run with
  - vmoption:--illegal-access=deny
    + S8215524: Finished message validation failure should be
    decrypt_error alert
    + S8215699: -Xlog::file cannot be used with named pipe
    + S8215708: ZGC: Add missing LoadBarrierNode::size_of()
    + S8215755: ZGC: split_barrier_thru_phi: check number of inputs
    of phi
    + S8215771: The jfr tool should pretty print reference chains
    + S8215913: [Test_bug]java/util/Locale/LocaleProvidersRun.java
    failed on de_DE and ja_JP locale.
    + S8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + S8216135: C2 assert(!had_error) failed: bad dominance
    + S8216283: Allow shorter method sampling interval than 10 ms
    + S8216363: NullPointerException in
    java.util.logging.Handler#isLoggable
    + S8216426: Usage of array placement new may lead to memory
    corruption
    + S8216561: HttpClient: The logic of retry on connect exception
    is inverted
    + S8216977: ShowHiddenFrames use in
    java_lang_StackTraceElement::fill_in appears broken
    + S8217362: Emergency dump does not work when disk=false is set
    + S8217610: TLSv1.3 fail with ClassException when EC keys are
    stored in PKCS11
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8218468: Load barrier slow path node should be MachTypeNode
    + S8218580: endpoint identification algorithm should be
    case-insensitive
    + S8218935: Make jfr strncpy uses GCC 8.x friendly
    + S8219504: Test for JDK-8211435 can be run on all platforms
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8220175: serviceability/dcmd/framework/VMVersionTest.java
    fails with a timeout
    + S8220231: Cache HarfBuzz face object for same font's text
    layout calls
    + S8220352: Crash with assert(external_guard || result != __null)
    failed: Invalid JNI handle
    + S8220394: bufferedStream does not honor size limit
    + S8220474: Incorrect GPL header in src/java.instrument/share/
    /classes/java/lang/instrument/package-info.java
    + S8220476: Incorrect GPL header in src/jdk.internal.jvmstat/
    /share/classes/sun/jvmstat/perfdata/monitor/protocol/local/
    /PerfDataFile.java
    + S8220528: [AIX] Fix basic Xinerama and Xrender functionality
    + S8220555: JFR tool shows potentially misleading message when
    it cannot access a file
    + S8220598: Malformed copyright year range in a few files in
    java.base
    + S8221092: UseAVX=3 has performance degredation on Skylake (X7)
    processors
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8221395: HttpClient leaving connections in CLOSE_WAIT state
    until Java process ends
    + S8221406: Windows 32bit build error in
    NetworkInterface_winXP.c
    + S8221456: nmethod::make_unloaded() clears _method member too
    early
    + S8221532: Incorrect copyright header in FileSystemSupport_md.c
    + S8221539: [metaspace] Improve MetaspaceObj::is_metaspace_obj()
    and friends
    + S8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + S8221711: [TESTBUG] create more tests for JFR in container
    environment
    + S8221913: Add GC.selected() jtreg-ext function
    + S8222015: Small VM.metaspace improvements
    + S8222440: (zipfs) JarFileSystem does not correctly handle
    versioned entries if no root entry is present
    + S8222529: sun.jdwp.listenerAddress agent property uses wrong
    encoding
    + S8222807: Address iteration with invalid ZIP header entries
    + S8222888: [TESTBUG] docker/TestJFREvents.java fails due to
    "RuntimeException: JAVA_MAIN_CLASS_ is not defined"
    + S8223438: add VirtualizationInformation JFR event
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8223697: jfr tool can't format duration values greater than
    minute
    + S8223869: Problem list java/awt/FontMetrics/
    /MaxAdvanceIsMax.java on more platforms
    + S8224152: [macOS] ProblemList tests that leave rubbish on the
    screen
    + S8224157: BCEL: update to version 6.3.1
    + S8224172: assert(jfr_is_event_enabled(id)) failed: invariant
    + S8224193: stringStream should not use Resouce Area
    + S8224217: RecordingInfo should use textual representation of
    path
    + S8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + S8224505: TestQuotedLogOutput failure after ProcessBuilder
    changes
    + S8224538: LoadBarrierNode::common_barrier must check address
    + S8224958: add os::dll_load calls to event log
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8225225: stringStream internal buffer should always be zero
    terminated
    + S8225392: Comparison builds are failing due to cacerts file
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
    + S8225694: Destination option missing in
    FlightRecorderMXBeanImpl
    + S8225695: 32-bitbuild failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + S8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + S8226513: JEditorPane is shown with incorrect size
    + S8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no
    effect
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8226779: [TESTBUG] Test JFR API from Java agent
    + S8226869: Testjava/util/Locale/LocaleProvidersRun.java should
    enable assertions
    + S8226899: Problemlist compiler/rtm tests
    + S8227031: Print NMT statistics on fatal errors
    + S8227032: MetaspaceUtils::print_report crashes when called
    before initialization
    + S8227035: JVM::printFlags fails in native OOM situations
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227086: Use AS_NO_KEEPALIVE loads in HeapDumper
    + S8227127: Era designator not displayed correctly using the
    COMPAT provider
    + S8227338: templateInterpreter.cpp: copy_table() needs to be
    safer
    + S8227368: EnumSet.class serialization broken in JDK 9+
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227391: Update double-conversion to version 3.1.5
    + S8227397: Add --with-extra-asflags configure option
    + S8227411: TestTimeMultiple.java failed "assert(!lease())
    failed: invariant"
    + S8227435: Perf::attach() should not throw a java.lang.Exception
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8227439: Turn off AOT by default
    + S8227605: Kitchensink fails "assert((((klass)-&gt;trace_id() &amp;
    (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + S8227642: [TESTBUG] Make docker tests podman compatible
    + S8228368: avoid incompatible pointer to integer conversion
    initializing gint in gtk2_interface
    + S8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + S8228465: HOST locale provider holds wrong era name for
    GregorianCalendar in US locale
    + S8228625: [TESTBUG] sun/tools/jhsdb/JShellHeapDumpTest.java
    fails with RuntimeException 'JShellToolProvider' missing from
    stdout/stderr
    + S8228645: Don't run sun/security/pkcs11/Cipher/
    /TestKATForGCM.java on buggy NSS solaris versions
    + S8228687: [TESTBUG] exclude Container tests from hotspot_misc
    group
    + S8228772: C2 compilation fails due to unschedulable graph if
    DominatorSearchLimit is reached
    + S8228834: Regression caused by JDK-8214542 not installing
    complete checkpoint data to candidates
    + S8228835: Memory leak in PKCS11 provider when using AES GCM
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8228902: add os::dll_load to the unified logging os category
    + S8229016: C2 scalarization crashes with assert(node-&gt;Opcode()
    == Op_CastP2X) failed: ConvP2XNode required
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229022: BufferedReader performance can be improved by using
    StringBuilder
    + S8229156: ProblemList gc/stress/gclocker/
    /TestExcessGCLockerCollections.java
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8229182: runtime/containers/docker/TestMemoryAwareness.java
    test fails on SLES12
    + S8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + S8229284: jdk/internal/platform/cgroup/TestCgroupMetrics.java
    fails for - memory:getMemoryUsage
    + S8229408: Bump update version for OpenJDK: jdk-11.0.6
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8229437: assert(is_aligned(ref, HeapWordSize)) failed:
    invariant
    + S8229450: C2 compilation fails with assert(found_sfpt) failed
    + S8229483: Sinking load out of loop may trigger:
    assert(found_sfpt) failed: no node in loop that's not input to
    safepoint
    + S8229496: SIGFPE (division by zero) in C2 OSR compiled method
    + S8229515: [macos] access to window property of NSView on wrong
    thread
    + S8229701: aarch64: C2 OSR compilation fails with "shouldn't
    process one node several times" in final graph reshaping
    + S8229800: WindowsServerCore 1809 does not provide d2d1.dll
    library required by awt.dll
    + S8229810: [macos] NullPointerException getting bounds of
    GraphicsConfiguration
    + S8229872: (fs) Increase buffer size used with getmntent
    + S8229899: Make java.io.File.isInvalid() less racy
    + S8230061: # assert(mode == ControlAroundStripMined
    &amp;&amp; use == sfpt) failed: missed a node
    + S8230062: assert(i == p-&gt;size()-1) failed: must be last
    element of the pack
    + S8230110: TestLinkageErrorInGenerateOopMap times out
    + S8230115: Problemlist JFR TestNetworkUtilization test
    + S8230238: Add another regression test for JDK-8134739
    + S8230303: JDB hangs when running monitor command
    + S8230363:C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8230376: [TESTBUG] runtime/StackTrace/HiddenFrameTest.java
    fails with release VM
    + S8230388: Problemlist additional compiler/rtm tests
    + S8230466: check malloc/calloc results in jdk.hotspot.agent
    + S8230646: Epsilon does not extend TLABs to max size
    + S8230669: [s390] C1: assert(is_bound() || is_unused()) failed:
    Label was never bound to a location, but it was used as a jmp
    target
    + S8230671: x86_32 build failures after JDK-8229496
    + S8230711: ConnectionGraph::unique_java_object(Node* N) return
    NULL if n is not in the CG
    + S8230728: Thin stroked shapes are not rendered if affine
    transform has flip bit
    + S8230769: BufImg_SetupICM add ReleasePrimitiveArrayCritical
    call in early return
    + S8230782: Robot.createScreenCapture() fails if "awt.robot.gtk"
    is set to false
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8230856: Java_java_net_NetworkInterface_getByName0 on unix
    misses ReleaseStringUTFChars in early return
    + S8230861: missing ReleaseStringUTFChars in
    Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + S8230873: [AIX] GUI app does not work with UTF-8 locale on
    minimum software requirements
    + S8230881: serviceability/sa/TestJmapCore tests fail with
    java.lang.RuntimeException: Could not find dump file
    + S8230900: missing ReleaseStringUTFChars in java.desktop native
    code
    + S8230901: missing ReleaseStringUTFChars in serviceability
    native code
    + S8230923: SunJSSE is not properly initialized in FIPS mode
    from a configuration file
    + S8230943: False deadlock detection with
  - XX:+CIPrintCompileQueue after JDK-8163511
    + S8231055: C2: arraycopy with same non escaping src and dest
    but different positions causes wrong execution
    + S8231084: Large performance regression in SwingMark TextArea
    in 14-b13
    + S8231085: C2/GC: Better GC-interface for expanding clone
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231124: Missing closedir call with JDK-8223490
    + S8231201: hs_err should print coalesced safepoint operations
    in Events section
    + S8231222: fix pkcs11 P11_DEBUG guarded native traces
    + S8231223: C2's conditional move optimization fails with
    assert(bol-&gt;Opcode() == Op_Bool) failed
    + S8231247: (zipfs) Test failure in jdk/nio/zipfs/
    /InvalidZipHeaderTests.java after backport of JDK-8222807
    + S8231254: (fs) Add test for macOS Catalina changes to protect
    system software
    + S8231294: ZGC: vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted002 fails
    + S8231296: ZGC: vmTestbase/nsk/jvmti/Allocate/alloc001/ fails
    + S8231318: Several compiler/aot tests fail for JDK11 on Windows
    when only MSVC 2017 is installed
    + S8231336: Corrupted option dialog in JTHarness with JDK14b13
    + S8231403: [ppc]: Align ReservedCodeCacheSize default value
    with other platforms
    + S8231457: Asserts on AIX because os::elapsed_counter() is not
    monotonic
    + S8231503: [TESTBUG] compiler/{jvmci,aot} tests should not run
    with GCs that do not support JVMCI/AOT
    + S8231620: assert(bol-&gt;is_Bool()) crash during split if due to
    FastLockNode
    + S8231665: 8231055 broke escapeAnalysis/TestSelfArrayCopy.java
    + S8231693: Backout "8230728: Thin stroked shapes are not
    rendered if affine transform has flip bit" from jdk11u
    + S8231751: on aix handle Power 9 in os::get_summary_cpu_info
    + S8231770: Test java/util/zip/FlaterTest.java fails with
  - Xcheck:jni
    + S8231885: Fix/remove malformed assert in os_windows.cpp
    + S8231887: ComodoCA.java fails because certificate was revoked
    + S8231930: Windows build fails after JDK-8191521
    + S8231949: [PPC64, s390]: Make async profiling more reliable
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
    + S8231991: Mouse wheel change focus on awt/swing windows
    + S8232005: [s390, PPC64] More exception checks missing in
    interpreter
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8232051: Epsilon should warn about Xms/Xmx/AlwaysPreTouch
    configuration
    + S8232052: use string literal for format string when handling
    PauseAtStartupFile
    + S8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8232539: SIGSEGV in C2 Node::unique_ctrl_out
    + S8232592: &lt;Unknown compiled code&gt; is shown in jstack mixed
    mode
    + S8232874: Add missing test for 8230062
    + S8232879: Writing out data with the Zip File System leads to
    a CRC failure
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233075: JFR - nmetods - misspelled in several places
    + S8233081: C1: PatchingStub for field access copies too much
    + S8233097: Fontmetrics for large Fonts has zero width
    + S8233202: exclude javax/swing/plaf/basic/BasicGraphicsUtils/
    /8132119/bug8132119.java
    + S8233203: fix non-product build on AIX when compiling with
    xlc16/legacy-xlc
    + S8233223: Add Amazon Root CA certificates
    + S8233404: System property to set the number of PBE iterations
    in JCEKS keystores
    + S8233820: Test crashed with assert(phi-&gt;operand_count() != 1
    || phi-&gt;subst() != phi) failed: missed trivial simplification
    + S8233839: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8233954: UnsatisfiedLinkError or NoSuchAlgorithmException
    after removing sunec.dll
    + S8234080: jdk/nio/zipfs/CRCWriteTest.java fails
    + S8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + S8234245: sun/security/lib/cacerts/VerifyCACerts.java fails
    due to wrong checksum
    + S8234321: Call cache flush after generating trampoline.
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8234625: hs test serviceability/sa/ClhsdbCDSCore.java fails
    on macOS 10.15
    + S8234645: ARM32: C1: PatchingStub for field access: not enough
    bytes
    + S8234906: [TESTBUG] TestDivZeroCheckControl fails for client
    VMs due to Unrecognized VM option LoopUnrollLimit
    + S8235142: JDK-8193255 backport broke bootstrap with JDK 10
    + S8235403: Further cleanup to test
    serviceability/sa/ClhsdbCDSCore.java
    + S8235585: Enable macOS codesigning for all libraries and
    executables
    + S8235687: Contents/MacOS/libjli.dylib cannot be a symlink</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580644800">- Install java icons not only versioned, but also postfixed by the
  "openjdk", in order to prevent install conflicts with other
  jdk 11 flavours.</changelog>
  <changelog author="Andreas Schwab &lt;schwab@suse.de&gt;" date="1581595200">- DependOnVariableHelper.patch: Fix DependOnVariableHelper for make 4.3</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1585137600">- Add gcc-fno-common-fix.patch in order to fix
  boo#1167462.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587470400">- Update to upstream tag jdk-11.0.7+10 (April 2020 CPU,
  bsc#1169511)
  * Security fixes:
    + S8223898, CVE-2020-2754: Forward references to Nashorn
    + S8223904, CVE-2020-2755: Improve Nashorn matching
    + S8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + S8224549, CVE-2020-2757: Less Blocking Array Queues
    + S8225603: Enhancement for big integers
    + S8226346: Build better binary builders
    + S8227467: Better class method invocations
    + S8227542: Manifest improved jar headers
    + S8229733: TLS message handling improvements
    + S8231415, CVE-2020-2773: Better signatures in XML
    + S8231785: Improved socket permissions
    + S8232424, CVE-2020-2778: More constrained algorithms
    + S8232581, CVE-2020-2767: Improve TLS verification
    + S8233250: Better X11 rendering
    + S8233410: Better Build Scripting
    + S8234027: Better JCEKS key support
    + S8234408, CVE-2020-2781: Improve TLS session handling
    + S8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + S8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + S8235274, CVE-2020-2805: Enhance typing of methods
    + S8235691, CVE-2020-2816: Enhance TLS connectivity
    + S8236201, CVE-2020-2830: Better Scanner conversions
    + S8238960: linux-i586 builds are inconsistent as the newly
    built jdk is not able to reserve enough space for object heap
  * Other changes:
    + S4919790: Errors in alert ssl message does not reflect the
    actual certificate status
    + S4949105: Access Bridge lacks html tags parsing
    + S7092821: java.security.Provider.getService() is synchronized
    and became scalability bottleneck
    + S7143743: Potential memory leak with zip provider
    + S8005819: Support cross-realm MSSFU
    + S8042383: [TEST_BUG] Test javax/swing/plaf/basic/BasicMenuUI/
    /4983388/bug4983388.java fails with shortcuts on menus do not
    work
    + S8068184: Fix for JDK-8032832 caused a deadlock
    + S8145845: [AOT] NullPointerException in
    compiler/whitebox/GetCodeHeapEntriesTest.java
    + S8152988: [AOT] Update test batch definitions to include
    aot-ed java.base module mode into hs-comp testing
    + S8160926: FLAGS_COMPILER_CHECK_ARGUMENTS doesn't handle
    cross-compilation
    + S8163083: SocketListeningConnector does not allow invocations
    with port 0
    + S8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + S8167276: jvmci/compilerToVM/MaterializeVirtualObjectTest.java
    fails with -XX:-EliminateAllocations
    + S8169718: nsk/jdb/locals/locals002: ERROR: Cannot find
    boolVar with expected value: false
    + S8176556:
    java/awt/dnd/ImageTransferTest/ImageTransferTest.java fails
    for JFIF
    + S8178798: Two compiler/aot/verification/vmflags tests fail by
    timeout with UseAVX=3
    + S8183107: PKCS11 regression regarding checkKeySize
    + S8185005: Improve performance of
    ThreadMXBean.getThreadInfo(long ids[], int maxDepth)
    + S8189633: Missing -Xcheck:jni checking for DeleteWeakGlobalRef
    + S8189861: Refactor CacheFind
    + S8193042: NativeLookup::lookup_critical_entry() should only
    load shared library once
    + S8193596: java/net/DatagramPacket/ReuseBuf.java failed due to
    timeout
    + S8194944: Regression automated test 'open/test/jdk/javax/
    /swing/JInternalFrame/8145896/TestJInternalFrameMaximize.java'
    fails
    + S8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + S8196969: JTreg Failure: serviceability/sa/ClhsdbJstack.java
    causes NPE
    + S8198321: javax/swing/JEditorPane/5076514/bug5076514.java
    fails
    + S8198398: Test javax/swing/JColorChooser/Test6199676.java
    fails in mach5
    + S8199072: Test javax/swing/GroupLayout/6613904/
    /bug6613904.java is unstable
    + S8200432: javadoc fails with ClassCastException on {@link
    byte[]}
    + S8201349: build broken when configured with
  - -with-zlib=bundled on gcc 7.3
    + S8201355: Avoid native memory allocation in
    sun.security.mscapi.PRNG.generateSeed
    + S8201513: nsk/jvmti/IterateThroughHeap/filter-* are broken
    + S8203364: Some serviceability/sa/ tests intermittently fail
    with java.io.IOException: LingeredApp terminated with non-zero
    exit code 3
    + S8203687: javax/net/ssl/compatibility/Compatibility.java
    supports TLS 1.3
    + S8203904: javax/swing/JSplitPane/4816114/bug4816114.java: The
    divider location is wrong
    + S8203911: Test runtime/modules/getModuleJNI/GetModule fails
    with -Xcheck:jni
    + S8204525: [TESTBUG] runtime/NMT/MallocStressTest.java ran out
    of java heap
    + S8204529: gc/TestAllocateHeapAtMultiple.java fail with Agent
    7 timed out
    + S8204551: Event descriptions are truncated in logs
    + S8206963: [AOT] bug with multiple class loaders
    + S8207367: 10 vmTestbase/nsk/jdi tests timed out when running
    with jtreg
    + S8207832: serviceability/sa/ClhsdbCDSCore.java failed with
    "Couldn't find core file location"
    + S8207938: At step6,Click Add button,case failed automatically.
    + S8208157: requires.VMProps throws NPE for missing properties
    in "release" file
    + S8208379: compiler/jvmci/events/
    /JvmciNotifyInstallEventTest.java failed with "Got unexpected
    event count after 2nd install attempt: expected 9 to equal 2"
    + S8208658: Make CDS archived heap regions usable even if
    compressed oop encoding has changed
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8209361: [AOT] Unexpected number of references for
    JVMTI_HEAP_REFERENCE_CONSTANT_POOL [111--&gt;111]: 0 (expected
    at least 1)
    + S8209385: CDS runtime classpath checking is too strict when
    only classes from the system modules are archived
    + S8209389: SIGSEGV in WalkOopAndArchiveClosure::do_oop_work.
    + S8209418: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209494: Create a test for SwingSet InternalFrameDemo
    + S8209499: Create test for SwingSet EditorPaneDemo
    + S8209574: [AOT] breakpoint events are generated in different
    threads does not meet expected count
    + S8209686: cleanup arguments to PhaseIdealLoop() constructor
    + S8209789: Synchronize test/jdk/sanity/client/lib/jemmy with
    code-tools/jemmy/v2
    + S8209802: Garbage collectors should register JFR types
    themselves to avoid build errors.
    + S8209807: improve handling exception in requires.VMProps
    + S8209817: stack is executable when building with Clang on
    Linux
    + S8209824: Improve the code coverage for ThreadLocal
    + S8209826: Undefined reference to os::write after JDK-8209657
    (filemap.hpp cleanup)
    + S8209850: Allow NamedThreads to use GlobalCounter critical
    sections
    + S8209976: Improve iteration over non-JavaThreads
    + S8209993: Create a test for SwingSet3 ToolTipDemo
    + S8210024: JFR calls virtual is_Java_thread from ~Thread()
    + S8210052: Enable testing for all the available look and feels
    in SwingSet3 demo tests
    + S8210055: Enable different look and feel tests in SwingSet3
    demo tests
    + S8210057: Enable different look and feels in SwingSet3 demo
    test InternalFrameDemoTest
    + S8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + S8210220: [AOT] jdwp test cases are failing with error #
    ERROR: TEST FAILED: Cought IOException while receiving event
    packet
    + S8210289: ArchivedKlassSubGraphInfoRecord is incomplete
    + S8210459: Add support for generating compile_commands.json
    + S8210476: sun/security/mscapi/PrngSlow.java fails with Still
    too slow
    + S8210512: [Testbug] vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    fails with unexpected size of
    ClassLoaderReference.referringObjects
    + S8210523: runtime/appcds/cacheObject/DifferentHeapSizes.java
    crash
    + S8210632: Add key exchange algorithm to
    javax/net/ssl/TLSCommon/CipherSuite.java
    + S8210699: Problem list tests which times out in Xcomp mode
    + S8210793: [JVMCI] AllocateCompileIdTest.java failed to find
    DiagnosticCommand.class
    + S8210910: Create test for FileChooserDemo
    + S8210994: Create test for SwingSet3 FrameDemo
    + S8211139: Increase timeout value in all tests under
    jdk/sanity/client/SwingSet/src
    + S8211160: Handle different look and feels in
    JInternalFrameOperator
    + S8211211: vmTestbase/metaspace/stressDictionary/
    /StressDictionary.java timeout
    + S8211322: Reduce the timeout of tooltip in SwingSet2DemoTest
    + S8211443: Enable different look and feels in SwingSet3 demo
    test SplitPaneDemoTest
    + S8211703: JInternalFrame : java.lang.AssertionError: cannot
    find the internal frame
    + S8211781: re-building fails after changing Graal sources
    + S8212897: Some improvements in the EditorPaneDemotest
    + S8212903: [TestBug] Tests test/jdk/javax/swing/LookAndFeel/
    /8145547/DemandGTK2.sh and DemandGTK3.sh fail on Ubuntu 18.04
    LTS
    + S8213009: Refactoring existing SunMSCAPI classes
    + S8213010: Supporting keys created with certmgr.exe
    + S8213168: Enable different look and feel tests in SwingSet3
    demo test FileChooserDemoTest
    + S8213348: jdk.internal.vm.compiler.management service
    providers missing in module descriptor
    + S8213906: Update arm devkits with libXrandr headers
    + S8213908: AssertionError in DeferredAttr at setOverloadKind
    + S8214124: [TESTBUG] Bugs in runtime/NMT/MallocStressTest.java
    + S8214344: C2: assert(con.basic_type() != T_ILLEGAL) failed:
    elembt=byte; loadbt=void; unsigned=0
    + S8214345: infinite recursion while checking super class
    + S8214471: Enable different look and feel tests in SwingSet3
    demo test ToolTipDemoTest
    + S8214534: Setting of THIS_FILE in the build is broken
    + S8214557: Filter out VM flags which don't affect AOT code
    generation
    + S8214578: [macos] Problem with backslashes on macOS/JIS
    keyboard: Java ignores system settings
    + S8214840: runtime/NMT/MallocStressTest.java timed out
    + S8214850: Rename vm_operations.?pp files to vmOperations.?pp
    files
    + S8214904: Test8004741.java failed due to "Too few ThreadDeath
    hits; expected at least 6 but saw only 5"
    + S8215322: add @file support to jaotc
    + S8215355: Object monitor deadlock with no threads holding the
    monitor (using jemalloc 5.1)
    + S8215396: JTabbedPane preferred size calculation is wrong for
    SCROLL_TAB_LAYOUT
    + S8216180: [AOT] compiler/intrinsics/bigInteger/TestMulAdd.java
    crashed with AOT enabled
    + S8216353: Use utility APIs introduced in org/netbeans/jemmy/
    /util/LookAndFeel class in client sanity test cases
    + S8216354: Syntax error in toolchain_windows.m4
    + S8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + S8216535: tools/jimage/JImageExtractTest.java timed out
    + S8217235: Create automated test for SwingSet
    ColorChooserDemoTest
    + S8217297: Add support for multiple look and feel for SwingSet
    SliderDemoTest
    + S8217338: [Containers] Improve systemd slice memory limit
    support
    + S8217613: [AOT] TEST_OPTS_AOT_MODULES doesn't work on mac
    + S8217634: RunTest documentation and usability update
    + S8217717: ZGC: Broken oop map in C1 load barrier stub
    + S8217728: Speed up incremental rerun of "make hotspot"
    + S8218268: Javac treats Manifest Class-Path entries as Paths
    instead of URLs
    + S8218662: Allow 204 responses with Content-Length:0
    + S8218882: NET_Writev is declared, NET_WriteV is defined
    + S8218889: Improperly use of the Optional API
    + S8219205: JFR file without license header
    + S8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
    + S8219723: javax/net/ssl/compatibility/Compatibility.java
    failed on some SNI cases
    + S8220348: [ntintel] asserts about copying unaligned array
    + S8220451: jdi/EventQueue/remove/remove004 failed due to
    "ERROR: thread2 is not alive"
    + S8220456: jdi/EventQueue/remove_l/remove_l004 failed due to
    "TIMEOUT while waiting for event"
    + S8220479: java/nio/channels/Selector/SelectWithConsumer.java
    failed at testTwoChannels()
    + S8220613: java/util/Arrays/TimSortStackSize2.java times out
    with fastdebug build
    + S8220688: [TESTBUG] runtime/NMT/MallocStressTest.java timed
    out
    + S8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + S8221270: Duplicated synchronized keywords in SSLSocketImpl
    + S8221312: test/jdk/sanity/client/SwingSet/src/
    /ColorChooserDemoTest.java failed
    + S8221851: Use of THIS_FILE in hotspot invalidates precompiled
    header on Linux/GCC
    + S8221885: Add intermittent test in the JavaSound to the
    ProblemList
    + S8222264: Windows incremental build is broken with JDK-8217728
    + S8222391: javax/net/ssl/compatibility/Compatibility.java
    should be more flexible
    + S8222448: java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java times out
    + S8222519: ButtonDemoScreenshotTest fails randomly with "still
    state to be reached"
    + S8222741: jdi/EventQueue/remove/remove004 fails due to
    VMDisconnectedException
    + S8223003: SunMSCAPI keys are not cleaned up
    + S8223063: Support CNG RSA keys
    + S8223158: Docked MacBook cannot start any Java Swing
    applications
    + S8223260: NamingManager should cache InitialContextFactory
    + S8223464: Improve version string for Oracle CI builds
    + S8223558: Java does not render Myanmar script correctly
    + S8223627: jdk-13+20 bundle name contains null instead of ea
    + S8223638: Replace wildcard address with loopback or local
    host in tests - part 6
    + S8223678: Add Visual Studio Code workspace generation support
    (for native code)
    + S8223727: com/sun/jndi/ldap/privconn/RunTest.java failed due
    to hang in LdapRequest.getReplyBer
    + S8223769: Assert triggers with -XX:+StressReflectiveCode
    + S8224187: Refactor arraycopy_prologue to allow ZGC read
    barriers on arraycopy
    + S8224475: JTextPane does not show images in HTML rendering
    + S8224673: Adjust permission for delayed starting of debugging
    + S8224705: Tests that need to be problem-listed or have
    printer resources
    + S8224778: test/jdk/demo/jfc/J2Ddemo/J2DdemoTest.java cannot
    find J2Ddemo.jar
    + S8224821: java/awt/Focus/NoAutotransferToDisabledCompTest/
    /NoAutotransferToDisabledCompTest.java fails linux-x64
    + S8224830: test/jdk/java/awt/Focus/
    /ModalExcludedWindowClickTest/
    /ModalExcludedWindowClickTest.java fails on linux-x64
    + S8224851: AArch64: fix warnings and errors with Clang and GCC
    8.3
    + S8224905: java/lang/ProcessBuilder/Basic.java#id1 failed with
    stream closed
    + S8225007: java/awt/print/PrinterJob/
    /LandscapeStackOverflow.java may hang
    + S8225105: java/awt/Focus/ShowFrameCheckForegroundTest/
    /ShowFrameCheckForegroundTest.java fails in Windows 10
    + S8225117: java/math/BigInteger/SymmetricRangeTests.java fails
    with ParseException
    + S8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + S8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + S8225144: [macos] In Aqua L&amp;F backspace key does not delete
    when Shift is pressed
    + S8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + S8225182: JNI exception pending in DestroyXIMCallback of
    awt_InputMethod.c:1327
    + S8225199: [Graal] compiler/jvmci/compilerToVM/
    /IsMatureVsReprofileTest.java fails with
  - XX:CompileThresholdScaling=0.1
    + S8225305: ProblemList java/lang/invoke/VarHandles tests
    + S8225350: compiler/jvmci/compilerToVM/IsCompilableTest.java
    timed out
    + S8225430: Replace wildcard address with loopback or local
    host in tests - part 14
    + S8225435: Upgrade IANA Language Subtag Registry to the latest
    for JDK14
    + S8225487: giflib legal file is missing attribution for
    openbsd-reallocarray.c
    + S8225567: Wrong file headers with 8202414 fix changeset
    + S8225684: [AOT] vmTestbase/vm/oom/production/
    /AlwaysOOMProduction tests fail with AOTed java.base
    + S8225766: Curve in certificate should not affect signature
    scheme when using TLSv1.3
    + S8225797: OldObjectSample event creates unexpected amount of
    checkpoint data
    + S8226381: ProblemList java/lang/reflect/PublicMethods/
    /PublicMethodsTest.java
    + S8226406: JVM fails to detect mismatched or corrupt CDS
    archive
    + S8226608: Hide the onjcmd option from the help output
    + S8226892: ActionListeners on JRadioButtons don't get notified
    when selection is changed with arrow keys
    + S8227112: exclude compiler/intrinsics/sha/sanity tests from
    AOT runs
    + S8227324: Upgrade to freetype 2.10.1
    + S8227528: TestAbortVMOnSafepointTimeout.java failed due to
    "RuntimeException: 'Safepoint sync time longer than' missing
    from stdout/stderr"
    + S8227645: Some tests in serviceability/sa run with fixed -Xmx
    values and risk running out of memory
    + S8227646: [TESTBUG] appcds/SharedArchiveConsistency timed out
    + S8227662: freetype seeks to index at the end of the font data
    + S8228479: Correct the format of ColorChooserDemoTest
    + S8228613: java.security.Provider#getServices order is no
    longer deterministic
    + S8228969: 2019-09-28 public suffix list update
    + S8229236: CriticalJNINatives: dll handling should be done in
    native thread state
    + S8229345: Memory leak due to vtable stubs not being shared on
    SPARC
    + S8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + S8229994: assert(false) failed: Bad graph detected in
    get_early_ctrl_for_expensive
    + S8230004: jdk/internal/jimage/JImageOpenTest.java runs no test
    + S8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + S8230390: Problemlist SA tests with AOT
    + S8230400: Missing constant pool entry for a method in
    stacktrace
    + S8230459: Test failed to resume JVMCI CompilerThread
    + S8230480: check malloc/calloc results in java.desktop
    + S8230597: Update GIFlib library to the 5.2.1
    + S8230611: infinite loop in
    LogOutputList::wait_until_no_readers()
    + S8230624: [TESTBUG] Problemlist JFR
    compiler/TestCodeSweeper.java
    + S8230677: Should disable Escape Analysis if JVMTI capability
    can_get_owned_monitor_info was taken
    + S8230926: [macosx] Two apostrophes are entered instead of one
    with "U.S. International - PC" layout
    + S8231025: Incorrect method tag offset for big endian platform
    + S8231081: TestMetadataRetention fails due to missing symbol id
    + S8231387: java.security.Provider.getService returns random
    result due to race condition with mutating methods in the same
    class
    + S8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + S8231445: check ZALLOC return values in awt coding
    + S8231507: Update Apache Santuario (XML Signature) to version
    2.1.4
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8231753: use more Posix functionality in aix
    os::print_os_info
    + S8231810: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java fails intermittently with
    "java.lang.Exception: Unexpected EOF"
    + S8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + S8232056: GetOwnedMonitorInfoWithEATest.java fails with ZGC:
    Heap too small
    + S8232060: add some initializations using sigemptyset in
    os_aix.cpp
    + S8232154: Update Mesa 3-D Headers to version 19.2.1
    + S8232167: Visual Studio install found through
  - -with-tools-dir value is discarded
    + S8232170: FSInfo#getJarClassPath throws an exception not
    declared in its throws clause
    + S8232200: [macos 10.15] Windows in fullscreen tests jumps
    around the screen
    + S8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + S8232224: [TESTBUG] problemlist JFR TestLargeRootSet.java
    + S8232370: Refactor some com.sun.jdi tests to enable IDE
    integration
    + S8232433: [macos 10.15] java/awt/Window/
    /LocationAtScreenCorner/LocationAtScreenCorner.java may fail
    + S8232571: Add missing SIGINFO signal
    + S8232692: [TESTBUG] compiler/aot/fingerprint/
    /SelfChangedCDS.java fails when cds is disabled
    + S8232713: Update BCEL version to 6.3.1 in license file
    + S8232806: Introduce a system property to disable eager lambda
    initialization
    + S8232834: RunTest sometimes fails to produce valid
    exitcode.txt
    + S8232880: Update test documentation with additional settings
    for client UI tooltip tests
    + S8232950: SUNPKCS11 Provider incorrectly check key length for
    PSS Signatures.
    + S8233018: Add a new test to verify that DatagramSocket is not
    interruptible
    + S8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + S8233032: assert(in_bb(n)) failed: must be
    + S8233078: fix minimal VM build on Linux ppc64(le)
    + S8233328: fix minimal VM build on Linux s390x
    + S8233383: Various minor fixes
    + S8233466: aarch64: remove unnecessary load of mdo when
    profiling return and parameters type
    + S8233491: Crash in AdapterHandlerLibrary::get_adapter with
    CDS due to code cache exhaustion
    + S8233529: loopTransform.cpp:2984: Error: assert(p_f-&gt;Opcode()
    == Op_IfFalse) failed
    + S8233548: Update CUP to v0.11b
    + S8233649: Update ProblemList.txt to exclude failing headful
    tests on macos
    + S8233656: assert(d-&gt;is_CFG() &amp;&amp; n-&gt;is_CFG()) failed: must
    have CFG nodes
    + S8233657: Intermittent NPE in Component.validate()
    + S8234288: Turkey Time Zone returns incorrect time zone name
    + S8234323: NULL-check return value of SurfaceData_InitOps on
    macosx
    + S8234339: replace JLI_StrTok in java_md_solinux.c
    + S8234340: Bump update version for OpenJDK: jdk-11.0.7
    + S8234350: assert(mode == ControlAroundStripMined &amp;&amp; (use ==
    sfpt || !use-&gt;is_reachable_from_root())) failed: missed a node
    + S8234386: [macos] NPE was thrown at expanding Choice from
    maximized frame
    + S8234397: add OS uptime information to os::print_os_info
    output
    + S8234423: Modifying ArrayList.subList().subList() resets
    modCount of subList
    + S8234466: Class loading deadlock involving
    X509Factory#commitEvent()
    + S8234501: remove obsolete NET_ReadV
    + S8234525: enable link-time section-gc for linux s390x to
    remove unused code
    + S8234610: MaxVectorSize set wrongly when UseAVX=3 is
    specified after JDK-8221092
    + S8234617: C1: Incorrect result of field load due to missing
    narrowing conversion
    + S8234723: javax/net/ssl/TLS tests support TLSv1.3
    + S8234724: javax/net/ssl/templates/
    /SSLSocketSSLEngineTemplate.java supports TLSv1.3
    + S8234741: enhance os::get_core_path on macOS
    + S8234769: Duplicate attribution in freetype.md
    + S8234786: Fix for JDK-8214578 breaks OS X 10.12 compatibility
    + S8234809: set relro in linker flags when building with gcc
    + S8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + S8235243: handle VS2017 15.9 and VS2019 in abstract_vm_version
    + S8235288: AVX 512 instructions inadvertently used on Xeon for
    small vector width operations
    + S8235325: build failure on Linux after 8235243
    + S8235383: C1 compilation fails with
  - XX:+PrintIRDuringConstruction -XX:+Verbose
    + S8235489: handle return values of sscanf calls in hotspot
    + S8235509: Backport for JDK-8209657 Refactor filemap.hpp to
    simplify integration with Serviceability Agent.
    + S8235510: java.util.zip.CRC32 performance drop after 8200067
    + S8235563: [TESTBUG] appcds/CommandLineFlagComboNegative.java
    does not handle archive mapping failure
    + S8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + S8235671: enhance print_rlimit_info in os_posix
    + S8235744: PIT: test/jdk/javax/swing/text/html/
    /TestJLabelWithHTMLText.java times out in linux-x64
    + S8235904: Infinite loop when rendering huge lines
    + S8235998: [c2] Memory leaks during tracing after '8224193:
    stringStream should not use Resource Area'.
    + S8236039: JSSE Client does not accept status_request
    extension in CertificateRequest messages for TLS 1.3
    + S8236140: assert(!VerifyHashTableKeys || _hash_lock == 0)
    failed: remove node from hash table before modifying it
    + S8236179: C1 register allocation error with T_ADDRESS
    + S8236488: Support for configure option
  - -with-native-debug-symbols=internal is impossible on Windows
    + S8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + S8236709: struct SwitchRange in HS violates C++ One
    Definition Rule
    + S8236848: [JDK 11u] make run-test-tier1 fails after backport
    of JDK-8232834
    + S8236873: Worker has a deadlock bug
    + S8237217: Incorrect G1StringDedupEntry type used in
    StringDedupTable destructor
    + S8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
    + S8237375: SimpleThresholdPolicy misses CounterDecay timestamp
    initialization
    + S8237508: Simplify JarFile.isInitializing
    + S8237540: Missing files in backport of JDK-8210910
    + S8237541: Missing files in backport of JDK-8236528
    + S8237600: Test SunJSSEFIPSInit fails on Ubuntu
    + S8237819: s390x - remove unused pd_zero_to_words_large
    + S8237869: exclude jtreg test security/infra/java/security/
    /cert/CertPathValidator/certification/LuxTrustCA.java because
    of instabilities
    + S8237879: make 4.3 breaks build
    + S8237945: CTW: C2 compilation fails with
    assert(just_allocated_object(alloc_ctl) == ptr) failed: most
    recent allo...
    + S8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + S8238247: CTW runner should sweep nmethods more aggressively
    + S8238366: CTW runner closes standard output on exit
    + S8238438: SuperWord::co_locate_pack picks memory state of
    first instead of last load
    + S8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
    + S8238534: Deep sign macOS bundles before bundle archive is
    being created
    + S8238591: CTW: Split
    applications/ctw/modules/jdk_localedata.java
    + S8238596: AVX enabled by default for Skylake even when
    unsupported
    + S8238811: C2: assert(i &gt;= req() || i == 0 || is_Region() ||
    is_Phi()) with -XX:+VerifyGraphEdges
    + S8239005: [TESTBUG] test/hotspot/jtreg/runtime/
    /StackGuardPages/TestStackGuardPages.java: exeinvoke.c: must
    initialize static state before calling do_overflow()
    + S8239466: Loss of precision in counter decay calculation in
    11u backport of JDK-8237375
    + S8239856: [ntintel] asserts about copying unaligned array
    element
    + S8240724: [test] jdk11 downport of 8224475 misses binary file
    test/jdk/javax/swing/JTextPane/arrow.png
    + S8241296: Segfault in JNIHandleBlock::oops_do()
- Removed patch:
  * DependOnVariableHelper.patch
    + fixed upstream
- Added patch:
  * JDK-8228407.patch
    + fix crashes due to shared archive file mismatch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1594900800">- Update to upstream tag jdk-11.0.8+10 (July 2020 CPU, bsc#1174157)
  * Security fixes:
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233234: Better Zip Naming
    + JDK-8233239, CVE-2020-14562: Enhance TIFF support
    + JDK-8233255: Better Swing Buttons
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236867, CVE-2020-14573: Enhance Graal interface handling
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238013: Enhance String writing
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240482: Improved WAV file playback
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
  * Other changes:
    + JDK-6933331: (d3d/ogl) java.lang.IllegalStateException:
    Buffers have not been created
    + JDK-7124307: JSpinner and changing value by mouse
    + JDK-8022574: remove HaltNode code after uncommon trap calls
    + JDK-8039082: [TEST_BUG] Test
    java/awt/dnd/BadSerializationTest/BadSerializationTest.java
    fails
    + JDK-8040630: Popup menus and tooltips flicker with previous
    popup contents when first shown
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048215: [TESTBUG]
    java/lang/management/ManagementFactory/ThreadMXBeanProxy.java
    Expected non-null LockInfo
    + JDK-8051349: nsk/jvmti/scenarios/sampling/SP06/sp06t003 fails
    in nightly
    + JDK-8080353: JShell: Better error message on attempting to
    add default method
    + JDK-8139876: Exclude hanging nsk/stress/stack from execution
    with deoptimization enabled
    + JDK-8146090: java/lang/ref/ReachabilityFenceTest.java fails
    with -XX:+DeoptimizeALot
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8156207: Resource allocated BitMaps are often cleared
    unnecessarily
    + JDK-8159740: JShell: corralled declarations do not have
    correct source to wrapper mapping
    + JDK-8175984: ICC_Profile has un-needed, not-empty finalize
    method
    + JDK-8176359: Frame#setMaximizedbounds not working properly in
    multi screen environments
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8189861: Refactor CacheFind
    + JDK-8191169: java/net/Authenticator/B4769350.java failed
    intermittently
    + JDK-8191930: [Graal] emits unparseable XML into compile log
    + JDK-8193879: Java debugger hangs on method invocation
    + JDK-8196019: java/awt/Window/Grab/GrabTest.java fails on
    Windows
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8198000:
    java/awt/List/EmptyListEventTest/EmptyListEventTest.java
    debug assert on Windows
    + JDK-8198001: java/awt/Menu/WrongParentAfterRemoveMenu/
    /WrongParentAfterRemoveMenu.java debug assert on Windows
    + JDK-8198339: Test javax/swing/border/Test6981576.java is
    unstable
    + JDK-8200701: jdk/jshell/ExceptionsTest.java fails on Windows,
    after JDK-8198801
    + JDK-8203264: JNI exception pending in
    PlainDatagramSocketImpl.c:740
    + JDK-8203672: JNI exception pending in PlainSocketImpl.c
    + JDK-8203673: JNI exception pending in
    DualStackPlainDatagramSocketImpl.c:398
    + JDK-8204834: Fix confusing "allocate" naming in OopStorage
    + JDK-8205399: Set node color on pinned HashMap.TreeNode
    deletion
    + JDK-8205653: test/jdk/sun/management/jmxremote/bootstrap/
    /RmiRegistrySslTest.java and RmiSslBootstrapTest.sh fail with
    handshake_failure
    + JDK-8206179: com/sun/management/OperatingSystemMXBean/
    /GetCommittedVirtualMemorySize.java fails with Committed
    virtual memory size illegal value
    + JDK-8207334: VM times out in VM_HandshakeAllThreads::doit()
    with RunThese30M
    + JDK-8208277: Code cache heap (-XX:ReservedCodeCacheSize)
    doesn't work with 1GB LargePages
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8209439: C2 library_call can potentially ignore Math.pow
    intrinsic or use null pointer
    + JDK-8209534: [TESTBUG]runtime/appcds/cacheObject/
    /ArchivedModuleCompareTest.java fails with EnableJVMCI.
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8210284: "assert((av &amp; 0x00000001) == 0) failed:
    unsupported V8" on Solaris 11.4
    + JDK-8210303: VM_HandshakeAllThreads fails assert with
    "failed: blocked and not walkable"
    + JDK-8210459: Add support for generating compile_commands.json
    + JDK-8210515: [TESTBUG]CheckArchivedModuleApp.java needs to
    check if EnableJVMCI is set.
    + JDK-8210788: Javadoc for Thread.join(long, int) should
    specify that it waits forever when both arguments are zero
    + JDK-8211301: [macos] support full window content options
    + JDK-8211332: Space for stub routines (code_size2) is too
    small on new Skylake CPUs
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8211392: compiler/profiling/
    /spectrapredefineclass_classloaders/Launcher.java times out
    in JDK12 CI
    + JDK-8211743: [AOT] crash in ScopeDesc::decode_body() when
    JVMTI walks AOT frames
    + JDK-8212154: [TESTBUG] CheckArchivedModuleApp fails with NPE
    when JVMCI is absent
    + JDK-8212167: JShell : Stack trace of exception has wrong line
    number
    + JDK-8212933: Thread-SMR: requesting a VM operation whilst
    holding a ThreadsListHandle can cause deadlocks
    + JDK-8212986: Make Visual Studio compiler check less strict
    + JDK-8213250: CDS archive creation aborts due to metaspace
    object allocation failure
    + JDK-8213516: jck test api/javax_accessibility/AccessibleState/
    /fields.html fails intermittent
    + JDK-8213947: ARM32: failed check_simd should set
    UsePopCountInstruction to false
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214440: ldap over a TLS connection negotiate failed with
    "javax.net.ssl.SSLPeerUnverifiedException: hostname of the
    server does not match the hostname in the server's
    certificate"
    + JDK-8214444: Wrong strncat limits in dfa.cpp
    + JDK-8214481: freetype path does not disable TrueType hinting
    with AA+FM hints
    + JDK-8214571: -Xdoclint of array serialField gives "error:
    array type not allowed here"
    + JDK-8214856: Errors with JSZip in web console after upgrade
    to 3.1.5
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8215369: Jcstress pollute /var/tmp with temporary files.
    + JDK-8215551: Missing case label in nmethod::reloc_string_for()
    + JDK-8215555: TieredCompilation C2 threads can excessively
    block handshakes
    + JDK-8215711: Missing key_share extension for (EC)DHE key
    exchange should alert missing_extension
    + JDK-8216151: [Graal] Module
    jdk.internal.vm.compiler.management has not been granted
    accessClassInPackage.org.graalvm.compiler.debug
    + JDK-8216154: C4819 warnings at HotSpot sources on Windows
    + JDK-8216541: CompiledICHolders of VM locked unloaded nmethods
    are released too late
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217404: --with-jvm-features doesn't work when multiple
    features are explicitly disabled
    + JDK-8217447: Develop flag TraceICs is broken
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8218807: Compilation database (compile_commands.json) may
    contain obsolete items
    + JDK-8219214: Infinite Loop in CodeSection::dump()
    + JDK-8219904: ClassCastException when calling
    FlightRecorderMXBean#getRecordings()
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8221121: applications/microbenchmarks are encountering
    crashes in tier5
    + JDK-8221445: FastSysexMessage constructor crashes MIDI
    receiption thread
    + JDK-8221482: Initialize VMRegImpl::regName[] earlier to
    prevent assert during PrintStubCode
    + JDK-8221741: ClassCastException can happen when
    fontconfig.properties is used
    + JDK-8221823: Requested JDialog width is ignored
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8223678: Add Visual Studio Code workspace generation
    support (for native code)
    + JDK-8223935: PIT: java/awt/font/WindowsIndicFonts.java fails
    on windows10
    + JDK-8224109: Text spaced incorrectly by drawString under
    rotation with fractional metric
    + JDK-8224632: testbug: java/awt/dnd/RemoveDropTargetCrashTest/
    /RemoveDropTargetCrashTest.java fails on MacOS
    + JDK-8224793: os::die() does not honor CreateCoredumpOnCrash
    option
    + JDK-8224847: gc/stress/TestReclaimStringsLeaksMemory.java
    fails with reserved greater than expected
    + JDK-8224931: disable JAOTC invokedynamic support until
    8223533 is fixed
    + JDK-8224997: ChaCha20-Poly1305 TLS cipher suite decryption
    throws ShortBufferException
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
    + JDK-8225126: Test SetBoundsPaintTest.html faild on Windows
    when desktop is scaled
    + JDK-8225325: Add tests for redefining a class' private method
    during resolution of the bootstrap specifier
    + JDK-8225622: [AOT] runtime/SharedArchiveFile/
    /TestInterpreterMethodEntries.java crashed with AOTed
    java.base
    + JDK-8225653: Provide more information when hitting SIGILL
    from HaltNode
    + JDK-8225783: Incorrect use of binary operators on booleans in
    type.cpp
    + JDK-8225789: Empty method parameter type should generate
    ClassFormatError
    + JDK-8226198: use of &amp; instead of &amp;&amp; in
    LibraryCallKit::arraycopy_restore_alloc_state
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226653: [accessibility] Can edit text cell correctly,
    but Accessibility Tool reads nothing about editor
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8226879: Memory leak in Type::hashcons
    + JDK-8227632: Incorrect PrintCompilation message: made not
    compilable on levels 0 1 2 3 4
    + JDK-8228407: JVM crashes with shared archive file mismatch
    + JDK-8228482: fix xlc16/xlclang comparison of distinct pointer
    types and string literal conversion warnings
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8229158: make UseSwitchProfiling non-experimental or
    false by-default
    + JDK-8229421: The logic of java/net/ipv6tests/TcpTest.java is
    flawed
    + JDK-8229855: C2 fails with assert(false) failed: bad AD file
    + JDK-8230591: AArch64: Missing intrinsics for Math.ceil,
    floor, rint
    + JDK-8231118: ARM32: Math tests failures
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8231243: [TESTBUG] CustomFont.java cannot find font file
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8231550: C2: ShouldNotReachHere() in
    verify_strip_mined_scheduling
    + JDK-8231564: setMaximizedBounds is broken with large display
    scale and multiple monitors
    + JDK-8231572: Use -lobjc instead of -fobjc-link-runtime in
    libosxsecurity
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231671: Fix copyright headers in hotspot (missing comma
    after year)
    + JDK-8231720: Some perf regressions after 8225653
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8231863: Crash if classpath is read from @argument file
    and the main gets option argument
    + JDK-8232080: jlink plugins for vendor information and
    run-time options
    + JDK-8232106: [x86] C2: SIGILL due to usage of SSSE3
    instructions on processors which don't support it
    + JDK-8232134: Change to Visual Studio 2017 15.9.16 for
    building on Windows at Oracle
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8232357: Compare version info of Santuario to legal notice
    + JDK-8232572: Add hooks for custom output dir in Bundles.gmk
    + JDK-8232634: Problem List ICMColorDataTest.java
    + JDK-8232748: Build static versions of certain JDK libraries
    + JDK-8232846: ProcessHandle.Info command with non-English
    shows question marks
    + JDK-8232880: Update test documentation with additional
    settings for client UI tooltip tests
    + JDK-8233033: C2 produces wrong result while unswitching a
    loop due to lost control dependencies
    + JDK-8233137: runtime/ErrorHandling/VeryEarlyAssertTest.java
    fails after 8232080
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8233291: [TESTBUG] tools/jlink/plugins/
    /VendorInfoPluginsTest.java fails with debug or non-server VMs
    + JDK-8233364: Fix undefined behavior in
    Canonicalizer::do_ShiftOp
    + JDK-8233494: Avoid calling MallocTracker::record_malloc and
    record_free when NMT is off
    + JDK-8233573: Toolkit.getScreenInsets(GraphicsConfiguration)
    may throw ClassCastException
    + JDK-8233608: Minimal build broken after JDK-8233494
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8233696: [TESTBUG]Some jtreg tests fail when CAPS_LOCK is
    ON
    + JDK-8233707: systemScale.cpp could not compile with VS2019
    + JDK-8233801: GCMEmptyIv.java test fails on Solaris 11.4
    + JDK-8233880: Support compilers with multi-digit major version
    numbers
    + JDK-8233920: MethodHandles::tryFinally generates illegal
    bytecode for long/double return type
    + JDK-8234137: The "AutoTestOnTop.java" test may run external
    applications
    + JDK-8234146: compiler/jsr292/
    /ContinuousCallSiteTargetChange.java times out on SPARC
    + JDK-8234184: [TESTBUG] java/awt/Mouse/EnterExitEvents/
    /ModalDialogEnterExitEventsTest.java fails in Windows
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234332: [TESTBUG] java/awt/Focus/DisposedWindow/
    /DisposeDialogNotActivateOwnerTest/
    /DisposeDialogNotActivateOwnerTest.java fails on linux-x64
    nightly
    + JDK-8234398: Replace ID2D1Factory::GetDesktopDpi with
    GetDeviceCaps
    + JDK-8234522: [macos] Crash with use of native file dialog
    + JDK-8234691: Potential double-free in ParallelSPCleanupTask
    constructor
    + JDK-8234696: tools/jlink/plugins/VendorInfoPluginsTest.java
    times out
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8234779: Provide idiom for declaring classes noncopyable
    + JDK-8234824: java/nio/channels/SocketChannel/AdaptSocket.java
    fails on Windows 10
    + JDK-8234968: check calloc rv in libinstrument
    InvocationAdapter
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8235183: Remove the "HACK CODE" in comment
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8235332: TestInstanceCloneAsLoadsStores.java fails with
  - XX:+StressGCM
    + JDK-8235452: Strip mined loop verification fails with
    assert(is_OuterStripMinedLoop()) failed: invalid node class
    + JDK-8235584: UseProfiledLoopPredicate fails with
    assert(_phase-&gt;get_loop(c) == loop) failed: have to be in the
    same loop
    + JDK-8235620: Broken merge between JDK-8006406 and JDK-8003559
    + JDK-8235638: NPE in LWWindowPeer.getOnscreenGraphics()
    + JDK-8235686: Add more custom hooks in Bundles.gmk
    + JDK-8235739: Rare NPE at WComponentPeer.getGraphics()
    + JDK-8235762: JVM crash in SWPointer during C2 compilation
    + JDK-8235834: IBM-943 charset encoder needs updating
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8235908: omit ThreadPriorityPolicy warning when value is
    set from image
    + JDK-8235984: C2: assert(out-&gt;in(PhiNode::Region) == head ||
    out-&gt;in(PhiNode::Region) == slow_head) failed: phi must be
    either part of the slow or the fast loop
    + JDK-8236211: [Graal] compiler/graalunit/GraphTest.java is
    skipped in all testing
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8236545: Compilation error in mach5
    java/awt/FileDialog/MacOSGoToFolderCrash.java
    + JDK-8236700: Upgrading JSZip from v3.1.5 to v3.2.2
    + JDK-8236759: ShouldNotReachHere in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8236921: Add build target to produce a JDK image suitable
    for a Graal/SVM build
    + JDK-8236953: [macos] JavaFX SwingNode is not rendered on macOS
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8237045: JVM uses excessive memory with -XX:+EnableJVMCI
  - XX:JVMCICounterSize=2147483648
    + JDK-8237055: [TESTBUG] compiler/c2/TestJumpTable.java fails
    with release VMs
    + JDK-8237086: assert(is_MachReturn()) running CTW with fix for
    JDK-8231291
    + JDK-8237192: Generate stripped/public pdbs on Windows for jdk
    images
    + JDK-8237396: JvmtiTagMap::weak_oops_do() should not trigger
    barriers
    + JDK-8237474: Default SSLEngine should create in server role
    + JDK-8237859: C2: Crash when loads float above range check
    + JDK-8237879: make 4.3 breaks build
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8237962: give better error output for invalid OCSP
    response intervals in CertPathValidator checks
    + JDK-8238190: [JVMCI] Fix single implementor speculation for
    diamond shapes.
    + JDK-8238356: CodeHeap::blob_count() overestimates the number
    of blobs
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238575: DragSourceEvent.getLocation() returns wrong
    value on HiDPI screens (Windows)
    + JDK-8238676: jni crashes on accessing it from process exit
    hook
    + JDK-8238721: Add failing client jtreg tests to the Problem
    List
    + JDK-8238738: AudioSystem.getMixerInfo() takes about 30 sec to
    report a gone audio device
    + JDK-8238756: C2: assert(((n) == __null || !VerifyIterativeGVN
    || !((n)-&gt;is_dead()))) failed: can not use dead node
    + JDK-8238765: PhaseCFG::schedule_pinned_nodes cannot handle
    precedence edges from unmatched CFG nodes correctly
    + JDK-8238898: Missing hash characters for header on license
    file
    + JDK-8238942: Rendering artifacts with LCD text and fractional
    metrics
    + JDK-8238985: [TESTBUG] The arrow image is blue instead of
    green
    + JDK-8239000: handle ContendedPaddingWidth in vm_version_ppc
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8239142: C2's UseUniqueSubclasses optimization is broken
    for array accesses
    + JDK-8239224: libproc_impl.c previous_thr may be used
    uninitialized warning
    + JDK-8239351: Give more meaningful InternalError messages in
    Deflater.c
    + JDK-8239365: ProcessBuilder test modifications for AIX
    execution
    + JDK-8239456: vtable stub generation: assert failure (code
    size estimate)
    + JDK-8239457: call ReleaseStringUTFChars before early returns
    in Java_sun_security_pkcs11_wrapper_PKCS11_connect
    + JDK-8239462: jdk.hotspot.agent misses some
    ReleaseStringUTFChars calls in case of early returns
    + JDK-8239557: [TESTBUG] VeryEarlyAssertTest.java validating
    "END." marker at lastline is not always true
    + JDK-8239787: AArch64: String.indexOf may incorrectly handle
    empty strings
    + JDK-8239792: Bump update version for OpenJDK: jdk-11.0.8
    + JDK-8239798: SSLSocket closes socket both socket endpoints on
    a SocketTimeoutException
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8239893: Windows handle Leak when starting processes
    using ProcessBuilder
    + JDK-8239915: Zero VM crashes when handling dynamic constant
    + JDK-8239931: [win][x86] vtable stub generation: assert
    failure (code size estimate) follow-up
    + JDK-8239965: XMLEncoder/Test4625418.java fails due to "Error:
    Cp943 - can't read properly"
    + JDK-8239976: Put JDK-8239965 on the ProblemList.txt
    + JDK-8240073: Fix 'test-make' build target in 11u
    + JDK-8240197: Cannot start JVM when $JAVA_HOME includes CJK
    characters
    + JDK-8240202: A few client tests leave mouse buttons pressed
    + JDK-8240220: IdealLoopTree::dump_head predicate printing is
    broken
    + JDK-8240223: Use consistent predicate order in and with
    PhaseIdealLoop::find_predicate
    + JDK-8240227: Loop predicates should be copied to unswitched
    loops
    + JDK-8240286: [TESTBUG] Test command error in hotspot/jtreg/
    /compiler/loopopts/superword/SumRedAbsNeg_Float.java
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8240529: CheckUnhandledOops breaks NULL check in
    Modules::define_module
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8240603: Windows 32bit compile error after 8238676
    + JDK-8240629: argfiles parsing broken for argfiles with
    comment cross 4096 bytes chunk
    + JDK-8240711: TestJstatdPort.java failed due to
    "ExportException: Port already in use:"
    + JDK-8240786: [TESTBUG] The test java/awt/Window/
    /GetScreenLocation/GetScreenLocationTest.java fails on HiDPI
    screen
    + JDK-8240824: enhance print_full_memory_info on Linux by THP
    related information
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8240905: assert(mem == (Node*)1 || mem == mem2) failed:
    multiple Memories being matched at once?
    + JDK-8240972: macOS codesign fail on macOS 10.13.5 or older
    + JDK-8241445: Fix copyright in
    test/jdk/tools/launcher/ArgFileSyntax.java
    + JDK-8241458: [JVMCI] add mark value to expose
    CodeOffsets::Frame_Complete
    + JDK-8241464: [11u] Backport: make rehashing be a needed
    guaranteed safepoint cleanup action
    + JDK-8241556: Memory leak if -XX:CompileCommand is set
    + JDK-8241568: (fs) UserPrincipalLookupService.lookupXXX
    failure with IOE "Operation not permitted"
    + JDK-8241586: compiler/cpuflags/
    /TestAESIntrinsicsOnUnsupportedConfig.java fails on aarch64
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8241660: Add virtualization information output to hs_err
    file on macOS
    + JDK-8241808: [TESTBUG] The JDK-8039467 bug appeared on macOS
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8241900: Loop unswitching may cause dependence on null
    check to be lost
    + JDK-8241948: enhance list of environment variables printed in
    hs_err file
    + JDK-8241996: on linux set full relro in the linker flags
    + JDK-8242108: Performance regression after fix for JDK-8229496
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8242154: Backport parts of JDK-4947890 to OpenJDK 11u
    + JDK-8242174: [macos] The NestedModelessDialogTest test make
    the macOS unstable
    + JDK-8242239: [Graal] javax/management/generified/
    /GenericTest.java fails: FAILED: queryMBeans sets same
    + JDK-8242294: JSSE Client does not throw SSLException when an
    alert occurs during handshaking
    + JDK-8242379: [TESTBUG] compiler/loopopts/
    /TestLoopUnswitchingLostCastDependency.java fails with
    release VMs
    + JDK-8242470: Update Xerces to Version 2.12.1
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8242541: Small charset issues (ISO8859-16, x-eucJP-Open,
    x-IBM834 and x-IBM949C)
    + JDK-8242626: enhance posix print_rlimit_info
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244520: problemlist
    java/awt/font/Rotate/RotatedFontTest.java on linux
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
    + JDK-8244853: The static build of libextnet is missing the
    JNI_OnLoad_extnet function
    + JDK-8244951: Missing entitlements for hardened runtime
    + JDK-8245047: [PPC64] C2: ReverseBytes + Load always match to
    unordered Load (acquire semantics missing)
    + JDK-8245649: Revert 8245397 backport of 8230591
    + JDK-8246031: SSLSocket.getSession() doesn't close connection
    for timeout/ interrupts
    + JDK-8246613: Choose the default SecureRandom algo based on
    registration ordering
    + JDK-8248505: Unexpected NoSuchAlgorithmException when using
    secure random impl from BCFIPS provider
- Removed patch:
  * JDK-8228407.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to upstream tag jdk-11.0.9-11 (October 2020 CPU,
  bsc#1177943)
  * New features
    + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector
  * Security fixes
    + JDK-8233624: Enhance JNI linkage
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8240124: Better VM Interning
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Other changes
    + JDK-6532025: GIF reader throws misleading exception with
    truncated images
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing an infinite loop
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed
    + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/
    /CloseServerSocket.java fails intermittently with Address
    already in use
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8193367: Annotated type variable bounds crash javac
    + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java
    fails intermittently: Connection reset
    + JDK-8203026: java.rmi.NoSuchObjectException: no such object
    in table
    + JDK-8203281: [Windows] JComboBox change in ui when
    editor.setBorder() is called
    + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to
    resolve_wk_klass
    + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and
    JdbExprTest.sh fail due to timeout
    + JDK-8203928: [Test] Convert non-JDB scaffolding
    serviceability shell script tests to java
    + JDK-8204963: javax.swing.border.TitledBorder has a memory leak
    + JDK-8204994: SA might fail to attach to process with "Windbg
    Error: WaitForEvent failed"
    + JDK-8205534: Remove SymbolTable dependency from
    serviceability agent
    + JDK-8206309: Tier1 SA tests fail
    + JDK-8208281: java/nio/channels/
    /AsynchronousSocketChannel/Basic.java timed out
    + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java
    version - step1
    + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh
    is incorrect
    + JDK-8209342: Problemlist SA tests on Solaris due to Error
    attaching to process: Can't create thread_db agent!
    + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java
    should be marked as headful
    + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with
    timeout
    + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java
    version - step2
    + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with
    ZGC
    + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java
    + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/
    /ap10t001/TestDescription.java failed with ObjectFree:
    GetCurrentThreadCpuTimerInfo returned unexpected error code
    + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java
    version - step3
    + JDK-8210527: JShell: NullPointerException in
    jdk.jshell.Eval.translateExceptionStack
    + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related
    tests
    + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails
    with waitForPrompt timed out after 60 seconds
    + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should
    clarify which output is the pending reply after a timeout
    + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java
    version - step4
    + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java
    fails to find ThreadLocalObject
    + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh
    test
    + JDK-8211694: JShell: Redeclared variable should be reset
    + JDK-8212200: assert when shared java.lang.Object is redefined
    by JVMTI agent
    + JDK-8212629: [TEST] wrong breakpoint in
    test/jdk/com/sun/jdi/DeferredStepTest
    + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57)
  - unexpected. lastLine=52, minLine=52, maxLine=55
    + JDK-8212807: tools/jar/multiRelease/Basic.java times out
    + JDK-8213182: Minimal VM build failure after JDK-8212200
    (assert when shared java.lang.Object is redefined by JVMTI
    agent)
    + JDK-8213214: Set -Djava.io.tmpdir= when running tests
    + JDK-8213275: ReplaceCriticalClasses.java fails with
    jdk.internal.vm.PostVMInitHook not found
    + JDK-8213574: Deadlock in string table expansion when dumping
    lots of CDS classes
    + JDK-8213703: LambdaConversionException: Invalid receiver type
    not a subtype of implementation type interface
    + JDK-8214074: Ghash optimization using AVX instructions
    + JDK-8214491: Upgrade to JLine 3.9.0
    + JDK-8214797: TestJmapCoreMetaspace.java timed out
    + JDK-8215243: JShell tests failing intermitently with
    "Problem cleaning up the following threads:"
    + JDK-8215244: jdk/jshell/ToolBasicTest.java
    testHistoryReference failed
    + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash
    optimization using AVX instructions)
    + JDK-8215438: jshell tool: Ctrl-D causes EOF
    + JDK-8216021: RunTest.gmk might set concurrency level to 1 on
    Windows
    + JDK-8216974: HttpConnection not returned to the pool after
    204 response
    + JDK-8218948: SimpleDateFormat :: format - Zone Names are not
    reflected correctly during run time
    + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is
    too small on new Skylake CPUs
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8221658: aarch64: add necessary predicate for ubfx
    patterns
    + JDK-8221759: Crash when completing "java.io.File.path"
    + JDK-8221918: runtime/SharedArchiveFile/serviceability/
    /ReplaceCriticalClasses.java fails: Shared archive not found
    + JDK-8222074: Enhance auto vectorization for x86
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely
    on hostname command
    + JDK-8223688: JShell: crash on the instantiation of raw
    anonymous class
    + JDK-8223777: In posix_spawn mode, failing to exec()
    jspawnhelper does not result in an error
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8224184: jshell got IOException at exiting with AIX
    + JDK-8224234: compiler/codegen/TestCharVect2.java fails in
    test_mulc
    + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws
    NullPointerException
    + JDK-8225625: AES Electronic Codebook (ECB) encryption and
    decryption optimization using AVX512 + VAES instructions
    + JDK-8226536: Catch OOM from deopt that fails rematerializing
    objects
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8227059: sun/security/tools/keytool/
    /DefaultSignatureAlgorithm.java timed out
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java
    fails due to "exitValue = 6"
    + JDK-8228448: Jconsole can't connect to itself
    + JDK-8228967: Trust/Key store and SSL context utilities for
    tests
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8229815: Upgrade Jline to 3.12.1
    + JDK-8230000: some httpclients testng tests run zero test
    + JDK-8230002: javax/xml/jaxp/unittest/transform/
    /SecureProcessingTest.java runs zero test
    + JDK-8230010: Remove jdk8037819/BasicTest1.java
    + JDK-8230094: CCE in createXMLEventWriter(Result) over an
    arbitrary XMLStreamWriter
    + JDK-8230402: Allocation of compile task fails with assert:
    "Leaking compilation tasks?"
    + JDK-8230767: FlightRecorderListener returns null recording
    + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to
    test/jdk/java/util/zip/EntryCount64k.java
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231586: enlarge encoding space for OopMapValue offsets
    + JDK-8231953: Wrong assumption in assertion in
    oop::register_oop
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232083: Minimal VM is broken after JDK-8231586
    + JDK-8232161: Align some one-way conversion in MS950 charset
    with Windows
    + JDK-8232855: jshell missing word in /help help
    + JDK-8233027: OopMapSet::all_do does oms.next() twice during
    iteration
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8233386: Initialize NULL fields for unused decorations
    + JDK-8233452: java.math.BigDecimal.sqrt() with
    RoundingMode.FLOOR results in incorrect result
    + JDK-8233686: XML transformer uses excessive amount of memory
    + JDK-8233741: AES Countermode (AES-CTR) optimization using
    AVX512 + VAES instructions
    + JDK-8233829: javac cannot find non-ASCII module name under
    non-UTF8 environment
    + JDK-8233958: Memory retention due to HttpsURLConnection
    finalizer that serves no purpose
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8234058: runtime/CompressedOops/
    /CompressedClassPointers.java fails with 'Narrow klass base:
    0x0000000000000000' missing from stdout/stderr
    + JDK-8234149: Several regression tests do not dispose Frame at
    end
    + JDK-8234347: "Turkey" meta time zone does not generate
    composed localized names
    + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/
    /bug6980209.java fails in linux nightly
    + JDK-8234535: Cross compilation fails due to missing CFLAGS
    for the BUILD_CC
    + JDK-8234541: C1 emits an empty message when it inlines
    successfully
    + JDK-8234687: change javap reporting on unknown attributes
    + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK
    11
    + JDK-8236548: Localized time zone name inconsistency between
    English and other locales
    + JDK-8236617: jtreg test containers/docker/
    /TestMemoryAwareness.java fails after 8226575
    + JDK-8237182: Update copyright header for shenandoah and
    epsilon files
    + JDK-8237888: security/infra/java/security/cert/
    /CertPathValidator/certification/LuxTrustCA.java fails when
    checking validity interval
    + JDK-8237977: Further update
    javax/net/ssl/compatibility/Compatibility.java
    + JDK-8238270: java.net HTTP/2 client does not decrease stream
    count when receives 204 response
    + JDK-8238284: [macos] Zero VM build fails due to an obvious
    typo
    + JDK-8238380: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c
    "multiple definition" link errors with GCC10
    + JDK-8238388: libj2gss/NativeFunc.o "multiple definition" link
    errors with GCC10
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits
    with non-zero code
    + JDK-8239083: C1 assert(known_holder == NULL ||
    (known_holder-&gt;is_instance_klass() &amp;&amp;
    (!known_holder-&gt;is_interface() ||
    ((ciInstanceKlass*)known_holder)-&gt;has_nonstatic_concrete_methods())),
    "should be non-static concrete method");
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8240169: javadoc fails to link to non-modular api docs
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8240360: NativeLibraryEvent has wrong library name on
    Linux
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + JDK-8241065: Shenandoah: remove leftover code after
    JDK-8231086
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier:
    java.lang.NullPointerException
    + JDK-8241138: http.nonProxyHosts=* causes
    StringIndexOutOfBoundsException in DefaultProxySelector
    + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark
    + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java
    fails with OOME
    + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8242184: CRL generation error with RSASSA-PSS
    + JDK-8242283: Can't start JVM when java home path includes
    non-ASCII character
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8243029: Rewrite javax/net/ssl/compatibility/
    /Compatibility.java with a flexible interop test framework
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8243389: enhance os::pd_print_cpu_info on linux
    + JDK-8243453: java --describe-module failed with non-ASCII
    module name under non-UTF8 environment
    + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on
    HiDPI screens (Windows)
    + JDK-8244087: 2020-04-24 public suffix list update
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8244164: AArch64: jaotc generates incorrect code for
    compressed OOPs with non-zero heap base
    + JDK-8244196: adjust output in os_linux
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8244287: JFR: Methods samples have line number 0
    + JDK-8244703: "platform encoding not initialized" exceptions
    with debugger, JNI
    + JDK-8244719: CTW: C2 compilation fails with
    "assert(!VerifyHashTableKeys || _hash_lock == 0) failed:
    remove node from hash table before modifying it"
    + JDK-8244729: Shenandoah: remove resolve paths from
    SBSA::generate_shenandoah_lrb
    + JDK-8244763: Update --release 8 symbol information after JSR
    337 MR3
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8245151: jarsigner should not raise duplicate warnings on
    verification
    + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9
    + JDK-8245714: "Bad graph detected in build_loop_late" when
    loads are pinned on loop limit check uncommon branch
    + JDK-8245801: StressRecompilation triggers assert "redundunt
    OSR recompilation detected. memory leak in CodeCache!"
    + JDK-8245832: JDK build make-static-libs should build all JDK
    libraries
    + JDK-8245880: Shenandoah: check class unloading flag early in
    concurrent code root scan
    + JDK-8245981: Upgrade to jQuery 3.5.1
    + JDK-8246027: Minimal fastdebug build broken after JDK-8245801
    + JDK-8246094: [macos] Sound Recording and playback is not
    working
    + JDK-8246153: TestEliminateArrayCopy fails with
  - XX:+StressReflectiveCode
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
    + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest
    fails with AssertionError
    + JDK-8246203: Segmentation fault in verification due to stack
    overflow with -XX:+VerifyIterativeGVN
    + JDK-8246330: Add TLS Tests for Legacy ECDSA curves
    + JDK-8246453: TestClone crashes with "all collected exceptions
    must come from the same place"
    + JDK-8247246: Add explicit ResolvedJavaType.link and expose
    presence of default methods
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8247502: PhaseStringOpts crashes while optimising
    effectively dead code
    + JDK-8247615: Initialize the bytes left for the heap sampler
    + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV
    in SBC2Support::pin_and_expand
    + JDK-8247874: Replacement in VersionProps.java.template not
    working when --with-vendor-bug-url contains '&amp;'
    + JDK-8247979: aarch64: missing side effect of killing flags
    for clearArray_reg_reg
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8248219: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
    + JDK-8248348: Regression caused by the update to BCEL 6.0
    + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to
    jtreg 5.1
    + JDK-8248495: [macos] zerovm is broken due to libffi headers
    location
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on
    Windows
    + JDK-8249159: Downport test rework for SSLSocketTemplate from
    8224650
    + JDK-8249215: JFrame::setVisible crashed with
  - Dfile.encoding=UTF-8 on Japanese Windows.
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is
    not highlighted in GTKLookAndFeel
    + JDK-8249255: Build fails if source code in cygwin home dir
    + JDK-8249277: TestVerifyIterativeGVN.java is failing with
    timeout in OpenJDK 11
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8249560: Shenandoah: Fix racy GC request handling
    + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle
    + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should
    account for corner cases
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8250609: C2 crash in IfNode::fold_compares
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8250755: Better cleanup for
    jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java
    + JDK-8250787: Provider.put no longer registering aliases in
    FIPS env
    + JDK-8250826: jhsdb does not work with coredump which comes
    from Substrate VM
    + JDK-8250827: Shenandoah: needs to reset/finish StringTable's
    dead count before/after parallel walk
    + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check
    the bounds
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java
    test failure
    + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with
    I-U
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251487: Shenandoah: missing detail timing tracking for
    final mark cleaning phase
    + JDK-8252120: compiler/oracle/TestCompileCommand.java
    misspells "occured"
    + JDK-8252157: JDK-8231209 11u backport breaks jmm binary
    compatibility
    + JDK-8252258: [11u] JDK-8242154 changes the default vendor
    + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after
    downport of 8234011
    + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10)
    in JDK 11
    + JDK-8253283: [11u] Test build/translations/
    /VerifyTranslations.java failing after JDK-8252258
    + JDK-8253813: Backout JDK-8244287 from 11u: it causes several
    crashes
- Removed patch:
  * gcc-fno-common-fix.patch
    + not needed any more with this version
- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in jdk 11.0.9</changelog>
</package>
<package pkgid="77f8f5de6a3671f325f18f43a5d48e77cc26ead40902f5291563144caf3f068a" name="java-1_8_0-openj9-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u2732 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
</package>
<package pkgid="5513ec4e8210f0888bf28c1c201ae3fa7c1368528b1b0d69d8c6f9a98f851343" name="java-1_8_0-openj9-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
</package>
<package pkgid="8712cf48eadd60d321b968f74a848007e076fe02a91162ce15b5fcf05ee8cb8e" name="java-1_8_0-openj9-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u2732 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
</package>
<package pkgid="939114e0915b236ad614258575567ced278f15e82bed610c8cccf7e1480d1714" name="java-1_8_0-openj9-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
</package>
<package pkgid="4bf73c82a781e7118ba38a195b4f09c29b4c7ae84dcbaefaa0840d4b1301c1bc" name="java-1_8_0-openj9-demo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.3.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u2732 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
</package>
<package pkgid="3597025fa1d9167a043caebe195040d3030b39cd91b833522304bfed789171d2" name="java-1_8_0-openj9-demo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.3.6.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
</package>
<package pkgid="dacbe7efc4b3256f9ae0269affc050e0d2de9bc619328b7d54c12f13d605fdb9" name="java-1_8_0-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="468aec74814cd4df4a7464d47d5ea46e8d19ab971cc3b3df2e74ad9a0ad42238" name="java-1_8_0-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="9a27c8c63b5327673db1907d3a3513c845f458f14d5561fe0d9fdd4479a32cae" name="java-1_8_0-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="1a6ca74c007b9bedcd1cf299bf8e0cb192d7baa79149b5682706fccffc409024" name="java-1_8_0-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="e5899011da212a1f1d5d36c70e26a1253da4121c4faef177cb332425b28115bd" name="java-1_8_0-openjdk-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="64e4bfc3af6c5a96dbd82d8104e4d14df4f9b22b9cc5a10864e4f3544f83a992" name="java-1_8_0-openjdk-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="9e055adc0ff9936253e637982184c2107779da45b8b2e63e0caf006cccf328df" name="java-1_8_0-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="8904c6dab656ae88ba704e9d00e00c8244141383c04173e172a51cac85bfd0d2" name="java-1_8_0-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="aef39c1dbc05f4da54dbb09db04aa20306534e4f90da6e1d0b845043b15a3625" name="java-1_8_0-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="b0b50c03bb20fc33d4d3ff23ddc2d2ce824b7cb35ba85e8a3286befce2d00b05" name="java-1_8_0-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="4f595b865f1a33bc684775787325a72df5dd0bf413ef671b0b6fb9a969a935d6" name="java-1_8_0-openjdk-debugsource" arch="i586">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="3ce477dc6f4f7940954a3a0d0894af11c0fda3e243e7d918efb22d652cedbd66" name="java-1_8_0-openjdk-debugsource" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="60356926c136d2a707dcd484c355ae2f93c8d9a022113cb4b4ff9e2d8d82459a" name="java-1_8_0-openjdk-demo-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="b067b5f2b3f9f4b3b0ae2d80254c915910f910fb6da5715eda0c9e8008747969" name="java-1_8_0-openjdk-demo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="59a4809e29d75daca9304632861dbf2634941d4d7c5fd7647d4f9e871d2bf555" name="java-1_8_0-openjdk-demo-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="8d8f1ac807ccd719775ae4874234c0c0a108d97f01238ed1638ad42a781edfd6" name="java-1_8_0-openjdk-demo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="41cf28f34ed3bf5b6d71a0798fab690566e4ff02fe956af2c13b523e2b79950b" name="java-1_8_0-openjdk-demo-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="dfee363243cf110368f3f1ad896d8a424d7a7c7bd5a4a4be45c95d3bb149b8b1" name="java-1_8_0-openjdk-demo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="d74f90ba49689142f4f07e72f9ccce7b0b071f9afb490e6d66f3e5678a268699" name="java-1_8_0-openjdk-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="8ed3fec024862149b271b1ee9be525510fa027a8898c9e37d45a81c41811c136" name="java-1_8_0-openjdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="5c667fb88028ce4272a80f88d91bb0b8718f35dfe820d88e8da52faefc32c80a" name="java-1_8_0-openjdk-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="93427aae6cdcff7092b16aef50f7824e875b2f31a5589e0e9fc11a0d65c7d957" name="java-1_8_0-openjdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="2668656ab5358d2354e928e6769321b9561d5e0203348b71d382c91a729c8490" name="java-1_8_0-openjdk-devel-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="91e47aaaae01cf6e79d9abf51d0d49e52fe974cf64e9e7d6100355bd4c7c1861" name="java-1_8_0-openjdk-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="01f11dd847043b5f6ec83365bbbf0d6b284edc0b73e7607cb0e6df3ef4f92e64" name="java-1_8_0-openjdk-headless-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="0bd95b158e429943f55871f7e126e5346fd0026d7a2d5159f2accb3bae84d4eb" name="java-1_8_0-openjdk-headless-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.272" rel="lp152.2.3.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1538136000">- Update to version jdk8u181 (icedtea 3.9.0)
  * Security fixes
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
    + S8197871, CVE-2018-2938, bsc#1101644: Support Derby
    connections
    + S8197925, CVE-2018-2940, bsc#1101645: Better stack walking
    + S8199547, CVE-2018-2952, bsc#1101651: Exception to Pattern
    Syntax
    + S8200666, CVE-2018-2973, bsc#1101656: Improve LDAP support
    + PR3607, CVE-2018-3639: hw: cpu: speculative store bypass
    mitigation
  * New features
    + PR3623: Allow Shenandoah to be used on all architectures
    + PR3624: Sync desktop files with Fedora/RHEL versions again
    + PR3628: Install symlinks to tapsets in SystemTap directory
  * Import of OpenJDK 8 u172 build 11
    + S8031304: Add dcmd to print all loaded dynamic libraries.
    + S8044107: Add Diagnostic Command to list all ClassLoaders
    + S8055755: Information about loaded dynamic libraries is wrong
    on MacOSX
    + S8059036: Implement Diagnostic Commands for heap and
    finalizerinfo
    + S8130400: Test java/awt/image/DrawImage/
    /IncorrectClipXorModeSurface2Surface.java fails with
    ClassCastException
    + S8136356: Add time zone mappings on Windows
    + S8139673: NMT stack traces in output should show mtcomponent
    + S8147542: ClassCastException when repainting after display
    resolution change
    + S8154017: Shutdown hooks are racing against shutdown
    sequence, if System.exit()-calling thread is interrupted
    + S8165466: DecimalFormat percentage format can contain
    unexpected %
    + S8166772: Touch keyboard is not shown for text components on
    a screen touch
    + S8169424: src/share/sample/scripting/scriptpad/src/scripts/
    /memory.sh missing #!
    + S8170358: [REDO] 8k class metaspace chunks misallocated from
    4k chunk Freelist
    + S8170395: Metaspace initialization queries the wrong chunk
    freelist
    + S8176072: READING attributes are not available on TSF
    + S8177721: Improve diagnostics in
    sun.management.Agent#startAgent()
    + S8177758: Regression in java.awt.FileDialog
    + S8183504: 8u131 Win 10, issue with wrong position of Sogou
    IME popup
    + S8184991: NMT detail diff should take memory type into account
    + S8187331: VirtualSpaceList tracks free space on wrong node
    + S8187629: NMT: Memory miscounting in compiler (C2)
    + S8187658: Bigger buffer for GetAdaptersAddresses
    + S8187685: NMT: Tracking compiler memory usage of thread's
    resource area
    + S8187803: JDK part of JavaFX-Swing dialogs appearing behind
    main stage
    + S8187985: Broken certificate number in debug output
    + S8188855: Fix VS10 build after "8187658: Bigger buffer for
    GetAdaptersAddresses"
    + S8189599: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8189646: sun/security/ssl/SSLSocketImpl/
    /SSLSocketCloseHang.java failed with
    "java.net.SocketTimeoutException: Read timed out"
    + S8190442: Backout changes for JDK-8087291 from 8u-dev as it
    didn't use main CR id
    + S8190690: Impact on krb5 test cases in the 8u-CPU nightly
    + S8191969: javac produces incorrect
    RuntimeInvisibleTypeAnnotations length attribute
    + S8192987: keytool should remember real storetype if it is not
    provided
    + S8193156: Need to backout fixes for JDK-8058547, JDK-8055753,
    JDK-8085903
    + S8193807: Avoid UnsatisfiedLinkError on AIX by providing
    empty basic implementations of getSystemCpuLoad and
    getProcessCpuLoad
  * Import of OpenJDK 8 u181 build 13
    + S8038636: speculative traps break when classes are redefined
    + S8051972: sun/security/pkcs11/ec/ReadCertificates.java fails
    intermittently
    + S8055008: Clean up code that saves the previous versions of
    redefined classes
    + S8057570: RedefineClasses() tests fail
    assert(((Metadata*)obj)-&gt;is_valid()) failed: obj is valid
    + S8074373: NMT is not enabled if NMT option is specified after
    class path specifiers
    + S8076117: EndEntityChecker should not process custom
    extensions after PKIX validation
    + S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
    + S8157898: SupportedDSAParamGen.java failed with timeout
    + S8169201: Montgomery multiply intrinsic should use correct
    name
    + S8170035: When determining the ciphersuite lists, there is no
    debug output for disabled suites.
    + S8176183: sun/security/mscapi/SignedObjectChain.java fails on
    Windows
    + S8187045: [linux] Not all libraries in the VM are linked with
  - z,noexecstack
    + S8187635: On Windows Swing changes keyboard layout on a
    window activation
    + S8188223: IfNode::range_check_trap_proj() should handler
    dying subgraph with single if proj
    + S8196224: Even better Internet address support
    + S8196491: Newlines in JAXB string values of SOAP-requests are
    escaped to "&amp;#xa;"
    + S8196854: TestFlushableGZIPOutputStream failing with
    IndexOutOfBoundsException
    + S8197943: Unable to use JDWP API in JDK 8 to debug JDK 9 VM
    + S8198605: Touch keyboard is shown for a non-focusable text
    component
    + S8198606: Touch keyboard does not hide, when a text component
    looses focus
    + S8198794: Hotspot crash on Cassandra 3.11.1 startup with
    libnuma 2.0.3
    + S8199406: Performance drop with Java JDK 1.8.0_162-b32
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8202585: JDK 8u181 l10n resource file update
    + S8202996: Remove debug print statements from RMI fix
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8204874: Update THIRDPARTYREADME file
    + S8205491: adjust reflective access checks
  * Backports
    + S8008321, PR3599: compile.cpp verify_graph_edges uses bool as
    int
    + S8064786, PR3601: Fix debug build after 8062808: Turn on the
  - Wreturn-type warning
    + S8075942, PR3602, RH1582032: ArrayIndexOutOfBoundsException
    in sun.java2d.pisces.Dasher.goTo
    + S8146115, PR3508, RH1463098: Improve docker container
    detection and resource configuration usage
    + S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8203182, PR3603: Release session if initialization of
    SunPKCS11 Signature fails
    + S8206406, PR3610, RH1597825: StubCodeDesc constructor
    publishes partially-constructed objects on StubCodeDesc::_list
    + S8207057, PR3613: No debug info for assembler files
  * Bug fixes
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
    + PR3600: jni_util.c does not import header file which declares
    getLastErrorString
    + PR3601: Fix additional -Wreturn-type issues introduced by
    8061651
    + PR3630: Use ${datadir} when specifying default tz.properties
    location
    + PR3632: IcedTea installing symlinks to SystemTap directory
    rather than individual tapsets
  * AArch64 port
    + S8207345, PR3626: Trampoline generation code reads from
    uninitialized memory
  * Shenandoah
    + PR3619: Shenandoah broken on s390
    + PR3620: Shenandoah broken on ppc64
    + Allocation failure injection machinery
    + [backport] AArch64 shenandoah_store_check should read
    evacuation_in_progress as byte
    + [backport] Account trashed regions from coalesced CM-with-UR
    + [backport] Adaptive collection set selection in adaptive
    policy
    + [backport] Adaptive heuristics accounts trashed cset twice
    + [backport] Adapt upstream object pinning API
    + [backport] Add comments in shenandoah_store_check on direct
    heap field use
    + [backport] Added diagnostic flag ShenandoahOOMDuringEvacALot
    + [backport] Added missing header file for non-PCH build
    + [backport] Add missing barrier in C1 NIOCheckIndex intrinsic
    + [backport] Add new pinned/cset region state for
    evac-failure-path
    + [backport] Add ShenandoahRootProcessor API to report threads
    while scanning roots
    + [backport] Add test to verify Shenandoah is not enabled by
    default, and enabled with the flag
    + [backport] Add -XX:+ShenandoahVerify to more interesting tests
    + [backport] AESCrypt.implEncryptBlock/AESCrypt.implDecryptBlock
    intrinsics assume non null inputs
    + [backport] Allow use of fp spills around write barrier
    + [backport] Arraycopy fixes (tests and infrastructure)
    + [backport] Assert Shenandoah-specific safepoints instead of
    generic ones
    + [backport] Asynchronous region recycling
    + [backport] Avoid notifying about zero waste
    + [backport] barrier moved due to null checks needs to always
    fix memory edges
    + [backport] Basic support for x86_32: build and run in STW
    configuration
    + [backport] Bitmap based ShHeapRegionSet
    + [backport] Break heuristics out from ShCollectorPolicy into
    their own source files
    + [backport] C2 should use heapword-sized object math
    + [backport] Check BS type in immByteMapBase predicate
    + [backport] Cleanup allocation tracking in heuristics
    + [backport] Cleanup and refactor Full GC code
    + [backport] Cleanup and strengthen BrooksPointer verification
    + [backport] Clean up dead code
    + [backport] Cleanup: removed unused code
    + [backport] Cleanup reset_{next|complete}_mark_bitmap
    + [backport] Cleanup SHH::should_start_normal_gc
    + [backport] "Compact" heuristics for dense footprint scenarios
    + [backport] Compact heuristics should not shortcut on
    immediate garbage, but aggressively compact
    + [backport] Conditionalize PerfDataMemorySize on enabled heap
    sampling
    + [backport] Consistent liveness for humongous regions
    + [backport] Control loop should wait before starting another
    GC cycle
    + [backport] Critical native tests should only be ran on x86_64
    platforms
    + [backport] Degenerated GC
    + [backport] Degenerated GC: rename enum, report degen reasons
    in stats
    + [backport] Demote ShenandoahAllocImplicitLive to diagnostic
    + [backport] Demote warning message about OOM-during-evac to
    informational
    + [backport] Denser ShHeapRegion status line
    + [backport] Disable verification from non-Shenandoah VMOps.
    + [backport] Disallow pinned_cset region moves and allocations
    during Full GC
    + [backport] Disambiguate "upgrade to Full GC" GCause
    + [backport] Do not add non-allocatable regions to the freeset
    + [backport] Don't treat allocation regions implicitely live
    during some GCs
    + [backport] Double check for UseShenandoahGC in WB expand
    + [backport] Drop distinction between immediate garbage and
    free in heuristics
    + [backport] Dynamic worker refactoring
    + [backport] Eagerly drop CSet state from regions during Full GC
    + [backport] Eliminate write-barrier assembly stub (part 1)
    + [backport] Enable biased locking for Shenandoah by default
    + [backport] Ensure tasks use correct number of workers
    + [backport] Excessive assert in ShHeap::mark_next
    + [backport] Excessive asserts in marked_object_iterate
    + [backport] FinalEvac pause to turn off evacuation
    + [backport] Fix || and &amp;&amp; chaining warnings in memnode.cpp
    + [backport] Fix broken asserts in ShenandoahSharedEnumFlag
    + [backport] Fixed code roots scanning that might be bypassed
    during degenerated cycle
    + [backport] Fixed compilation error of libTestHeapDump.c on
    Windows with VS2010
    + [backport] Fixed missing ResourceMark in
    ShenandoahAsserts::print_obj
    + [backport] Fixed pinned region handling in mark-compact
    + [backport] Fix (external) heap iteration + TestHeapDump
    should unlock aggressive heuristics
    + [backport] fix for alias analysis with
    ShenandoahBarriersForConst
    + [backport] Fix/improve CLD processing
    + [backport] Fixing Windows and ARM32 build
    + [backport] Fix Mac OS build warnings
    + [backport] Fix Minimal VM build
    + [backport] Fix ShFreeSet boundary case
    + [backport] fix TCK crash with shenandoah
    + [backport] Forcefully update counters when GC cycle is running
    + [backport] FreeSet and HeapRegion should have the reference
    to ShenandoahHeap
    + [backport] FreeSet refactor: bitmaps, cursors, biasing
    + [backport] FreeSet should accept responsibility over trashed
    regions
    + [backport] FreeSet should report its internal state
    before/after GC cycle
    + [backport] Full GC should compact humongous regions
    + [backport] Full GC should not trash empty regions
    + [backport] GC state testers (infra)
    + [backport] Generic verification is possible only at
    Shenandoah safepoints
    + [backport] Get easy on template instantiations in ShConcMark
    + [backport] Heap region sampling should publish region states
    + [backport] Humongous regions should support explicit pinning
    + [backport] Immediate garbage ratio should not go over 100%
    + [backport] Implement flag to generate write-barriers without
    membars
    + [backport] Implement protocol for safe OOM during evacuation
    handling + Use jint in oom-evac-handler to match older JDKs
    Atomic support better + Missing OOMScope in
    ShenandoahFixRootsTask
    + [backport] Improve assertion/verification messages a bit
    + [backport] Improve/more detailed timing stats for root queue
    work
    + [backport] Incorrect constant folding with final field and
  - ShenandoahOptimizeFinals
    + [backport] Increase test timeouts
    + [backport] Introduce assert_in_correct_region to verify
    object is in correct region
    + [backport] Isolate shenandoahVerifier from stray headers
    + [backport] keep read barriers for final instance/stable field
    accesses
    + [backport] Keep track of per-cycle mutator/collector allocs.
    Fix mutator/collector alloc region overlap in traversal.
    + [backport] Little cleanup
    + [backport] Log message on ref processing, class unload,
    update refs for mark events
    + [backport] LotsOfCycles test timeouts
    + [backport] Make concurrent precleaning log message optional
    again
    + [backport] Make control loop more responsive under allocation
    pressure
    + [backport] Make degenerated update-refs use region-set cursor
    to hand over work
    + [backport] Make heap counters update completely asynchronous
    + [backport] Make major GC phases exclusive from each other
    + [backport] Make sure selective barriers enabling/disabling
    works
    + [backport] Make sure -XX:+ShenandoahVerify comes first in the
    tests
    + [backport] Mark bitmap slices commit/uncommit + Aggregated
    bitmap slicing
    + [backport] Match barrier fastpath checks better
    + [backport] Minor cleanups
    + [backport] Minor cleanup, uses latest Atomic API
    + [backport] Move barriers into typeArrayOop.hpp direct memory
    accessors
    + [backport] Move ShHeap::used increment out of locked
    allocation path
    + [backport] No need for fence in control loop: flags are now
    ShSharedVariables
    + [backport] Only report GC pause time to GC MXBean + Re-fix
    memory managers and memory pools usage and pause reporting
    + [backport] Optimize fwdptr region handling in
    ShenandoahVerifyOopClosure::verify_oop
    + [backport] Optimize oop/fwdptr/hr_index verification a bit
    + [backport] overflow integer during size calculation
    + [backport] Pacer should account allocation waste and
    unsuccessful pacing in the budget
    + [backport] Pacer should poll FreeSet to figure out actually
    available space
    + [backport] Passive should opt-in the barriers, not opt-out
    + [backport] Pauses that do not affect heap occupancy should
    not report heap
    + [backport] Print message when heuristics changes the setting
    ergonomically
    + [backport] Protect C2 matchers with UseShenandoahGC
    + [backport] Provide non-taxable allocation slack at the
    beginning of the cycle
    + [backport] Record cycle start/end to avoid continuous
    periodic GC
    + [backport] Record Shenandoah events in hs_err events section
    + [backport] Refactor allocation failure and explicit GC
    handling
    + [backport] Refactor allocation metadata handling
    + [backport] Refactor FreeSet rebuilding into the single source
    + [backport] Refactoring GC phase and heap allocation tracking
    out of policy
    + [backport] Refactor uncommit handling: react on explicit GCs,
    feature kill flag, etc
    + [backport] Refactor worker timings into ShenandoahPhaseTimings
    + [backport] ReferenceProcessor is_alive setup is racy
    + [backport] Region sampling should lock while gathering region
    data
    + [backport] Rehash VMOperations and cycle driver mechanics for
    consistency
    + [backport] Relax assert in SBS::is_safe()
    + [backport] Remove BS:is_safe in favor of logged
    BS::verify_safe_oop
    + [backport] Remove CSetThreshold handling from heuristics
    + [backport] Remove FreeSet::add_region, inline into
    FreeSet::rebuild
    + [backport] Remove obsolete check in FreeSet::allocate
    + [backport] Remove ShenandoahGCWorkerPerJavaThread flag
    + [backport] Remove ShenandoahMarkCompactBarrierSet
    + [backport] Rename and cleanup _regions and _free_set uses
    + [backport] Rename dynamic heuristics to static
    + [backport] Rename *_oop_static/oop_ref to *_forwarded
    + [backport] Rename ShenandoahConcurrentThread to
    ShenandoahControlThread
    + [backport] Report all GC status flags in hs_err
    + [backport] Report fwdptr size in JNI GetObjectSize
    + [backport] Report how much we have failed to allocate during
    Allocation Failure
    + [backport] Report illegal transitions verbosely, and remove
    some no-op transitions
    + [backport] Rewire control loop to avoid double cleanup work
    + [backport] Rework shared bool/enum flags with proper types
    and synchronization
    + [backport] Rewrite and fix
    ShenandoahHeap::marked_object_iterate
    + [backport] Rich assertion failure logging
    + [backport] Roots verification should take the special roots
    first
    + [backport] RP closures should accept NULL referents
    + [backport] Set ShenandoahMinFreeThreshold default to 10%
    + [backport] Setup process references and class unloading once
    before the cycle
    + [backport] ShConcurrentThread races with set_gc_state_bit
    + [backport] Shenandoah critical native support
    + [backport] Shenandoah region/set iterators should not allow
    copying
    + [backport] Shenandoah SA implementation
    + [backport] Shenandoah/SPARC barrier stubs
    + [backport] ShenandoahVerifyOptoBarriers should not fail with
    disabled barriers
    + [backport] ShenandoahWriteBarrierNode::find_bottom_mem() fix
    + [backport] ShenandoahWriteBarrierRB flag to conditionally
    disable RB on WB fastpath
    + [backport] Shenandoah/Zero barrier stubs
    + [backport] SieveObjects test is too hostile to verification
    + [backport] Single GCTimer shared by all operations
    + [backport] Single thread-local GC state flag for all barriers
    + [backport] Some smallish ShHeapRegionSet changes
    + [backport] Speed up asserts and verification, improve
    fastdebug builds performance
    + [backport] Split live data management for allocations and GCs
    + [backport] Static heuristics should be really static and
    report decisions
    + [backport] Static heuristics should use non-zero allocation
    threshold
    + [backport] Store checks should run most of the time
    + [backport] Tax-and-Spend allocation pacing
    + [backport] Testbug: VerifyJCStressTest leaks memory
    + [backport] TestSelectiveBarrierFlags should accept
    multi-element flag selections
    + [backport] TestSelectiveBarrierFlags times out due to too
    aggressive compilation mode
    + [backport] Trim/expand test heap sizes to fit small heaps
    + [backport] Trim the TLAB sizes to avoid wasteful retirement
    under TLAB races
    + [backport] Use leftmost region in GC allocations
    + [backport] Use os::naked_short_sleep instead of naked Thread
    events for sleeping
    + [backport] Use/sort (cached) RegionData not
    ShenandoahHeapRegionSet (infrastructure)
    + [backport] UX: Cleanup (adaptive) CSet selection message
    + [backport] UX: Pacer reports incorrect free size
    + [backport] UX: Shorter gc+ergo messages from CSet selection
    + [backport] Verifier crashes when reporting multiple
    forwardings
    + [backport] Verifier should check klass pointers before
    attempting to reach for object size
    + [backport] Verifier should print verification label at
    liveness verification
    + [backport] Verify fwdptr accesses during Full GC moves
    + [backport] Verify regions status
    + [backport] When Shenandoah WB is moved out of loop, connect
    it to correct loop memory Phi (back out and revisit previous fix)
    + [backport] Wipe out ShenandoahStoreCheck implementation
    + [backport] Workaround C1 ConstantOopWriteValue bug
    + Bitmap size might not be page aligned when large page is used
    + Changed claim count to jint
    + Cherry-pick JDK-8173013: JVMTI tagged object access needs G1
    pre-barrier
    + Defer cleaning of system dictionary and friends to parallel
    cleaning phase
    + Do not put down update-refs-in-progress flag concurrently
    + Fix AArch64 build failure: misplaced #endif
    + Fixed Shenandoah 8u build
    + Fixed Windows build
    + Fix non-PCH build
    + Fix non-PCH x86_32 build
    + Fix up SPARC and Zero headers for proper locations
    + missing barriers in String intrinsics with
  - ShenandoahOptimizeInstanceFinals
  - ShenandoahOptimizeStableFinals
    + Missing event log for canceled GC
    + StringInternCleanup times out
    + VerifyJCStressTest should test all heuristics
    + Workaround VM crash with JNI Weak Refs handling
- Removed patches:
  * 8038636.patch, 8051972.patch, 8055008.patch, 8074373.patch,
    8076117.patch, 8157898.patch, 8169201.patch, 8170035.patch,
    8176183.patch, 8187635.patch, 8188223.patch, 8191239.patch,
    8193419.patch, 8196224.patch, 8196491.patch, 8196854.patch,
    8197871.patch, 8197925.patch, 8197943.patch, 8198794.patch,
    8199406.patch, 8199547.patch, 8200359.patch, 8200666.patch,
    8201433.patch, 8202585.patch, 8202996.patch, 8203233.patch,
    8203368.patch, 8205491.patch
    + Not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
  - Rediff to changed context
- Do not run standalone TestECDSA, since it is already run during
  the build</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1546862400">- Update to version jdk8u191 (icedtea 3.10.0)
  * Security fixes
    + S8194534, CVE-2018-3136, bsc#1112142: Manifest better support
    + S8194546: Choosier FileManagers
    + S8195868: Address Internet Addresses
    + S8195874: Improve jar specification adherence
    + S8196897: Improve PRNG support
    + S8196902, CVE-2018-3139, bsc#1112143: Better HTTP Redirection
    + S8199177, CVE-2018-3149, bsc#1112144: Enhance JNDI lookups
    + S8199226, CVE-2018-3169, bsc#1112146: Improve field accesses
    + S8201756: Improve cipher inputs
    + S8202613, CVE-2018-3180, bsc#1112147: Improve TLS connections
    stability
    + S8202936, CVE-2018-3183, bsc#1112148: Improve script engine
    support
    + S8203654: Improve cypher state updates
    + S8204497: Better formatting of decimals
    + S8205361, CVE-2018-3214, bsc#1112152: Better RIFF reading
    support
    + S8208353, CVE-2018-13785, bsc#1112153: Upgrade JDK 8u to
    libpng 1.6.35
    + PR3639, CVE-2018-16435: lcms2: heap-based buffer overflow in
    SetData function in cmsIT8LoadFromFile
  * New features
    + PR3655: Allow use of system crypto policy to be disabled by
    the user
  * Import of OpenJDK 8 u191 build 12
    + S8033251: Use DWARF debug symbols for Linux 32-bit as default
    + S8049834: Two security tools tests do not run with only JRE
    + S8074462: Handshake messages can be strictly ordered
    + S8130132: jarsigner should emit warning if weak algorithms or
    keysizes are used
    + S8142927: Feed some text to STDIN in
    ProcessTools.executeProcess()
    + S8146377: test/sun/security/tools/jarsigner/
    /concise_jarsigner.sh failing
    + S8152974: AWT hang occurrs when sequenced events arrive out
    of sequence
    + S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh
    timed out
    + S8164480: Crash with assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(..) failed: Must
    be the same
    + S8168628: (fc) SIGBUS when extending file size to map it
    + S8171452: (ch) linux io_util_md: Operation not supported
    exception after 8168628
    + S8172529: Use PKIXValidator in jarsigner
    + S8180289: jarsigner treats timestamped signed jar invalid
    after the signer cert expires
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8190674: sun/security/tools/jarsigner/TimestampCheck.java
    failed with java.nio.file.NoSuchFileException: ts2.cert
    + S8193892: Impact of noncloneable MessageDigest implementation
    + S8196663: [TESTBUG] test/compiler/loopopts/
    /TestCMovSplitThruPhi.java fails on 32 bit Java
    + S8197518: Kerberos krb5 authentication: AuthList's put method
    leads to performance issue
    + S8202478: Backout JDK-8152974
    + S8204667: Resources not freed on exception
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
    + S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
    + S8207336: Build failure in JDK8u on Windows after fix 8207260
    + S8208350: Disable all DES cipher suites
    + S8208660: JDK 8u191 l10n resource file update
    + S8208754: The fix for JDK-8194534 needs updates
    + S8210431: Complete backport of libpng 1.6.35 TPRM
    + S8211107: LDAPS communication failure with jdk 1.8.0_181
    + S8211731: Reconsider default option for ClassPathURLCheck
    change done in JDK-8195874
  * Backports
    + PR3646: Backed out changeset 6e3f4784affc
    (S4890063/PR2304/RH1214835)
    + S8029661, PR3642, RH1477159: Support TLS v1.2 algorithm in
    SunPKCS11 provider
    + S8131048, PR3574, RH1498936: ppc implement CRC32 intrinsic
    + S8164920, PR3574, RH1498936: ppc: enhancement of CRC32
    intrinsic
    + S8172850, PR3643, RH1640127: Anti-dependency on membar causes
    crash in register allocator due to invalid instruction
    scheduling
    + S8202261, PR3638: (fc) FileChannel.map and
    RandomAccessFile.setLength should not preallocate space
    + S8209639, PR3643, RH1640127: assert failure in coalesce.cpp:
    attempted to spill a non-spillable item
  * Bug fixes
    + PR3653: Detect whether -Xprefer:source and -J-Xmx&lt;limit&gt; can
    be used, rather than assuming
    + PR3673: Alternate HotSpot builds need fix for PR3094
  * SystemTap
    + PR3625: arc_priority representation creates an implicit limit
    on character sequence within regexp
  * Shenandoah
    + PR3634: Shenandoah still broken on s390 with
    aarch64-shenandoah-jdk8u181-b16
    + [backport] Adaptive CSet selection overshoots max-CSet
    + [backport] Adaptive CSet selection selects excessively when
    memory is tight
    + [backport] Adaptive/Traversal heuristics rewrite for
    allocation rate
    + [backport] Added logging for the number of workers used for
    GC cycles
    + [backport] Add task termination and enhanced task queue state
    tracking + weakrefs
    + [backport] Allocation path should not touch GC barriers for
    metadata
    + [backport] Allocation tracker should really report bytes
    + [backport] AlwaysPreTouch fails with non-default ConcGCThreads
    + [backport] Application pacing precision fixes
    + [backport] Apply ShenandoahEvacOOMScope only for evac-taking
    paths in ShenandoahBarrierSet
    + [backport] Assembler write barriers should consistently check
    for forwarded objects
    + [backport] Avoid indirection to next-mark-context
    + [backport] Avoid using uintx in ShenandoahHeapRegion
    + [backport] C1 shenandoah_wb expects obj in a register
    + [backport] Check and ensure that Shenandoah-enabled
    compilations succeed
    + [backport] Check heap stability in C1 WBs
    + [backport] ClassUnloadingWithConcurrentMark should be opt-in
    with Shenandoah
    + [backport] Clean up obsolete c2 code
    + [backport] Cleanup: remove unused root processor's sub tasks
    + [backport] Cleanup UseShenandoahOWST blocks
    + [backport] CollectedHeap::max_tlab_size is measured in words
    + [backport] Complete liveness for recently allocated regions
    outside the allocation path
    + [backport] Comprehensible GC trigger logging
    + [backport] Concurrent uncommit should be recorded as GC event
    + [backport] Constify ShHeapRegionSet and ShCollectionSet
    + [backport] Convert magic value to ShenandoahPacingSurcharge
    + [backport] Default to ShenandoahCodeRootsStyle = 2
    + [backport] Degenerated evacuation
    + [backport] Disable UseFastJNIAccessors for Shenandoah
    + [backport] Elastic TLABs support for Shenandoah
    + [backport] Enable ShenandoahEvacReserveOverflow by default
    + [backport] Evac assist should touch marked objects only
    + [backport] Evac reserve: make sure GC has untouchable space
    to move the objects into
    + [backport] EvilSyncBug test is too slow
    + [backport] Explicit GC should actually uncommit the heap
    + [backport] Exponential backoff with pacing
    + [backport] Fix aarch64 CAS predicates
    + [backport] Fix CAS-obj predicates and add
    expected-null-versions for cmpxchg-narrow-oop
    + [backport] Fixed SA due to code refactoring and merging
    + [backport] Fix Minimal and Zero builds
    + [backport] Fix ShHeap::notify_alloc usages: it accepts words,
    not bytes
    + [backport] Fix TestCommonGCLoads test
    + [backport] Fix TestFullGCALot test failure
    + [backport] Fix TestGCThreadGroups test
    + [backport] Forceful SATB buffer flushes should be
    time-periodic, not traffic-dependent
    + [backport] Full GC always comes with liveness data
    + [backport] Full GC should not always update references
    + [backport] GCLAB slowpath allocations should fit the object
    into GCLAB
    + [backport] GC trace messages have to be immortal
    + [backport] Handle missing ShenandoahWriteBarrierRB case
    + [backport] Heap region count selection should only consider
    max heap size
    + [backport] Hook up GCLABs to Elastic LAB support
    + [backport] Improve scheduling and interleaving of SATB
    processing in mark loop
    + [backport] Including metaspace info when reporting heap info
    + [backport] Incorrect label for static heuristics
    + [backport] Make in-cset checks use signed bytes to match C2
    better
    + [backport] Micro-optimize AArch64 assembly write-barriers
    + [backport] Missing Shenandoah entry in GCNameHelper::to_string
    + [backport] More detailed pacing histogram
    + [backport] More verbose profiling for phase 4 in mark-compact
    + [backport] Move heuristics from ShCollectorPolicy to ShHeap
    + [backport] Move (Java)Thread::_gc_state to lower offset to
    optimize barrier fast-path encoding
    + [backport] Move ParallelCodeIterator to ShenandoahCodeRoots
    + [backport] Move periodic GC decision making to GC heuristics
    base class
    + [backport] Move Shenandoah stress tests to tier3
    + [backport] Non-cancellable mark loops should have sensible
    stride
    + [backport] Off-by-one error in degen progress calculation
    + [backport] Only Java and GC worker threads should get GCLABs
    + [backport] Out-of-cycle Degenerated GC should process
    references and unload classes
    + [backport] Pacer for evacuation should print "Avail" to
    capture discounting
    + [backport] Pacer should account actual size for elastic TLABs
    + [backport] Parallel +AlwaysPreTouch should run with max
    workers
    + [backport] Passive heuristics should enter degen GC, not full
    GC
    + [backport] Perform gc-state checks with LoadB to fit C2
    matchers
    + [backport] Pre-filter oops before enqueing them in SBS
    slowpaths
    + [backport] Print task queue statistics at the end of GC cycle
    + [backport] Process remaining SATB buffers in final
    mark/traverse loop instead of separate phase
    + [backport] Proper units for allocation failure messages
    + [backport] Prune undefined and unused methods
    + [backport] Purge partial heuristics and connection matrix
    infrastructure
    + [backport] Purge support for
    ShenandoahConcurrentEvacCodeRoots and ShenandoahBarriersForConst
    + [backport] Rearrange Shenandoah tests into 3 tiers
    + [backport] Reclaim immediate garbage after mark-compact
    marking
    + [backport] Recycle the regions only once
    + [backport] Refactor alive-closures to deal better with new
    marking contexts
    + [backport] Refactor allocation path to accept
    ShenandoahAllocRequest tuple
    + [backport] Refactor and improve ShenandoahCodeRoots strategies
    + [backport] Refactor FreeSet logging: support evac-reserve,
    denser printouts
    + [backport] Refactor gc+init logging
    + [backport] Refactoring ShenandoahStrDedupStress test to
    reduce test time
    + [backport] Refactor to group marking bitmap and TAMS
    structure in one class ShenandoahMarkingContext
    + [backport] Remove C2 write-barrier from .ad files
    + [backport] Removed racy assertion
    + [backport] Remove NMethodSizeLimit adjustment for Shenandoah
    + [backport] Remove obsolete/unused logging usages
    + [backport] Remove safe_equals()
    + [backport] Remove ShHeuristics::print_threshold
    + [backport] Rename and move ShenandoahPrepareForMarkClosure
    + [backport] Rename "cancel_concgc" to "cancel_gc"
    + [backport] Replace custom asserts with shenandoah_assert_*
    + [backport] Replace risky SBS::need_update_refs_barrier with
    straightforward check
    + [backport] Replace ShBarrierSet* casts with accessor
    + [backport] Report actual free size in non-verbose FreeSet
    status
    + [backport] Report heap region stats in proper units
    + [backport] Resettable iterators to avoid dealing with
    copying/assignment compilation differences
    + [backport] Reshuffle tests: verify STW GC is working first,
    then verify under aggressive, then the rest
    + [backport] Rework ClassUnloading* flags handling
    + [backport] Rework GC degradation on allocation failure
    + [backport] SATB buffer filtering/compaction hides unmarked
    objects until final-mark
    + [backport] shenandoah_assert_correct should check
    object/forwardee klasses
    + [backport] shenandoah_assert_correct should verify classes
    before claiming _safe_oop
    + [backport] Shenandoah changes to allow enabling -Wreorder
    + [backport] Shenandoah/PPC barrier stubs
    + [backport] Shenandoah string deduplication
    + [backport] SH::make_(tlabs)_parsable() should work correctly
    with/without TLABs
    + [backport] Shortcut regions that are known not to be alive
    + [backport] Should cleanup previous/bad versions of redefined
    classes during full gc
    + [backport] Skip RESOLVE in SATBBufferClosure if no forwarded
    objects are in heap
    + [backport] Soft-refs policy needs reliable heap usage data
    after the GC cycle
    + [backport] Soft refs should be purged reliably on allocation
    failure, or with compact heuristics
    + [backport] Some trivial-ish cleanups
    + [backport] Split write barrier paths for mutator and GC
    workers
    + [backport] StringInternCleanup times out
    + [backport] TestHeapDump runs much faster with small heap
    + [backport] Tests should use -XX:+ShenandoahVerify in some
    OOM-evac configurations
    + [backport] TLAB sizing policy should converge faster with
    Shenandoah
    + [backport] Trace and report total allocation latency and sizes
    + [backport] Traversal should resize TLABs
    + [backport] Trivial enhancement to avoid costly deletion array
    element
    + [backport] Uncommit should relinquish the heap lock regularly
    + [backport] Unreachable assert in
    ShenandoahCodeRoots::acquire_lock
    + [backport] Verifier should dump raw memory around the
    problematic oops
    + [backport] Verify global and local gc-state status
    + [backport] VSC++ requires space(s) in between two string
    literals
    + [backport] WB slowpath should assist with evacuation of
    adjacent objects
    + [backport] Wiring GC events to JFR + Restore heap occupancy
    in GC logs after JFR changes
    + [backport] Wiring heap and metaspace info to JFR
    + [backport] Wrap worker id in thread local worker session
    + [backport] -XX:-UseTLAB should disable GCLABs too
    + Cleanup undeclared methods in barrier stubs
    + Disable evac assist by default until bugfixes arrive
    + Fix build failure: signedness mismatch in assert
    + Fix MacOS/Clang build failure
    + Fix x86_32 build
    + JDK8u: Silence compilation warnings on implicit type
    conversion
    + Move JNI Weak References workaround to Shenandoah-specific
    root processor
    + Fix code differences against shenandoah/jdk8u
  * AArch64 port
    + S8155627, PR3651: Enable SA on AArch64
    + S8207838, PR3666: AArch64: Float registers incorrectly
    restored in JNI call
    + S8209415, PR3666: Fix JVMTI test failure HS202
    + S8211064, PR3666: [AArch64] Interpreter and c1 don't
    correctly handle jboolean results in native calls</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1551787200">- Update to version jdk8u201 (icedtea 3.11.0)
  * Security fixes
    + S8199156: Better route routing
    + S8199161: Better interface enumeration
    + S8199166: Better interface lists
    + S8199552: Update to build scripts
    + S8200659: Improve BigDecimal support
    + S8203955: Improve robot support
    + S8204895: Better icon support
    + S8205356: Choose printer defaults
    + S8205709: Proper allocation handling
    + S8205714: Initial class initialization
    + S8206290, CVE-2019-2422, bsc#1122293: Better FileChannel
    transfer performance
    + S8206295: More reliable p11 transactions
    + S8206301: Improve NIO stability
    + S8208585: Make crypto code more robust
    + S8209094, CVE-2019-2426: Improve web server connections
    + S8210094: Better loading of classloader classes
    + S8210598: Strengthen Windows Access Bridge Support
    + S8210606: Improved data set handling
    + S8210610: Improved LSA authentication
    + S8210866, CVE-2018-11212,  bsc#1122299: Improve JPEG
    processing
    + S8210870: Libsunmscapi improved interactions
  * New features
    + PR3667: Use the internal copy of the SunEC library rather
    than statically linking against NSS
  * Import of OpenJDK 8 u192 build 12
    + S6730115: Fastdebug VM crashes with "ExceptionMark destructor
    expects no pending exceptions" error
    + S8022177: Windows/MSYS builds broken
    + S8026331: hs_err improvement: Print if we have seen any
    OutOfMemoryErrors or StackOverflowErrors
    + S8026335: hs_err improvement: Print exact compressed oops
    mode and the heap base value.
    + S8027584: Disable ccache by default
    + S8031759: Improved tool overriding in configure
    + S8033292: only warn, not fail, on unknown variables in
    configure
    + S8034199: Add 'reconfigure' target for re-creating a
    configuration
    + S8034788: Rewrite toolchain.m4 to support multiple toolchains
    per platform.
    + S8035074: hs_err improvement: Add time zone information in
    the hs_err file
    + S8035495: Improvements in autoconf integration
    + S8035725: Must keep microsoft VS_PATH on PATH after toolchain
    detection
    + S8035730: Configure fails in cygwin if current dir is in
    /home/user
    + S8035751: Clean up Visual Studio detection logic
    + S8035825: Warn instead of fail when calling the configure
    wrapper directly
    + S8036003: Add
  - -with-native-debug-symbols=[none|internal|external|zipped]
    + S8038340: Cleanup and fix sysroot and devkit handling on
    Linux and Solaris
    + S8039030: 9-dev windows-i586 build failed with mktemp:
    command not found
    + S8041623: Solaris Studio 12.4 C++ 5.13, CHECK_UNHANDLED_OOPS
    use of class oop's copy constructor definitions causing error
    level diagnostic.
    + S8042707: Source changes needed to build JDK 9 with Visual
    Studio 2013 (VS2013)
    + S8048128: Fix for Solaris Studio C++ 5.13,
    CHECK_UNHANDLED_OOPS breaks PPC build.
    + S8057538: Build the freetype library during configure on
    Windows
    + S8067239: [TESTBUG] javax/xml/bind/marshal/8036981/Test.java
    failed
    + S8069124: runtime/NMT/MallocSiteHashOverflow.java failing in
    nightlies
    + S8077420: Build failure with SS12u4
    + S8078437: Enable use of devkits for Windows
    + S8079788: Fix broken CL version detection in configure for
    some Visual Studio configurations
    + S8081202: Hotspot compile warning: "Invalid suffix on
    literal; C++11 requires a space between literal and identifier"
    + S8081323: ConstantPool::_resolved_references is missing in
    heap dump
    + S8114823: G1 doesn't honor request to disable class unloading
    + S8134157: adlc fails to compile with SS12u4
    + S8138692: libjsig compilation is missing EXTRA_CFLAGS on
    macosx
    + S8140470: javax/xml/crypto/dsig/SecurityManager/
    /XMLDSigWithSecMgr.java failed with AccessControlException
    + S8148175: C1: G1 barriers don't preserve FP registers
    + S8150426: Wrong cast in metadata_at_put
    + S8150688: Fix os_windows siglabel
    + S8153194: PreserveFPRegistersTest.java runs out of memory in
    the nightlies
    + S8156824: com.sun.jndi.ldap.pool.PoolCleaner should clear its
    context class loader
    + S8158012: Use SW prefetch instructions instead of BIS for
    allocation prefetches on SPARC Core C4
    + S8160748: Inconsistent types for ideal_reg
    + S8162362: Introduce system property to control enabled
    ciphersuites
    + S8162540: Crash in C2 escape analysis with assert: "node
    should be registered"
    + S8165463: Native implementation of sunmscapi should use
    operator new (nothrow) for allocations
    + S8173013: JVMTI tagged object access needs G1 pre-barrier
    + S8176033: New cygwin grep does not match \r as newline
    + S8176192: Incorrect usage of Iterator in Java 8 In
    com.sun.jndi.ldap.EventSupport.removeNamingListener
    + S8178370: [TEST_BUG]
    java/security/Signature/SignatureLength.java fails
    + S8179079: Incremental HotSpot builds broken on Windows
    + S8179675: Build with error on windows with new Cygwin grep
    + S8185855: Debug exception stacks should be clearer
    + S8186171: HashMap: Entry.setValue may not work after
    Iterator.remove() called for previous entries
    + S8186646: Nashorn: "duplicate code" assertion when binding a
    vararg function that just passes arguments along
    + S8188083: NullPointerExcpn-java.awt.image.FilteredImageSource
    .startProduction JDK-8079607
    + S8189170: Add option to disable stack overflow checking in
    primordial thread for use with JNI_CreateJavaJVM
    + S8189760: sun/security/ssl/CertPathRestrictions/
    /TLSRestrictions.java failed with unexpected Exception
    intermittently
    + S8193171: keytool -list displays "JKS" for a PKCS12 keystore
    + S8193758: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8194412: Adding 256 units of IsoFields.QUARTER_YEARS broken
    + S8194642: Improve OOM error reporting for JDK8
    + S8195095: Images are not scaled correctly in JEditorPane
    + S8195738: scroll poistion in ScrollPane is reset after
    calling validate()
    + S8196108: Add build support for VS 2015/2017
    + S8196880: VS2017 Addition of Global Delete Operator with Size
    Parameter Conflicts with Arena's Chunk Provided One
    + S8196884: VS2017 Multiple Type Cast Conversion Compilation
    Errors
    + S8197864: VS2017 (C4334) Result of 32-bit Shift Implicitly
    Converted to 64 bits
    + S8197868: VS2017 (C2065) 'timezone': Undeclared Identifier in
    share/runtime/os.cpp
    + S8198304: VS2017 (C4838, C4312) Various conversion issues
    with gtest tests
    + S8198898: Compilation errors in jdk.crypto.mscapi with VS 2017
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8201240: Improve releasing native resources of
    BufImgSurfaceData.ICMColorData
    + S8201369: Inet4AddressImpl_getLocalHostName reverse lookup on
    Solaris only
    + S8202600: [Zero] Undefined behaviour in
    src/os_cpu/linux_zero/vm/os_linux_zero.cpp
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8203349: 8u hotspot should recognise later Windows compilers
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203790: MSVCP dependency introduced in awt.dll
    + S8203845: backport of JDK-8034788 inadvertently rolled back
    JDK-8187045 changes to toolchain.m4
    + S8204053: libsaproc.so not linked with -z,noexecstack
    + S8204872: [8u] VS2017: more instances of "error C3680: cannot
    concatenate user-defined string literals with mismatched
    literal suffix identifiers"
    + S8205104: EXTRA_LDFLAGS not consistently being used
    + S8205440: [8u] DWORD64 required for later Windows compilers
    + S8205677: [8u] casts and type change for 8u to enable later
    Windows compilers
    + S8206425: .gnu_debuglink sections added unconditionally when
    no debuginfo is stripped
    + S8206454: [8u] os::current_stack_pointer() fails to compile
    on later Windows compilers (warning C4172: returning address
    of local variable)
    + S8206914: add jdk8u-dev test failures to ProblemList.txt
    + S8207402: Stray *.debuginfo files when not stripping debug
    info
    + S8207853: Need to regenerate configure in jdk8u-dev
    + S8209002: 8u192 installed exe and dll files have wrong file
    version
    + S8210423: Backport of 8034788 breaks GCC version detection
    + S8210658: Remove and retag jdk8u192-b10 tag in source
    repository
    + S8210951: Test sun/security/ssl/SSLContextImpl/
    /CustomizedCipherSuites.java fails
  * Import of OpenJDK 8 u201 build 8
    + S8027781: New jarsigner timestamp warning is grammatically
    incorrect
    + S8159805: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java fails after JDK-8027781
    + S8171049: Era.getDisplayName doesn't work with
    non-IsoChronology
    + S8191438: jarsigner should print when a timestamp will expire
    + S8201818: [macosx] Printing attributes break page size set
    via "java.awt.print.Book" object
    + S8205330: InitialDirContext ctor sometimes throws NPE if the
    server has sent a disconnection
    + S8207775: Better management of CipherCore buffers
    + S8208583: Better management of internal KeyStore buffers
    + S8209129: Further improvements to cipher buffer management
    + S8209862: CipherCore performance improvement
    + S8210695: Create test to cover JDK-8205330 InitialDirContext
    ctor sometimes throws NPE if the server has sent a
    disconnection
    + S8211883: Disable anon and NULL cipher suites
    + S8213085: (tz) Upgrade time-zone data to tzdata2018g
    + S8213368: JDK 8u201 l10n resource file update
    + S8213792: Update THIRD_PARTY_README for LCMS to 2.9
    + S8213949: OpenJDK 8 CCharToGlyphMapper.m missing the
    Classpath exception license text
    + S8214357: JDK 8u201 l10n resource file update md20
    + S8215257: OpenJDK 8 mozilla_compat.js, parser.js missing the
    Classpath exception license text
    + S8215377: JDK-8171049 Breaks JCK signature tests -
    Era.getDisplayName doesn't work with non-IsoChronology
  * Backports
    + S6424123, PR3696: JVM crashes on failed 'strdup' call
    + S8059847, PR3696: complement JDK-8055286 and JDK-8056964
    changes
    + S8074859, PR1937: Re-apply warnings as error switch removed
    by 8034788 in 8u192
    + S8076475, PR3696: Misuses of strncpy/strncat
    + S8145188, PR2945: Re-apply --with-java-debug-symbols option
    removed by 8034788 in 8u192
    + S8214059, PR3693: Undefined behaviour in ADLC
    + S8217753, PR3685: Enable HotSpot builds on 5.x Linux kernels
  * Bug fixes
    + PR3667, PR1983: Backed out changeset 48c15869ecd5
    + PR3667, PR1983: Backed out changeset f0635543beb3
    + PR3667, PR2127: Backed out changeset 0ff7720931e8
    + PR3667, PR2815: Backed out changeset 26e2e029ee25
    + PR3667, PR2899: Backed out changeset 9dc0eca5fa89
    + PR3667, PR2934: Backed out changeset 7513dae3426b
    + PR3667, PR3479, RH1486025: Backed out changeset 5dcb55da00c1
    + PR3675: Update CVE URL
    + PR3683: Addition of 8189170 in 8u192 breaks 8197429 backport
    + PR3691: wget not detected by configure
  * SystemTap
    + PR3341: jstack.stp should support ppc64[le,be]
  * AArch64 port
    + S8160748, PR3682: [AArch64] Inconsistent types for ideal_reg
    + S8189170, PR3682: [AArch64] Add option to disable stack
    overflow checking in primordial thread for use with
    JNI_CreateJavaJVM
    + S8209414, PR3682: [AArch64] method handle invocation does not
    respect JVMTI interp_only mode
    + S8215951, PR3682: AArch64: jtreg test
    vmTestbase/nsk/jvmti/PopFrame/popframe005 segfaults
    + S8218185, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::putfield_or_static
    + S8219635, PR3682: aarch64: missing LoadStore barrier in
    TemplateTable::fast_storefield
- Removed patch:
  * icedtea-3.0.1-sunec.patch
    + not needed any more</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
</package>
<package pkgid="c6d348c0e6ccbaaacc57ada431d8c846f4889152558b96c23d655a5cc7332773" name="java-1_8_0-openjdk-headless-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="fe4309bd8f2764a2dd230049beee51083f7120b99dd9f584d13e602c3d0bbc2b" name="java-1_8_0-openjdk-headless-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.275" rel="lp152.2.6.2"/>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1556107200">- Disable LTO (boo#1133135).</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
</package>
<package pkgid="3204aaca95a6d8494f51d6b0b378e79b191a67bf158eb62103f37bdc61116399" name="java-1_8_0-openjdk-headless-debuginfo" arch="i586">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="6eb880e19da4bd3686291fb71637c20c76489cc6eb8d83413b31bd0718264878" name="java-1_8_0-openjdk-headless-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.0.282" rel="lp152.2.9.1"/>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1556798400">- Update to version jdk8u212 (icedtea 3.12.0)
  * Security fixes
    + S8211936, CVE-2019-2602, bsc#1132728: Better String parsing
    + S8218453, CVE-2019-2684, bsc#1132732: More dynamic RMI
    interactions
    + S8219066, CVE-2019-2698, bsc#1132729: Fuzzing TrueType fonts:
    setCurrGlyphID()
  * New features
    + PR3734: Make use of branding options
  * Import of OpenJDK 8 u202 build 08
    + S8064811: Use THREAD instead of CHECK_NULL in return
    statements
    + S8068440: Test6857159.java times out
    + S8073139: PPC64: User-visible arch directory and os.arch
    value on ppc64le cause issues with Java tooling
    + S8073159: improve Test6857159.java
    + S8129560: TestKeyPairGenerator.java fails on Solaris because
    private exponent needs to comply with FIPS 186-4
    + S8130655: OS X: keyboard input in textfield is not possible
    if the window contained textfield is owned by EmbeddedFrame
    + S8131051: KDC might issue a renewable ticket even if not
    requested
    + S8134124: sun/security/tools/jarsigner/warnings.sh fails
    when using Hindi locale
    + S8139507: WARNING: Could not open/create prefs root node
    Software\JavaSoft\Prefs
    + S8141421: Various test fail with OOME on win x86
    + S8145788: JVM crashes with -XX:+EnableTracing
    + S8155635: C2: Mixed unsafe accesses break alias analysis
    + S8156709: Cannot call setSeed on NativePRNG on Mac if EGD is
    /dev/urandom
    + S8160928: javac incorrectly copies over interior type
    annotations to bridge method
    + S8161732: [TEST_BUG] Test closed/java/awt/MenuBar/MenuBarPeer/
    /MenuBarPeerDisposeTest.java fails in unix enviroments with
    NullPointerException
    + S8163083: SocketListeningConnector does not allow
    invocations with port 0
    + S8164383: jhsdb dumps core on Solaris 12 when loading dumped
    core
    + S8170937: Swing apps are slow if displaying from a remote
    source to many local displays
    + S8174050: Compilation errors with clang-4.0
    + S8182461: IndexOutOfBoundsException when reading indexed
    color BMP
    + S8183979: Remove Kodak CMS (KCMS) code from Oracle JDK
    + S8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
    failed due to libnss3 version cannot be parsed
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + S8191178: [macos] Problem with input of yen symbol
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8193879: Java debugger hangs on method invocation
    + S8194864: Outputs more details for PKCS11 tests if the NSS
    lib version cannot be determined
    + S8196882: VS2017 Hotspot Defined vsnprintf Function Causes
    C2084 Already Defined Compilation Error
    + S8200719: Cannot connect to IPv6 host when exists any active
    network interface without IPv6 address
    + S8201801: RTL language (Hebrew) is presented from left to
    right
    + S8202264: Race condition in AudioClip.loop()
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8204966: [TESTBUG] hotspot/test/compiler/whitebox/
    /IsMethodCompilableTest.java test fails with
  - XX:CompileThreshold=1
    + S8205479: OS X: requestFocus() does not work properly for
    embedded frame
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8206392: [macosx] Cycling through windows (JFrames) does
    not work with keyboard shortcut
    + S8206911: javax/xml/crypto/dsig/GenerationTests.java fails
    in 8u-dev
    + S8207060: Memory leak when malloc fails within
    WITH_UNICODE_STRING block
    + S8207145: (fs) Native memory leak in
    WindowsNativeDispatcher.LookupPrivilegeValue0
    + S8207150: Clip.isRunning() may return true after Clip.stop()
    was called
    + S8207322: Backport GTK3 support on Linux to 8u
    + S8207750: Native handle leak in
    java.io.WinNTFileSystem.list()
    + S8208091: SA: jhsdb jstack --mixed throws
    UnmappedAddressException on i686
    + S8208183: update HSDIS plugin license to UPL
    + S8208541: non-ASCII characters in hsdis UPL text
    + S8208638: Instead of circle rendered in appl window, but
    ellipse is produced JEditor Pane
    + S8209184: JCK Test Failure due to ResourceBundle
    + S8209359: [8u] hotspot needs to recognise cl.exe 19.13 to
    build with VS2017.
    + S8209863: Add a test to verify that -XX:+EnableTracing works
    + S8210350: -Wl,-z,defs JDK 8 build failure
    + S8210384: SunLayoutEngine.isAAT() font is expensive on MacOS
    + S8210736: jdk/javax/xml/crypto/dsig/GenerationTests.java
    slow on linux
    + S8210891: Remove unused extutil.h from JDK8u sources
    + S8211124: HotSpot update for vm_version.cpp to recognise
    updated VS2017
    + S8211150: G1 Full GC not purging code root memory and hence
    causing memory leak
    + S8211394: CHECK_ must be used in the rhs of an assignment
    statement within a block
    + S8211909: JDWP Transport Listener: dt_socket thread crash
    + S8211933: [8u] hotspot adlc needs to link statically with
    libstdc++ for gcc7.3
    + S8212709: Backout backport of JDK-8211394 from jdk 8u-dev
    + S8212821: CHECK_ must be used in the rhs of an assignment
    statement within a block (round 2)
  * Import of OpenJDK 8 u212 build 04
    + S7127191: SA JSDB does not display native symbols correctly
    for transported Linux cores
    + S8027434: "-XX:OnOutOfMemoryError" uses fork instead of vfork
    + S8028254: gc/arguments/TestMinInitialErgonomics.java failed
    with unexpected initial heap size
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043387: java/time/test/java/util/TestFormatter.java failed.
    + S8044047: Missing null pointer checks for streams
    + S8059038: Create new launcher for SA tools
    + S8065749: [TESTBUG]: gc/arguments/TestG1HeapRegionSize.java
    fails at nightly
    + S8068269: RTM tests that assert on non-zero lock statistics
    are too strict in RTMTotalCountIncrRate &gt; 1 cases
    + S8076164: [JTextField] When input too long Thai character,
    cursor's behavior is odd
    + S8076274: [TESTBUG] Remove @ignore from
    runtime\NMT\JcmdDetailDiff.java
    + S8076458: java/util/stream/test/org/openjdk/tests/java/util/
    /stream/FlatMapOpTest.java timeout
    + S8077608: [TESTBUG] Enable Hotspot jtreg tests to run in
    agentvm mode
    + S8080932: [TEST_BUG] Test
    java/awt/BasicStroke/DashStrokeTest.java fails with Bad script
    error due to improper @run notation
    + S8132136: [PIT] RTL orientation in JEditorPane is broken
    + S8132985: Crash in freetypescaler.c due to double free
    + S8133108: [PIT] Container size is wrong in JEditorPane
    + S8133731: [TEST_BUG] Unmappable in ASCII character such as
    Thai should be escaped in the regtests targeted for a regular
    non-I18n runs
    + S8133802: replace some &lt;tt&gt; tags (obsolete in html5) in
    security-libs docs
    + S8133984: print_compressed_class_space() is only defined in
    64-bit VM
    + S8139803: Fix for 8132985 breaks OpenJDK build on windows.
    + S8148928: java/util/stream/test/**/SequentialOpTest.java
    timed out intermittently
    + S8164656: krb5 does not retry if TCP connection timeouts
    + S8170681: Remove fontconfig header files from JDK source tree
    + S8175120: Remove old tests on kdc timeout policy
    + S8180469: Wrong short form text for supplemental Japanese era
    + S8180904: Hotspot tests running with -agentvm failing due to
    classpath
    + S8185975: PPC64: Fix vsldoi interface according to the ISA
    + S8187364: Unable to enter zero width non-joiner (ZWNJ)
    symbol in Swing text component
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8193764: Cannot set COMPANY_NAME when configuring a build
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
    + S8200109: NMT: diff_malloc_site assert(early-&gt;flags() ==
    current-&gt;flags(), "Must be the same memory type")
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8202088: Japanese new era implementation
    + S8204142: AWT hang occurs when sequenced events arrive out
    of sequence in multiple AppContexts
    + S8205432: Replace the placeholder Japanese era name
    + S8206075: On x86, assert on unbound assembler Labels used as
    branch targets
    + S8206120: Add test cases for lenient Japanese era parsing
    + S8207070: Webstart app popup on wrong screen in a one-screen
    setup changing to multi-monitor
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207258: Distrust TLS server certificates anchored by
    Symantec Root CAs
    + S8208480: Test failure: assert(is_bound() || is_unused())
    after JDK-8206075 in C1
    + S8208656: Move java/util/Calendar/CalendarTestScripts tests
    into OpenJDK
    + S8210633: Cannot parse JapaneseDate string with
    DateTimeFormatterBuilder Mapped-values
    + S8210647: libsaproc is being compiled without optimization
    + S8211106: [windows] Update OS detection code to recognize
    Windows Server 2019
    + S8211231: BarrierSetC1::generate_referent_check() confuses
    register allocator
    + S8211382: ISO2022JP and GB18030 NIO converter issues
    + S8211398: Square character support for the Japanese new era
    + S8211435: Exception in thread "AWT-EventQueue-1"
    java.lang.IllegalArgumentException: null source
    + S8211926: Catastrophic size_t underflow in BitMap::*_large
    methods
    + S8212110: Build of saproc.dll broken on Windows 32 bit after
    JDK-8210647
    + S8212178: Soft reference reclamation race in
    com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator
    + S8212914: Test
    javax/imageio/plugins/bmp/BMP8BPPLoadTest.java fails
    + S8212941: Support new Japanese era in
    java.time.chrono.JapaneseEra
    + S8213151: [AIX] Some class library files are missing the
    Classpath exception
    + S8213154: Update copyright headers of files in src tree that
    are missing Classpath exception
    + S8213419: C2 may hang in MulLNode::Ideal()/MulINode::Ideal()
    with gcc 8.2.1
    + S8213583: Error while opening the JFileChooser when desktop
    contains shortcuts pointing to deleted files.
    + S8213952: Relax DNSName restriction as per RFC 1123
    + S8213983: [macosx] Keyboard shortcut \u201ccmd +`\u201d
    stops working properly if popup window is displayed
    + S8213992: Rename and make DieOnSafepointTimeout the
    diagnostic option
    + S8214061: Buffer written into itself
    + S8214189: test/hotspot/jtreg/compiler/intrinsics/mathexact/
    /MulExactLConstantTest.java fails on Windows x64 when run
    with -XX:-TieredCompilation
    + S8214206: Fix for JDK-8213419 is broken on 32-bit
    + S8215364: JavaFX crashes on Ubuntu 18.04 with Wayland while
    using Swing-FX interop
    + S8215934: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8215976: Fix gmtime_r declaration conflicts in zip.cpp with
    linux header files
    + S8216037: Avoid calling vm_update with a NULL name
    + S8216058: [TESTBUG] tools/launcher/VersionCheck.java fails
    after JDK-8215992
    + S8216396: Support new Japanese era and new currency code
    points in java.lang.Character for Java SE 8
    + S8217305: Missing 0 in java.dll file version cause issues
    with patch management software
    + S8217432: MetaspaceGC::_capacity_until_GC exceeds
    MaxMetaspaceSize
    + S8217520: Remove vm.opt.MaxGCPauseMillis == "null" from
    TestOldGenCollectionUsage.java
    + S8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled
    after 8211883
    + S8217609: New era placeholder not recognized by
    java.text.SimpleDateFormat
    + S8217710: Add 5 currency code points to Java SE 8uX
    + S8218613: [TESTBUG] runtime/ErrorHandling tests are building
    incorrect testlibrary classes
    + S8218915: Change isJavaIdentifierStart and
    isJavaIdentifierPart to handle new code points
    + S8219636: Windows build failure after JDK-8207070 8u backport
    + S8219890: Calendar.getDisplayName() returns empty string for
    new Japanese Era on some locales
    + S8219961: [ppc64] Increase code size for interpreter
    generation.
    + S8220397: REGRESSION: JDK-8036003 backport regresses
    no_strip builds
    + S8220641: [TESTBUG] New test KdcPolicy.java introduced by
    JDK-8164656 needs same change as JDK-8190690
    + S8221355: Performance regression after JDK-8155635 backport
    into 8u
  * Backports
    + S8222286, PR3727: Fix for JDK-8213419 is broken on s390
  * Bug fixes
    + PR3718: Change policytool.desktop.in category Development to
    Settings
    + PR3719: Use JRE bin directory in policytool.desktop.in
    + PR3722: Use SDK bin directory in jconsole.desktop.in
    + PR3723: Use shortened Java version first in Name field of
    desktop files
    + PR3728: CVE-2018-3639 fix revision to prefer
    PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE
    + PR3736: Use https URLs where possible.
  * AArch64 port
    + S8153172, PR3724: aarch64: hotspot crashes after the 8.1 LSE
    patch is merged
    + S8213419, PR3724: [AArch64] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8221220, PR3724: AArch64: Add StoreStore membar explicitly
    for Volatile Writes in TemplateTable
  * AArch32 port
    + S8213419: [AArch32] C2 may hang in
    MulLNode::Ideal()/MulINode::Ideal() with gcc 8.2.1
    + S8214189: [AArch32] test/hotspot/jtreg/compiler/intrinsics/
    /mathexact/MulExactLConstantTest.java fails on Windows x64
    when run with -XX:-TieredCompilation
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1562328000">- Do not fail installation when the manpages are not present
  (bsc#1115375)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1563537600">- Update to version jdk8u222 (icedtea 3.13.0)
  * Security fixes
    + S8191073: JpegImageReader throws IndexOutOfBoundsException
    when trying to read image data from tables-only image
    + S8208698, CVE-2019-2745, bsc#1141784: Improved ECC
    Implementation
    + S8212328, CVE-2019-2762, bsc#1141782: Exceptional throw cases
    + S8213431, CVE-2019-2766, bsc#1141789: Improve file protocol
    handling
    + S8213432, CVE-2019-2769, bsc#1141783: Better copies of
    CopiesList
    + S8216381, CVE-2019-2786, bsc#1141787: More limited privilege
    usage
    + S8217563: Improve realm maintenance
    + S8218863: Better endpoint checks
    + S8218873: Improve JSSE endpoint checking
    + S8218876, CVE-2019-7317, bsc#1141780: Improve PNG support
    options
    + S8219018: Adjust positions of glyphs
    + S8219020: Table alternate substitutions
    + S8219775: Certificate validation improvements
    + S8220192: Better outlook for SecureRandom
    + S8220517: Enhanced GIF support
    + S8221518, CVE-2019-2816, bsc#1141785: Normalize normalization
    + S8223511, CVE-2019-2842, bsc#1141786: Extended AES support
  * New features
    + PR3743: Support EA builds
  * Import of OpenJDK 8 u222 build 01
    + S8022879: TEST_BUG: sun/nio/cs/MalformedSurrogates.java
    fails intermittently
    + S8025209: Intermittent test failure
    java/net/Socket/asyncClose/AsyncClose.java
    + S8030690: TEST_BUG java/nio/Buffer/Chars.java fails
    intermittently
    + S8031563: TEST_BUG:
    java/nio/channels/Selector/ChangingInterests.java failed once
    + S8031666: TEST_BUG: java/net/ipv6tests/UdpTest.java failed
    because of SocketTimeoutException
    + S8048782: OpenJDK: PiscesCache : xmax/ymax rounding up can
    cause RasterFormatException
    + S8055814: [TESTBUG] runtime/NMT/NMTWithCDS.java fails with
    product builds due to missing UnlockDiagnosticVMOptions
    + S8073078: java/nio/file/FileStore/Basic.java sensitive to
    NFS configuration
    + S8129988: JSSE should create a single instance of the
    cacerts KeyStore
    + S8137231: sun/security/rsa/SpecTest.java timeout with Agent
    error: java.lang.Exception
    + S8150013: ParNew: Prune nmethods scavengable list.
    + S8151225: Mark SpecTest.java as intermittently failing
    + S8154156: PPC64: improve array copy stubs by using vector
    instructions
    + S8156035: Remove intermittent key from
    sun/security/rsa/SpecTest.java
    + S8157287: java/nio/file/FileStore/Basic.java failed with
    "java.nio.file.AccessDeniedException : /zones/zoneone/root "
    + S8192854: FONTCONFIG_CFLAGS missing from spec.gmk.in
    + S8202768: [macos] Appkit thread slows when any Window
    Manager active
    + S8203627: Swing applications with JRadioButton and JCheckbox
    fail to render correctly when using GTK3 and the GTK L&amp;F
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to
    handle both, RPATH and RUNPATH
    + S8206955: MethodHandleProxies.asInterfaceInstance does not
    support default methods
    + S8207760: SAXException: Invalid UTF-16 surrogate detected:
    d83c ?
    + S8209951: Problematic sparc intrinsic:
    com.sun.crypto.provider.CipherBlockChaining
    + S8213825: assert(false) failed: Non-balanced monitor
    enter/exit! Likely JNI locking
    + S8214109: XToolkit is not correctly displayed color on
    16-bit high color setting
    + S8214111: There is no icon in all JOptionPane target image
    + S8214112: The whole text in target JPasswordField image are
    not selected
    + S8214252: Expanded &amp; Collapsed nodes of a JTree look the
    same on GTK3
    + S8214253: Tooltip is transparent rather than having a black
    background
    + S8217263: Automate DashOffset test
    + S8217597: [TESTBUG] old version docker does not support
  - -cpus
    + S8218469: JSlider display issue with slider for
    GTKLookAndFeel
    + S8218470: JScrollBar display issue with GTKLookAndFeel
    + S8218472: JProgressBar display issue with GTKLookAndFeel
    + S8218473: JOptionPane display issue with GTKLookAndFeel
    + S8218479: JTextPane display issue with GTKLookAndFeel
    + S8220349: The fix done for JDK-8214253 have caused issues in
    JTree behaviour
    + S8220718: Missing ResourceMark in nmethod::metadata_do
    + S8221789: make reconfigure broken (jdk8u only)
    + S8222965: Backport of JDK-8129988 broke the build
    + S8222975: Fix 'release' file to reflect actual repo checkin
    used to compile JDK
  * Import of OpenJDK 8 u222 build 02
    + S8134030: test/serviceability/dcmd/gc/HeapDumpTest fails to
    verify the dump
    + S8151539: Remove duplicate AlwaysTrueClosures
    + S8176100: [REDO][REDO] G1 Needs pre barrier on dereference
    of weak JNI handles
    + S8210416: [linux] Poor StrictMath performance due to
    non-optimized compilation
    + S8217315: Proper units should print more significant digits
    + S8218674: HTML Tooltip with "img=src" on component doesn't
    show
  * Import of OpenJDK 8 u222 build 03
    + S7100957: SOCKS proxying does not work with IPv6 connections
    + S7102541: RFE: os::set_native_thread_name() cleanups
    + S8144332: HSDB could not terminate when close button is
    pushed.
    + S8151322: Implement os::set_native_thread_name() on Solaris
    + S8154387: Parallel unordered Stream.limit() tries to collect
    128 elements even if limit is less
    + S8189131: Open-source the Oracle JDK Root Certificates
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8191031: Remove several Symantec Root CAs
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8195774: Add Entrust root certificates
    + S8195793: Remove GTE CyberTrust Global Root
    + S8196141: Add GoDaddy root certificates
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8209506: Add Google Trust Services GlobalSign root
    certificates
    + S8210425: [x86] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8210432: Add additional TeliaSonera root certificate
    + S8213213: Remove
    src/java.desktop/unix/classes/sun/awt/X11/keysym2ucs.h
    + S8214770: java/time/test/java/time/format/
    /TestNonIsoFormatter.java failed in non-english locales.
    + S8216577: Add GlobalSign's R6 Root certificate
    + S8218152: [javac] fails and exits with no error if a bad
    annotation processor provided
    + S8222136: Remove two Comodo root CA certificates that are
    expiring
    + S8222137: Remove T-Systems root CA certificate
    + S8223555: Cleanups in cacerts tests
    + S8223664: Add jtreg tests for 8223528, backport to jdk8u of
    8176100
  * Import of OpenJDK 8 u222 build 04
    + S8158232: PPC64: improve byte, int and long array copy stubs
    by using VSX instructions
    + S8190974: Parallel stream execution within a custom
    ForkJoinPool should obey the parallelism
    + S8203190: SessionId.hashCode generates too many collisions
    + S8223499: Remove two DocuSign root certificates that are
    expiring
    + S8223883: Fix jni.cpp copyright date after 8223528
  * Import of OpenJDK 8 u222 build 05
    + S8019816: [TEST_BUG][macosx] closed/java/awt/BasicStroke/
    /DashZeroWidth.java not on EDT
    + S8044289: In ImageIO.write() and ImageIO.read() null stream
    is not handled properly.
    + S8055705: Rename UnixPrintServiceLookup and
    Win32PrintServiceLookup as a platform neutral class name
    + S8059575: JEP-JDK-8043304: Test task: Tiered Compilation
    level transition tests
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8143097: java/net/ipv6tests/UdpTest.java fails
    intermittently with "checkTime failed: got 1998 expected 4000"
    + S8151226: Mark UdpTest.java as intermittently failing
    + S8166684: PPC64: implement intrinsic code with vector
    instructions for Unsafe.copyMemory()
    + S8185969: PPC64: Improve VSR support to use up to 64
    registers
    + S8193830: Xalan Update: Xalan Java 2.7.2
    + S8196775: java/net/Socket/asyncClose/Race.java failed
    intermittently on Windows with ConnectException: Connection
    refused
    + S8202414: Unsafe write after primitive array creation may
    result in array length change
    + S8202651: Test ComodoCA.java fails
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8210886: Remove references in xwindows.md to non-existent
    files.
    + S8210985: Update the default SSL session cache size to 20480
    + S8213183: InputMethod cannot be used after its restarting
    + S8214765: All TrayIcon MessageType icons does not show up
    with gtk3 option set
    + S8218020: Back out accidental changes that belong elsewhere
    + S8218020: Fix version number in mesa.md 3rd party legal file
    + S8220495: Update GIFlib library to the 5.1.8
    + S8222670: pathological case of JIT recompilation and code
    cache bloat
    + S8223537: testlibrary_tests/ctw/ClassesListTest.java fails
    with Agent timeout frequently
    + S8224727: Problem list test security/infra/java/security/
    /cert/CertPathValidator/certification/ActalisCA.java
    + S8225065: Revert 8221166 (8u backport of 8048782)
  * Import of OpenJDK 8 u222 build 06
    + S8173910: (fs) java/nio/file/FileSystem/Basic.java should
    conditionally check FileStores
    + S8176237: (fs) java/nio/file/FileStore/Basic.java should
    conditionally check FileStores
    + S8202884: SA: Attach/detach might fail on Linux if debugee
    application create/destroy threads during attaching
  * Import of OpenJDK 8 u222 build 07
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8212202: [Windows] Exception if no printers are installed.
    + S8221263: [TEST_BUG] RemotePrinterStatusRefresh test is hard
    to use
    + S8221412: lookupPrintServices() does not always update the
    list of Windows remote printers
    + S8225716: G1 GC: Undefined behaviour in
    G1BlockOffsetTablePart::block_at_or_preceding
  * Import of OpenJDK 8 u222 build 08
    + S8040211: Update LSR datafile for BCP 47
    + S8177472: Remove hard-coded IANA Subtag Registry map in
    LocaleEquivalentMap.java
    + S8181594: Efficient and constant-time modular arithmetic
    + S8182999: SunEC throws ProviderException on invalid curves
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8191404: Upgrading JDK with latest available LSR data from
    IANA.
    + S8193552: ISO 4217 amendment 165
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8201317: X25519/X448 code improvements
    + S8202026: ISO 4217 amendment 166
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8204269: ISO 4217 amendment 167
    + S8208648: ECC Field Arithmetic Enhancements
    + S8208746: ISO 4217 Amendment #168 update
    + S8209775: ISO 4217 Amendment #169 update
    + S8210153: localized currency symbol of VES
    + S8213294: Upgrade IANA LSR data
    + S8214935: Upgrade IANA LSR data
    + S8219781: Localized names for Japanese era Reiwa in COMPAT
    provider
  * Import of OpenJDK 8 u222 build 09
    + S8135248: Add utility methods to check indexes and ranges
    + S8142493: Utility methods to check indexes and ranges
    doesn't specify behavior when function produces null
    + S8146458: Improve exception reporting for
    Objects.checkIndex/checkFromToIndex/checkFromIndexSize
    + S8155794: Move Objects.checkIndex BiFunction accepting
    methods to an internal package
    + S8179098: Crypto AES/ECB encryption/decryption performance
    regression (introduced in jdk9b73)
  * Import of OpenJDK 8 u222 build 10
    + S8157792: After Integrating tzdata2016d the test/sun/util/
    /calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and
    "Asia/Qyzylorda" Timezones
    + S8215982: (tz) Upgrade time-zone data to tzdata2018i
    + S8224560: (tz) Upgrade time-zone data to tzdata2019a
    + S8225580: tzdata2018i integration causes test failures on
    jdk-13
  * Shenandoah
    + [backport] 8210879: ClassLoaderStatsClosure does raw oop
    comparison
    + [backport] 8216973: Kick up cleanup phases in the right
    places
    + [backport] 8217016: Shenandoah: Streamline generation of CAS
    barriers
    + [backport] 8217043: Shenandoah: SIGSEGV in
    Type::meet_helper() at barrier expansion time
    + [backport] 8217213: shenandoahTaskQueue.hpp includes
    .inline.hpp file
    + [backport] 8217319: Cleanup Shenandoah includes
    + [backport] 8217343: Shenandoah control thread should be able
    to run at critical priority
    + [backport] 8217400: Optimized build is broken by Shenandoah
    changes
    + [backport] 8217874: Shenandoah: Clobbered register in
    ShenandoahBarrierSetAssembler::cmpxchg_oop()
    + [backport] 8219524: Shenandoah misreports "committed" size
    in MemoryMXBean
    + [backport] 8219857: Shenandoah GC may initialize thread's
    gclab twice
    + [backport] 8219976: GarbageCollectionNotificationInfo always
    says "No GC" when running Shenandoah
    + [backport] 8220153: Shenandoah does not work with
    TransparentHugePages properly
    + [backport] 8220162: Shenandoah should not commit HugeTLBFS
    memory
    + [backport] 8220228: Improve Shenandoah pacing histogram
    message
    + [backport] 8220350: Refactor ShenandoahHeap::initialize
    + [backport] 8220712: [TESTBUG] gc/shenandoah/compiler/
    /TestMaybeNullUnsafeAccess should run with Shenandoah enabled
    + [backport] 8220714: C2 Compilation failure when accessing
    off-heap memory using Unsafe
    + [backport] 8221278: Shenandoah should not enqueue string
    dedup candidates during root scan
    + [backport] 8222130: Shenandoah should verify roots after
    pre-evacuation
    + [backport] 8222185: Shenandoah should report "committed" as
    capacity
    + [backport] 8222186: Shenandoah should not uncommit below
    minimum heap size
    + [backport] 8222403: Shenandoah: Remove
    ShenandoahAlwaysTrueClosure, use AlwaysTrueClosure instead
    + [backport] 8222425: Shenandoah: Move commonly used closures
    to separate files
    + [backport] 8223446: Shenandoah breaks alignment with some
    HumongousThreshold values
    + [backport] 8223447: Stabilize
    gc/shenandoah/TestStringDedupStress test
    + [backport] 8223651: Build fails with
  - -with-jvm-features=-jfr and --disable-precompiled-headers
    + [backport] 8223759: Shenandoah should allow arbitrarily low
    initial heap size
    + [backport] 8223762: Shenandoah: overflows in calculations
    involving heap capacity
    + [backport] 8223767: Shenandoah fails to build on Solaris
    x86_64
    + [backport] 8223980: Shenandoah: Refactor and fix
    ObjArrayChunkedTask verification
    + [backport] 8222838: Shenandoah: SEGV on accessing cset
    bitmap for NULL ptr
    + [backport] 8222843: Print Shenandoah cset map addresses in
    hs_err
    + [backport] Added a few missed worker sessions for worker
    tasks
    + [backport] Add JFR parallel and concurrent events
    (infrastructure)
    + [backport] Adjust metaspace size during each GC
    + [backport] A few more missing object equals barriers
    + [backport] Always copy forward for disjoint arrays (test)
    + [backport] Assert that Shenandoah does not trip JDK-8211926
    + [backport] Avoid false sharing by padding the
    ShenandoahEvacOOMHandler field in ShenandoahHeap
    + [backport] Avoid write barrier during full GC
    + [backport] Beef up and parallelize EvilSyncBug test
    + [backport] c2 verification pass fixes for CAS
    + [backport] Cherry-pick bulk MarkBitMap clearing methods
    + [backport] Cherry-pick JDK-8212673, fix for Node::eqv_uncast
    + [backport] Cleanup .ad files includes
    + [backport] Clean up and regroup Shenandoah flags
    + [backport] Cleanup buffered queue handling
    + [backport] Cleanup C2 debugging leftovers
    + [backport] Clean up dead code
    + [backport] Clean up declarations and uses of
    marked_object_iterate
    + [backport] Cleanup header files and forward declarations
    + [backport] Clean up Shenandoah configurations in shared tests
    + [backport] Clean up ShHeap::heap_region_iterate uses
    + [backport] Cleanup unused bitmap methods
    + [backport] Cleanup up superfluous newlines
    + [backport] Coarsen Full GC use of heap lock
    + [backport] Code root iterators should not be instantiated in
    worker threads
    + [backport] Common liveness cache in ShHeap
    + [backport] Compact heuristics adjustments
    + [backport] Concurrent cycle by default on any external GC
    request
    + [backport] Disable heap iteration for Shenandoah in SA
    + [backport] Disable ShHeapUncommit on too-large large-pages
    + [backport] Drop Shenandoah from test names
    + [backport] Eliminating Shenandoah exposure to CLD
    + [backport] Enable NUMA by default
    + [backport] Enable string deduplication in all marking phases
    + [backport] Factor out implicit/explicit GC requests
    + [backport] Fail early when critical barriers are disabled
    + [backport] Filter out TestPromotionToSurvivor.java test for
    Shenandoah
    + [backport] Filter upstream tests for Shenandoah (part 1:
    tier1_gc)
    + [backport] Fix build failures when Shenandoah is disabled,
    after #include reshuffles
    + [backport] Fix call to is_g1_marking_load() with
    is_shenandoah_state_load() in ShenandoahSupport
    + [backport] Fix compilation errors due to missing spaces
    between string literal and macro
    + [backport] Fixed ShenandoahStrDedupStress test that causes
    negative index OOB exception
    + [backport] Fix inconsistent "process weakrefs" logging
    + [backport] Fix indentation of CriticalNative* tests
    + [backport] Fix indenting in ShMarkCompact::do_it
    + [backport] Fix up superfluous changes against upstream
    + [backport] Fix various formattings and namings in shared GC
    code
    + [backport] Fix Windows build failure
    + [backport] Force termination logic is inverted
    + [backport] Handle metadata induced GC
    + [backport] Handle ShHeap::time_since_last_millis for RMI
    users
    + [backport] Handle update_refs, class_unload, ref_proc in
    ShConcMark better
    + [backport] Homogenize unimplemented stubs handling
    + [backport] Improve liveness count during marking
    + [backport] Initial committed regions count can be more than
    max
    + [backport] Inline/rename confusingly named methods in
    ShConcurrentMark
    + [backport] Inline ShHeap::do_marked_object_complete
    + [backport] Inline ShHeap::monitoring_support into header
    + [backport] Inline ShHeap::prepare_concurrent_evacuation
    + [backport] Inline trivial ShHeap methods right in header
    + [backport] In update-refs, update all code-roots when in
    degen-gc
    + [backport] JVMTI lacks a few GC barriers/hooks
    + [backport] Make heuristics tell if we can process references
    or unload classes
    + [backport] Make ResourceMark use consistent in
    ShenandoahCodeRoots
    + [backport] Make Shenandoah to use ShenandoahOWST only
    + [backport] Make sure bitmap is marked incomplete before
    bitmap resets
    + [backport] Make sure debug builds fail predictably on
    safepoint timeout
    + [backport] Micro-optimize ShHeap::get_region by moving the
    most likely branch first
    + [backport] Minor cleanup of Shenandoah SA
    + [backport] Missed VerifyObjectEquals in VerifyJCStressTest
    + [backport] More AArch64 assembler cleanups
    + [backport] Move HdrSeq and BinaryMagnitudeSeq into
    Shenandoah utilities
    + [backport] Move ShenandoahAllocType and
    ShenandoahAllocRequest to separate file
    + [backport] Move ShenandoahGCTracer to gc/shenandoah
    + [backport] Move Shenandoah tests to proper locations
    + [backport] Need to step over GC barriers in
    Node::eqv_uncast()
    + [backport] Parallel heap region iteration
    + [backport] Parallelise "Clear Liveness"
    + [backport] Parallelise "Complete Liveness"
    + [backport] Partial infrastructure for suspendible workers
    + [backport] Precleaning should use GC workers to do actual
    work
    + [backport] Pre-evac JVMTI roots + fixes
    + [backport] Prefix Shenandoah tests with "Test"
    + [backport] Prepare tests for making UseShenandoahGC
    experimental
    + [backport] Print number of threads in Shenandoah SA heap
    summary
    + [backport] Print "process weakrefs" to disambiguate vs
    CM-with-UR
    + [backport] Protect more internal code from false sharing
    + [backport] Protect risky conversion in
    ShenandoahHeap::millis_since_last_gc
    + [backport] Purge some G1-related cruft in C2
    + [backport] Purge unnecessary time conversion in
    ShenandoahPhaseTimings::record_phase_time
    + [backport] Readjust ShenandoahStrDedupStress test to avoid
    timeout
    + [backport] Record location when asserting the code root
    correctness
    + [backport] Refactor bitmap cleaning
    + [backport] Reformat Shenandoah tests
    + [backport] Rehash and cleanup usages of
    ShenandoahHeap::heap()
    + [backport] Re-label Shenandoah GC causes (SA&amp;GC)
    + [backport] Remove dead-weight ShenandoahPrinter
    + [backport] Remove fix-roots pass in ShHeap
    + [backport] Remove obsolete and ignored TestHeapAlloc
    + [backport] Remove obsolete code snippet related to barriers
    on constants
    + [backport] Remove obsolete unused flags
    + [backport] Remove old code from escape analysis
    + [backport] Remove Parallel Cleanup counters
    + [backport] Remove ShenandoahCompileCheck
    + [backport] Remove ShenandoahWriteBarrierCsetTestInIR flag
    + [backport] Remove ShenandoahWriteBarrierRB flag
    + [backport] Remove ShHeap::_heap_expansion_count
    + [backport] Remove ShHeap::region_in_collection_set in favor
    of SHR::in_cset
    + [backport] Remove ShWB from formssel.cpp
    + [backport] Remove unused SA ShenandoahHeapRegionSet.java
    + [backport] Remove unused ShenandoahEvacuateRootsClosure
    + [backport] Remove useless change in loopnode.cpp
    + [backport] Remove useless ShHeap::heap_region_iterate
    + [backport] Rename BrooksPointer to ShenandoahBrooksPointer
    + [backport] Rename concurrentMark -&gt; concurrent_mark
    + [backport] Rename fields in (SA) ShenandoahHeap.java to omit
    'Regions' and 'Field' suffix
    + [backport] Rename ShHeap::shenandoahPolicy -&gt;
    ShHeap::shenandoah_policy
    + [backport] Rename UINT64_FORMAT_HEX_W to UINT64_FORMAT_X_W
    + [backport] Rename VerifyObjectEquals to
    ShenandoahVerifyObjectEquals
    + [backport] Rename vm_operations_shenandoah.* to
    shenandoahVMOperations.*
    + [backport] Renaming ShenandoahParallelEvacuationTask to
    ShenandoahConcurrentEvacuationTask
    + [backport] Separate "passive" heuristics from "adaptive"
    + [backport] Several AArch64 cleanups
    + [backport] ShenandoahMemoryPool should support usage
    threshold
    + [backport] Shenandoah should @require Shenandoah, @key gc,
    and have good @test
    + [backport] Shenandoah test groups should not include each
    other
    + [backport] Silence VSC++ about multiple assignment operators
    + [backport] Simplify Shenandoah task termination in aborted
    paths
    + [backport] Single marking bitmap
    + [backport] Skip pre-evac verification and pacing on shortcut
    cycle path
    + [backport] Some Shenandoah related additions to SA
    + [backport] Sort ShenandoahConcurrentMark methods/fields into
    logical groups
    + [backport] Sort ShenandoahHeap methods/fields into logical
    groups
    + [backport] StringDedupMode enum for closures/method templates
    + [backport] Support VerifyBeforeGC and VerifyAfterGC VM
    options
    + [backport] Suppressing VSC++ warning locally
    + [backport] Trim down oop-equals verification
    + [backport] Trim unused code from Shenandoah SA
    + [backport] Turn TestReferenceCAS into a standalone/no-testng
    test
    + [backport] Update copyrights
    + [backport] Use ShenandoahAllocationThreshold in
    ShenandoahStaticHeuristics constructor
    + [backport] Use s-macro to keep GC phase enum and names in
    sync
    + Enable heap inspection for Shenandoah
    + Excess barriers before JNI accesses, already covered by
    "Move barriers into typeArrayOop.hpp direct memory accessors"
    + Fix build failure due to unknown INCLUDE_SHENANDOAHGC
    + Fix dangling write-barrier in acmp
    + Fix force termination detection by spin master
    + Fix minimal VM build
    + Fix non-PCH builds
    + Fix shutdown deadlock due to blocking SATB flush periodic
    task
    + JDK8u-only: Use WB-based acmp barrier
    + Prettify Shenandoah JDK 8 logging
    + ShenandoahSATBBufferSize cannot be size_t in 8u
    + Adjust code stub sizes for Shenandoah and future backports
    + Enable weak JNI handling with Shenandoah after JDK-8176100
  * AArch64 port
    + S8176100, PR3745: [AArch64] [REDO][REDO] G1 Needs pre
    barrier on dereference of weak JNI handles
    + S8186325, PR3745: AArch64: jtreg test
    hotspot/test/gc/g1/TestJNIWeakG1/TestJNIWeakG1.java SEGV
    + S8210425, PR3745: [AArch64] sharedRuntimeTrig/sharedRuntimeTrans
    compiled without optimization
    + S8224671, PR3745: AArch64: mauve System.arraycopy test
    failure
    + S8224828, PR3745: aarch64: rflags is not correct after
    safepoint poll
    + S8224880, PR3745: AArch64: java/javac error with
    AllocatePrefetchDistance
  * AArch32 port
    + [aarch32] fix crash 'guarantee(sect-&gt;end() &lt;= tend) failed:
    sanity'
    + Remove debug output
    + S8176100: [aarch32] [REDO][REDO] G1 Needs pre barrier on
    dereference of weak JNI handles
- Removed patch:
  * aarch64.patch
    + not needed any more</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571313600">- Add patch to fix boo#1138529:
  * hotspot-aarch64.patch</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1571659200">- Apply hotspot-aarch64.patch only for aarch64, as some other
  archs (armv6/7) use other hotspot sources</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1573819200">- Update to version jdk8u232 (icedtea 3.14.0) (October 2019 CPU,
  bsc#1154212)
  * Security fixes
    + S8167646: Better invalid FilePermission
    + S8213429, CVE-2019-2933: Windows file handling redux
    + S8218573, CVE-2019-2945: Better socket support
    + S8218877: Help transform transformers
    + S8220186: Improve use of font temporary files
    + S8220302, CVE-2019-2949: Better Kerberos ccache handling
    + S8221497: Optional Panes in Swing
    + S8221858, CVE-2019-2958: Build Better Processes
    + S8222684, CVE-2019-2964: Better support for patterns
    + S8222690, CVE-2019-2962: Better Glyph Images
    + S8223163: Better pattern recognition
    + S8223505, CVE-2019-2973: Better pattern compilation
    + S8223518, CVE-2019-2975: Unexpected exception in jjs
    + S8223892, CVE-2019-2978: Improved handling of jar files
    + S8224025: Fix for JDK-8220302 is not complete
    + S8224532, CVE-2019-2981: Better Path supports
    + S8224915, CVE-2019-2983: Better serial attributes
    + S8225286, CVE-2019-2987: Better rendering of native glyphs
    + S8225292, CVE-2019-2988: Better Graphics2D drawing
    + S8225298, CVE-2019-2989: Improve TLS connection support
    + S8225597, CVE-2019-2992: Enhance font glyph mapping
    + S8226765, CVE-2019-2999: Commentary on Javadoc comments
    + S8227129: Better ligature for subtables
    + S8227601: Better collection of references
    + S8228825, CVE-2019-2894, bsc#1152856: Enhance ECDSA operations
  * Import of OpenJDK 8 u232 build 01
    + S6913047: Long term memory leak when using PKCS11 and JCE
    exceeds 32 bit process address space
    + S6946830: javax.crypto.Cipher.doFinal behavior differs
    depending on platform
    + S6996807: FieldReflectorKey hash code computation can be
    improved
    + S8030993: Check jdk/src/share/native/common/jni_util.c for
    JNI pending exceptions
    + S8075136: Unnecessary sign extension for byte array access
    + S8075544: Add tiered testing definitions to the jdk repo
    + S8075573: Add jdk_other and jdk_svc to jdk tier 2 test
    definition
    + S8151486: Class.forName causes memory leak
    + S8152856: Xcode 7.3 -Wshift-negative-value compile failure on
    Mac OS X
    + S8168417: Pending exceptions in
    java.base/windows/native/libnio
    + S8170494: JNI exception pending in PlainDatagramSocketImpl.c
    + S8185900: hotspot build failed with gcc version Red Hat
    4.4.7-3
    + S8185979: PPC64: Implement SHA2 intrinsic
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8202353: os::readdir should use readdir instead of readdir_r
    + S8205587: Implicit function declaration in jni_util.c
    + S8210761: libjsig is being compiled without optimization
    + S8214002: Cannot use italic font style if the font has
    embedded bitmap
    + S8218721: C1's CEE optimization produces safepoint poll with
    invalid debug information
    + S8218854: FontMetrics.getMaxAdvance may be less than the
    maximum FontMetrics.charWidth
    + S8219807: C2 crash in IfNode::up_one_dom(Node*, bool)
    + S8221304: Problem list
    java/awt/FontMetrics/MaxAdvanceIsMax.java
    + S8223219: Backport of JDK-8199552 to OpenJDK 8 leads to
    duplicate -fstack-protector flags, overriding
  - -with-extra-cflags
    + S8225636: SA can't handle prelinked libraries
    + S8226392: Launcher should not enable legacy stdio streams on
    GNU/Linux (glibc)
    + S8226870: OpenJDK 8u JRE contains clhsdb and hsdb launchers
    + S8226928: [TESTBUG]
    test/java/net/NetworkInterface/IPv4Only.java fails
    intermittently on AIX
    + S8227018: CompletableFuture should not call
    Runtime.availableProcessors on fast path
    + S8228405: Incorrect format strings in
    PhaseIdealLoop::rc_predicate
  * Import of OpenJDK 8 u232 build 02
    + S8075546: Add tiered testing definitions to the langtools repo
    + S8202252: (aio) Closed AsynchronousSocketChannel keeps
    completion handler alive
    + S8216597: SIGBUS in
    Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after
    JDK-6913047
    + S8220513: Wrapper Key may get deleted when closing sessions
    in SunPKCS11 crypto provider
    + S8222737: [TESTBUG] Allow for tier 1 like testing in OpenJDK
    8u
    + S8224580: Matcher can cause oop field/array element to be
    reloaded
    + S8226543: Reduce GC pressure during message digest
    calculations in password-based encryption
  * Import of OpenJDK 8 u232 build 03
    + S8213561: ZipFile/MultiThreadedReadTest.java timed out in
    tier1
    + S8217785: Padding
    ParallelTaskTerminator::_offered_termination variable
  * Import of OpenJDK 8 u232 build 04
    + S8188868: PPC64: Support AES intrinsics on Big Endian
  * Import of OpenJDK 8 u232 build 05
    + S8080157: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
    + S8087128: C2: Disallow definition split on MachCopySpill nodes
    + S8139965: Hang seen when using
    com.sun.jndi.ldap.search.replyQueueSize
    + S8147502: Digest is incorrectly truncated for ECDSA
    signatures when the bit length of n is less than the field
    size
    + S8147611: G1 - Missing memory barrier in
    start_cset_region_for_worker
    + S8151066: assert(0 &lt;= i &amp;&amp; i &lt; length()) failed: index out of
    bounds
    + S8155951: VM crash in
    nsk/jvmti/RedefineClasses/StressRedefine: assert failed:
    Corrupted constant pool
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8206879: Currency decimal marker incorrect for Peru
    + S8211232: GraphKit::make_runtime_call() sometimes attaches
    wrong memory state to call
    + S8214687: Optimize Collections.nCopies().hashCode() and
    equals()
    + S8214702: Wrong text position for whitespaced string in
    printing Swing text
    + S8215130: Fix errors in LittleCMS 2.9 reported by GCC 8
    + S8215265: C2: range check elimination may allow illegal out
    of bound access
    + S8217359: C2 compiler triggers SIGSEGV after transformation
    in ConvI2LNode::Ideal
    + S8217731: Font rendering and glyph spacing changed from jdk-8
    to jdk-11
    + S8217896: Make better use of LCPUs when building on AIX
    + S8218201: Failures when vmIntrinsics::_getClass is not inlined
    + S8218280: LineNumberReader throws "Mark invalid" exception if
    CRLF straddles buffer.
    + S8218780: Update MUSCLE PCSC-Lite header files
    + S8219517: assert(false) failed: infinite loop in
    PhaseIterGVN::optimize
    + S8220072: GCC 8.3 reports errors in java.base
    + S8222980: Upgrade IANA Language Subtag Registry to Version
    2019-04-03
    + S8223177: Data race on JvmtiEnvBase::_tag_map in
    double-checked locking
    + S8223227: Rename acquire_tag_map() to tag_map_acquire() in
    jvmtiEnvBase
    + S8225423: GTK L&amp;F: JSplitPane: There is no divider shown
    + S8226798: JVM crash in
    klassItable::initialize_itable_for_interface(int,
    InstanceKlass*, bool, Thread*)
    + S8226964: [Yaru] GTK L&amp;F: There is no difference between menu
    selected and de-selected
    + S8228440: TestAESCiphers tests fail with "access denied"
    trying to access ArrayUtil
  * Import of OpenJDK 8 u232 build 06
    + S8178870: instrumentation.retransformClasses cause coredump
    + S8216965: crash in freetypeScaler.c CopyBW2Grey8
    + S8217676: Upgrade libpng to 1.6.37
    + S8222108: Reduce minRefreshTime for updating remote printer
    list on Windows
  * Import of OpenJDK 8 u232 build 08
    + S8225425: java.lang.UnsatisfiedLinkError: net.dll: Can't find
    dependent libraries
    + S8226607: Inconsistent info between pcsclite.md and MUSCLE
    headers
    + S8228469: (tz) Upgrade time-zone data to tzdata2019b
    + S8230085: (fs) FileStore::isReadOnly is always true on macOS
    Catalina
    + S8231098: (tz) Upgrade time-zone data to tzdata2019c
    + S8231463: Fix runtime/RedefineTests/RedefineDoubleDelete.java
    test in 8u
  * Shenandoah
    + [backport] 8230425: Shenandoah forces +UseNUMAInterleaving
    even after explicitly disabled
    + Missing include precompiled.hpp in
    shenandoahSynchronizerIterator.cpp
    + Protect lir_shenandoah_wb with INCLUDE_ALL_GCS
    + Prune unneeded (jccb|jmpb)_if_possible
    + Revert parts of x86_64.ad to 8u upstream state
    + Revert Shenandoah/JDK8-only changes relating to
    MonitorInUseLists
    + Revert Shenandoah-specific assert after JDK-8211926 landed
    + S8228746: Revert incorrect StubRoutines::contains change
    + S8231366: Shenandoah: Shenandoah String Dedup thread is not
    properly initialized
  * AArch64 port
    + S8151775, PR3750: aarch64: add support for 8.1 LSE atomic
    operations
    + S8179954, PR3762: AArch64: C1 and C2 volatile accesses are
    not sequentially consistent
    + S8205421, PR3762: AARCH64: StubCodeMark should be placed
    after alignment
    + S8206163, PR3762: AArch64: incorrect code generation for
    StoreCM
    + S8209420, PR3762: Track membars for volatile accesses so they
    can be properly optimized
    + S8211233, PR3762: MemBarNode::trailing_membar() and
    MemBarNode::leading_membar() need to handle dying subgraphs
    better
    + S8213134, PR3762: AArch64: vector shift failed with
    MaxVectorSize=8
    + S8214857, PR3762: "bad trailing membar" assert failure at
    memnode.cpp:3220
    + S8216350, PR3762: AArch64: monitor unlock fast path not called
    + S8219011, PR3762: Implement MacroAssembler::warn method on
    AArch64
    + S8228400, PR3762: Remove built-in AArch64 simulator
    + S8228406, PR3762: Superfluous change in chaitin.hpp
    + S8228593, PR3762: Revert explicit JDK 7 support additions
    + S8228716, PR3762: Revert InstanceKlass::print_on debug
    additions
    + S8228718, PR3762: Revert incorrect backport of JDK-8129757 to
    8-aarch64
    + S8228725, PR3762: AArch64: Purge method call format support
    + S8228747, PR3762: Revert "unused" attribute from
    test_arraycopy_func
    + S8228767, PR3762: Revert ResourceMark additions
    + S8228770, PR3762: Revert development hsdis changes
    + S8229123, PR3762: Revert build fixes for aarch64/zero
    + S8229124, PR3762: Revert disassembler.cpp changes
    + S8229145, PR3762: Revert TemplateTable::bytecode() visibility
    change
    + PR3762: profile_has_unique_klass gives wrong result
  * AArch32 port
    + [aarch32] Fix debug build failure introduced at feec5f4cea8b
    + c1: misc bugfixes
    + [c1] [Spec98] _228_jack crash
    + CCC: align doubles on stack
    + CritcalJNI support
    + Fix ARMv6 target causes some asserts to fail
    + Fix ccc: float args should go to stack after first double
    allocated there
    + Fix for jtreg TestArrayCopy6769124 -Xcomp
    + Fix for single-core config crash
    + Fix JVMTI PopFrame: should skip runtime call if next bytecode
    is not invokestatic
    + Fix native_wrapper faste unlock register used for temp, avoid
    clobbering lock_obj register
    + Fix operand value corruption in arraycopy
    + Fix SIGSEGV in System.arraycopy
    + Fix wrong fault_pc in safefetch stubs
    + Follow-up the fix for 8161598
    + JTReg test compiler/uncommontrap/TestDeoptOOM.java causes JVM
    assert
    + Raw long address should be converted to sizeof(ptr) one when
    it is required
    + S8207838: AArch32: Float registers incorrectly restored in
    JNI call
    + save_args/restore_args misses second part of VMRegPair
- Removed patch:
  * hotspot-aarch64.patch
    + not needed any more with this version</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1579608000">- Update to version jdk8u242 (icedtea 3.15.0) (January 2020 CPU,
  bsc#1160968)
  * Security fixes
    + S8225261: Better method resolutions
    + S8224909, CVE-2020-2583: Unlink Set of LinkedHashSets
    + S8225279: Better XRender interpolation
    + S8226352, CVE-2020-2590: Improve Kerberos interop capabilities
    + S8227758: More valid PKIX processing
    + S8227816: More Colorful ICC profiles
    + S8228548, CVE-2020-2593: Normalize normalization for all
    + S8229951, CVE-2020-2601: Better Ticket Granting Services
    + S8230279: Improve Pack200 file reading
    + S8230318: Better trust store usage
    + S8230967: Improve Registry support of clients
    + S8231129: More glyph images
    + S8231139: Improved keystore support
    + S8231422, CVE-2020-2604: Better serial filter handling
    + S8231795, CVE-2020-2659: Enhance datagram socket support
    + S8232419: Improve Registry registration
    + S8234037, CVE-2020-2654: Improve Object Identifier Processing
  * Import of OpenJDK 8 u242 build 01
    + S8010500: [parfait] Possible null pointer dereference at
    hotspot/src/share/vm/opto/loopnode.hpp
    + S8067429: java.lang.VerifyError: Inconsistent stackmap frames
    at branch target
    + S8073154: NULL-pointer dereferencing in
    LIR_OpProfileType::print_instr
    + S8077707: jdk9 b58 cannot run any graphical application on
    Win 8 with JAWS running
    + S8132249: Clean up JAB debugging code
    + S8133951: Zero interpreter asserts in stubRoutines.cpp
    + S8134739: compiler/loopopts/superword/
    /TestVectorizationWithInvariant crashes in loop opts
    + S8212071: Need to set the FreeType LCD Filter to reduce
    fringing.
    + S8230238: Add another regression test for JDK-8134739
    + S8230813: Add JDK-8010500 to compiler/loopopts/superword/
    /TestFuzzPreLoop.java bug list
    + S8231398: Add time tracing for gc log rotation at safepoint
    cleanup
    + S8231988: Unexpected test result caused by C2
    IdealLoopTree::do_remove_empty_loop
  * Import of OpenJDK 8 u242 build 02
    + S8057986: freetype code to get glyph outline does not handle
    initial control point properly
    + S8068736: Avoid synchronization on
    Executable/Field.declaredAnnotations
    + S8073347: javadoc of Formattable messed up by JDK-8019857
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8213568: Typo in
    java/awt/GraphicsEnvironment/LoadLock/GE_init5.java
    + S8218558: NMT stack traces in output should show mt component
    for virtual memory allocations
    + S8225101: Crash at sun.awt.X11.XlibWrapper.XkbGetUpdatedMap
    when change keybord map
    + S8228888: C2 compilation fails with assert "m has strange
    control"
    + S8229020: Failure on CPUs allowing loads reordering:
    assert(_tasks[t] == 1) failed: What else?
    + S8229169: False failure of GenericTaskQueue::pop_local on
    architectures with weak memory model
    + S8230363: C2: Let ConnectionGraph::not_global_escape(Node* n)
    return false if n is not in the CG
    + S8231887: ComodoCA.java fails because certificate was revoked
  * Import of OpenJDK 8 u242 build 04
    + S8048556: Unnecessary GCLocker-initiated young GCs
    + S8073108: Use x86 and SPARC CPU instructions for GHASH
    acceleration
    + S8130341: GHASH 32bit intrinsics has AEADBadTagException
    + S8139178: Wrong fontMetrics when printing in Landscape
    (OpenJDK)
    + S8146238: [macosx] Java2D Queue Flusher crash on OSX after
    switching between user accounts
    + S8196681: Java Access Bridge logging and debug flags
    dynamically controlled
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8219914: Change the environment variable for Java Access
    Bridge logging to have a directory.
    + S8225505: ctrl-F1 does not show the tooltip of a menu item
    (JMenuItems)
  * Import of OpenJDK 8 u242 build 05
    + S8029629: java/lang/ProcessBuilder/Basic.java fails
    intermittently
    + S8055351: sun/security/provider/DSA/
    /TestAlgParameterGenerator.java failed with interrupted!
    (timed out?)
    + S8131778: java disables UseAES flag when using VIS=2 on sparc
    + S8133489: Better messaging for PKIX path validation matching
    + S8134424: BlockDataInputStream.readUTFBody: size local
    StringBuffer with the given length
    + S8156028: G1YoungGenSizer _adaptive_size not correct when
    setting NewSize and MaxNewSize to the same value
    + S8170641: sun/net/www/protocol/https/HttpsURLConnection/
    /PostThruProxy.sh fails with timeout
    + S8173956: KeyStore regression due to default keystore being
    changed to PKCS12
    + S8185898: setRequestProperty(key, null) results in HTTP
    header without colon in request
    + S8189762: [TESTBUG] Create tests for JDK-8146115 container
    awareness and resource configuration
    + S8194653: Deadlock involving FileSystems.getDefault and
    System.loadLibrary call
    + S8195088: [TEST_BUG] StartManagementAgent got unexpected
    exception
    + S8195667: ProblemList PKCS11 tests Secmod/AddTrustedCert.java
    and tls/TestKeyMaterial.java due to JDK-8180837
    + S8198649: Switch AWT/Swing's default GTK version to 3
    + S8208715: Conversion of milliseconds to nanoseconds in
    UNIXProcess contains bug
    + S8213119: [macos]
    java/awt/GraphicsDevice/CheckDisplayModes.java fails
    + S8215210: [macos] Hangul text does not shape to the
    precomposed form on JDK8u
    + S8216401: Allow "file:" URLs in Class-Path of local JARs
    + S8221172: SunEC specific test is not limited to SunEC
    + S8221246: NullPointerException within Win32ShellFolder2
    + S8222496: [8u] Switch on GTK3 as a default GTK L&amp;F in
    client-libs
    + S8223490: Optimize search algorithm for determining default
    time zone
    + S8225141: Better handling of classes in error state in fast
    class initialization checks
    + S8229420: [Redo] jstat reports incorrect values for OU for
    CMS GC
    + S8231124: Missing closedir call with JDK-8223490
    + S8231584: Deadlock with ClassLoader.findLibrary and
    System.loadLibrary call
    + S8232984: Upgrading Joni License version to 2.1.16
    + S8233886: TEST_BUG jdk/java/net/CookieHandler/B6791927.java
    hit hardcoded expiration date
    + S8234591: [11u] Build with old C compiler broken by 8223490
    + S8236178: Debug build failed after 8236058
  * Import of OpenJDK 8 u242 build 06
    + S8227715: GPLv2 files missing Classpath Exception
    + S8232019: Add LuxTrust certificate updates to the existing
    root program
    + S8233223: Add Amazon Root CA certificates
    + S8235850: [TESTBUG] Remove
    test/runtime/RedefineTests/test8178870.sh
  * Import of OpenJDK 8 u242 build 07
    + S8037550: Update RFC references in javadoc to RFC 5280
    + S8039438: Some tests depend on internal API sun.misc.IOUtils
    + S8044500: Add kinit options and krb5.conf flags that allow
    users to obtain renewable tickets and specify ticket lifetimes
    + S8058290: JAAS Krb5LoginModule has suspect ticket-renewal
    logic, relies on clockskew grace
    + S8080835: Add blocking bulk read to sun.misc.IOUtils
    + S8138978: Examine usages of sun.misc.IOUtils
    + S8139206: Add InputStream readNBytes(int len)
    + S8183591: Incorrect behavior when reading DER value with
    Integer.MAX_VALUE length
    + S8186576: KerberosTicket does not properly handle renewable
    tickets at the end of their lifetime
    + S8186831: Kerberos ignores PA-DATA with a non-null s2kparams
    + S8186884: Test native KDC, Java krb5 lib, and native krb5 lib
    in one test
    + S8193832: Performance of InputStream.readAllBytes() could be
    improved
    + S8196956: (ch) More channels cleanup
    + S8201627: Kerberos sequence number issues
    + S8215032: Support Kerberos cross-realm referrals (RFC 6806)
    + S8226719: Kerberos login to Windows 2000 failed with
    "Inappropriate type of checksum in message"
    + S8227061: KDC.java test behaves incorrectly when AS-REQ
    contains a PAData not PA-ENC-TS-ENC
    + S8227381: GSS login fails with PREAUTH_FAILED
    + S8227437: S4U2proxy cannot continue because server's TGT
    cannot be found
    + S8232381: add result NULL-checking to freetypeScaler.c
    + S8233944: Make KerberosPrincipal.KRB_NT_ENTERPRISE field
    package private
    + S8235909: File.exists throws AccessControlException for
    invalid paths when a SecurityManager is installed
    + S8236983: [TESTBUG] Remove pointless catch block in
    test/jdk/sun/security/util/DerValue/BadValue.java
    + S8236984: Add compatibility wrapper for IOUtils.readFully
  * Import of OpenJDK 8 u242 build 08
    + S8031111: fix krb5 caddr
    + S8132111: Do not request for addresses for forwarded TGT
  * Shenandoah
    + Add missing include in shenandoahOopClosures.cpp
    + Avoid initializing unused SharedHeap::_workers for Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221766: Load-reference barriers for Shenandoah
    + [backport] 8222129: Shenandoah: Missing CompareAndSwapP/N
    case in get_barrier_strength()
    + [backport] 8222738: Shenandoah: assert(is_Proj()) failed when
    running cometd benchmarks
    + [backport] 8223448: Shenandoah disabled barriers blocks omit
    LRB
    + [backport] 8223450: Disable Shenandoah C2 barriers
    verification for x86_32
    + [backport] 8223567: Rename ShenandoahBrooksPointer to
    ShenandoahForwarding
    + [backport] 8224496: Shenandoah compilation fails with
    assert(is_CountedLoopEnd()) failed: invalid node class
    + [backport] 8224522: Shenandoah should apply barriers on
    deoptimization
    + [backport] 8224584: Shenandoah: Eliminate forwarding pointer
    word
    + [backport] 8224667: Shenandoah: Post-LRB cleanup
    + [backport] 8224881: Shenandoah: trashing "Collection Set,
    Pinned" region during Degenerated GC
    + [backport] 8224932: Shenandoah: Rename ShenandoahHeapLock,
    make it general purpose lock
    + [backport] 8225017: [TESTBUG]
    gc/shenandoah/oom/TestThreadFailure.java takes too long
    + [backport] 8225046: Shenandoah metrics logs refactoring
    + [backport] 8225048: Shenandoah x86_32 support
    + [backport] 8225111: Make Shenandoah tests work with 32-bit VMs
    + [backport] 8225229: Shenandoah: trim down default number of
    GC threads
    + [backport] 8225357: Rewire
    ShenandoahHeap::maybe_update_with_forwarded for contending fixups
    + [backport] 8225441: Cleanup
    ShenandoahHeap::atomic_compare_exchange_oop
    + [backport] 8225514: Shenandoah: ShenandoahCodeRoots should
    inherit from AllStatic
    + [backport] 8226757: Shenandoah: Make traversal and passive
    modes explicit
    + [backport] 8226957: Shenandoah: Remove obsoleted
    ShenandoahStoreCheck option
    + [backport] 8228775: Shenandoah: Remove useless
    null-input-verification in Shenandoah/C2 verifier
    + [backport] 8229002: Shenandoah: Missing node types in
    ShenandoahLoadReferenceBarrier::needs_barrier_impl()
    + [backport] 8229231: Shenandoah: Non-PCH builds failed after
    JDK-8224932
    + [backport] 8229350: Shenandoah does not need barriers before
    CreateEx
    + [backport] 8229416: Shenandoah: Demote or remove
    ShenandoahOptimize*Final optimizations
    + [backport] 8229419: Shenandoah: Cleanup LRB strength selector
    code
    + [backport] 8229707: [TESTBUG] Some Shenandoah tests assume
    Server VM by default
    + [backport] 8231197: Shenandoah: JVMTI heap walking cleanup
    crashes with NULL forwardee
    + [backport] 8231405: [Shenandoah] guarantee(d != NULL) failed:
    Null dominator info
    + [backport] 8231583: Shenandoah: Fix register clash in
    SBSA::resolve_forwarding_pointer() borrowing
    + [backport] 8231667: Shenandoah: Full GC should take empty
    regions into slices for compaction
    + [backport] 8231932: Shenandoah: conc/par GC threads
    ergonomics overrides user settings
    + [backport] 8231946: Remove obsolete and unused
    ShenandoahVerifyObjectEquals flag
    + [backport] 8231947: Shenandoah: cleanup
    ShenandoahHumongousMoves flag treatment
    + [backport] 8232102: Shenandoah: print everything in proper
    units
    + [backport] 8232176: Shenandoah: new assert in
    ShenandoahEvacuationTask is too strong
    + [backport] 8232534: Shenandoah: guard against reentrant
    ShenandoahHeapLock locking
    + [backport] 8232573: Shenandoah: cleanup and add more logging
    for in-pause phases
    + [backport] 8232575: Shenandoah: asynchronous object/region
    pinning
    + [backport] 8232702: Shenandoah:
    gc/shenandoah/TestVerifyJCStress.java uses non-existent
  - XX:+VerifyObjectEquals
    + [backport] 8232729: Shenandoah: assert
    ShenandoahHeap::cas_oop addresses are aligned
    + [backport] 8232802: Shenandoah: transition between "cset" and
    "pinned_cset" does not require cancelled gc
    + [backport] LRB right after call, use is Bool
    + Backport per-region seqnum tracking
    + [backport] Relax Shenandoah/C2 verifier against JDK11
    shortcomings
    + [backport] Remove to wrong handlings of Shenandoah LRB in
    escape analysis
    + Backport Traversal GC
    + Cherry-pick JDK-8231201: hs_err should print coalesced
    safepoint operations in Events section
    + Cleanup weak JNI refs when not doing reference processing
    + Correct order between load, LRB and membar nodes
    + Disable JNI tests for 32-bit platforms, due to lack of jtreg
    support
    + Do not enable UseCountedLoopSafepoints in Shenandoah by
    default
    + Fix ifdef -&gt; if INCLUDE_ALL_GCS in Shenandoah x86_32 code
    + Fix leftover commented out code in
    ShenandoahRuntime::load_reference_barrier_JRT
    + Fix lock ordering issue when calling JVMTI GetLoadedClasses
    during marking
    + Fix naked heap loads in HeapDumper
    + Fix ShenandoahLoadReferenceBarrierNode::{Value, Identity}
    signatures after LRB backport
    + Fix Windows build after LRB backports
    + Fix Zero build after LRB backport moves, remove other stubs
    + Remove some obsolete Shenandoah code from C2
    + Remove StubRoutines::_shenandoah_wb_C and related code
    + Revert obsolete shared-code changes in runtime synchronizer
    code
    + Revert ShenandoahVerifyObjectEquals additions, not required
    after LRB
    + S8236829: JDK-8232102 backport breaks s390
    + Save vector registers before LRB slowpath call
    + Shenandoah: JvmtiExport::weak_oops_do should not be entered
    by multiple threads
    + Shenandoah SA: support live region iteration
    + Use correct flag to guard implicit concurrent GC
  * AArch64 port
    + S8073108, PR3772: [AArch64] Use x86 and SPARC CPU
    instructions for GHASH acceleration
    + S8135018, PR3772: AARCH64: Missing memory barriers for CMS
    collector
    + S8209835, PR3772: Aarch64: elide barriers on all volatile
    operations
    + S8233839, PR3772: aarch64: missing memory barrier in
    NewObjectArrayStub and NewTypeArrayStub</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580126400">- On platform where OpenJ9 exists, avoid building with it in order
  to prevent build cycles</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1580817600">- Add -fcommon to CFLAGS and CXXFLAGS to allow building with new
  compilers (boo#1160398)</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE.</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1588593600">- Update to version jdk8u252 (icedtea 3.16.0) (April 2020 CPU,
  bsc#1169511)
  * Security fixes
    + JDK-8223898, CVE-2020-2754: Forward references to Nashorn
    + JDK-8223904, CVE-2020-2755: Improve Nashorn matching
    + JDK-8224541, CVE-2020-2756: Better mapping of serial ENUMs
    + JDK-8224549, CVE-2020-2757: Less Blocking Array Queues
    + JDK-8225603: Enhancement for big integers
    + JDK-8227542: Manifest improved jar headers
    + JDK-8231415, CVE-2020-2773: Better signatures in XML
    + JDK-8233250: Better X11 rendering
    + JDK-8233410: Better Build Scripting
    + JDK-8234027: Better JCEKS key support
    + JDK-8234408, CVE-2020-2781: Improve TLS session handling
    + JDK-8234825, CVE-2020-2800: Better Headings for HTTP Servers
    + JDK-8234841, CVE-2020-2803: Enhance buffering of byte buffers
    + JDK-8235274, CVE-2020-2805: Enhance typing of methods
    + JDK-8236201, CVE-2020-2830: Better Scanner conversions
    + JDK-8238960: linux-i586 builds are inconsistent as the newly
    build jdk is not able to reserve enough space for object heap
  * Import of OpenJDK 8 u252 build 01
    + JDK-8028480: (zipfs) NoSuchFileException on creating a file
    in ZipFileSystem with CREATE and WRITE
    + JDK-8031191: Warning exception when XMLSignature logging is
    enabled
    + JDK-8034773: (zipfs) newOutputstream uses CREATE_NEW when no
    options specified
    + JDK-8038431: Close InputStream when finished retrieving XML
    Signature HTTP References
    + JDK-8041620: Solaris Studio 12.4 C++ 5.13 change in behavior
    for placing friend declarations within surrounding scope.
    + JDK-8046044: Fix raw and unchecked lint warnings in XML
    Signature Impl
    + JDK-8056313: TEST_BUG: java/util/Timer/NameConstructors.java
    fails intermittently
    + JDK-8144732: VM_HeapDumper hits assert with bad dump_len
    + JDK-8150432: LocaleProviders.sh fails
    + JDK-8150460: (linux|bsd|aix)_close.c: file descriptor table
    may become large or may not work at all
    + JDK-8216354: Syntax error in toolchain_windows.m4
    + JDK-8218553: Enhance keystore load debug output
    + JDK-8218580: endpoint identification algorithm should be
    case-insensitive
    + JDK-8227397: Add --with-extra-asflags configure option
    + JDK-8227662: freetype seeks to index at the end of the font
    data
    + JDK-8231201: hs_err should print coalesced safepoint
    operations in Events section
    + JDK-8231991: Mouse wheel change focus on awt/swing windows
    + JDK-8232003: (fs) Files.write can leak file descriptor in the
    exception case
    + JDK-8232154: Update Mesa 3-D Headers to version 19.2.1
    + JDK-8232355: Two obsolete flags have the wrong obsolete
    version in 8u
    + JDK-8233023: assert(Opcode() == mem-&gt;Opcode() ||
    phase-&gt;C-&gt;get_alias_index(adr_type()) == Compile::AliasIdxRaw)
    failed: no mismatched stores, except on raw memory
    + JDK-8233404: System property to set the number of PBE
    iterations in JCEKS keystores
    + JDK-8234107: Several AWT modal dialog tests failing on Linux
    after JDK-8231991
    + JDK-8234264: Incorrect 8047434 JDK 8 backport in 8219677
    + JDK-8234288: Turkey Time Zone returns incorrect time zone name
    + JDK-8235637: jhsdb jmap from OpenJDK 11.0.5 doesn't work if
    prelink is enabled
    + JDK-8236873: Worker has a deadlock bug
    + JDK-8237523: 8u backport of JDK-8216354 didn't include
    generated-configure.sh changes
  * Import of OpenJDK 8 u252 build 02
    + JDK-7143743: Potential memory leak with zip provider
    + JDK-8033215: clang: node.cpp:284 IDX_INIT macro use
    uninitialized field _out
    + JDK-8143849: Integrate Marlin renderer per JEP 265
    + JDK-8146792: Predicate moved after partial peel may lead to
    broken graph
    + JDK-8193255: Root Certificates should be stored in text
    format and assembled at build time
    + JDK-8233995: java.vm.vendor (and potentially other
    properties/fields) not correctly set in Windows/Hotspot build
    of OpenJDK8
    + JDK-8235142: JDK-8193255 backport broke bootstrap with JDK 10
  * Import of OpenJDK 8 u252 build 03
    + JDK-8005819: Support cross-realm MSSFU
    + JDK-8046724: XML Signature ECKeyValue elements cannot be
    marshalled or unmarshalled
    + JDK-8079140: IgnoreAllErrorHandler should use doPrivileged
    when it reads system properties
    + JDK-8134579: [TESTBUG] Some bmi tests fail if
    can_access_local_variables is on.
    + JDK-8145055: Marlin renderer causes unaligned write accesses
    + JDK-8145849: ALPN: getHandshakeApplicationProtocol() always
    return null
    + JDK-8146293: Add support for RSASSA-PSS Signature algorithm
    + JDK-8158978: ALPN not working when values are set directly on
    a SSLServerSocket
    + JDK-8162723: Array index overflow in Base64 utility class
    + JDK-8170282: Enable ALPN parameters to be supplied during the
    TLS handshake
    + JDK-8171443: (spec) An ALPN callback function may also ignore
    ALPN
    + JDK-8175029: StackOverflowError in X509CRL and
    X509Certificate.verify(PublicKey, Provider)
    + JDK-8200400: Restrict Sasl mechanisms
    + JDK-8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + JDK-8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + JDK-8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + JDK-8213009: Refactoring existing SunMSCAPI classes
    + JDK-8213010: Supporting keys created with certmgr.exe
    + JDK-8214096: sun.security.util.SignatureUtil passes null
    parameter, so JCE validation fails
    + JDK-8215694: keytool cannot generate RSASSA-PSS certificates
    + JDK-8216039: TLS with BC and RSASSA-PSS breaks
    ECDHServerKeyExchange
    + JDK-8221407: Windows 32bit build error in
    libsunmscapi/security.cpp
    + JDK-8223003: SunMSCAPI keys are not cleaned up
    + JDK-8223063: Support CNG RSA keys
    + JDK-8223158: Docked MacBook cannot start any Java Swing
    applications
    + JDK-8225180: SignedObject with invalid Key not throwing the
    InvalidKeyException in Windows
    + JDK-8225392: Comparison builds are failing due to cacerts file
    + JDK-8225745: NoSuchAlgorithmException exception for
    SHA256withECDSA with RSASSA-PSS support
    + JDK-8229767: Typo in java.security: Sasl.createClient and
    Sasl.createServer
    + JDK-8230977: JEP 244/8051498 - TLS Application-Layer Protocol
    Negotiation Extension (Java SE 8)
    + JDK-8230978: Add support for RSASSA-PSS Signature algorithm
    (Java SE 8)
    + JDK-8234245: sun/security/lib/cacerts/VerifyCACerts.java
    fails due to wrong checksum
    + JDK-8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash
    algorithm as AlgorithmId
    + JDK-8238502: sunmscapi.dll causing EXCEPTION_ACCESS_VIOLATION
  * Import of OpenJDK 8 u252 build 04
    + JDK-8047212:
    runtime/ParallelClassLoading/bootstrap/random/inner-complex
    assert(ObjectSynchronizer::verify_objmon_isinpool(inf))
    failed: monitor is invalid
    + JDK-8135318: CMS wrong max_eden_size for
    check_gc_overhead_limit
    + JDK-8144445: Maximum size checking in Marlin ArrayCache
    utility methods is not optimal
    + JDK-8144446: Automate the Marlin crash test
    + JDK-8144630: Use PrivilegedAction to create Thread in Marlin
    RendererStats
    + JDK-8215756: Memory leaks in the AWT on macOS
    + JDK-8219244: NMT: Change ThreadSafepointState's allocation
    type from mtInternal to mtThread
    + JDK-8225128: Add exception for expiring DocuSign root to
    VerifyCACerts test
    + JDK-8229345: Memory leak due to vtable stubs not being shared
    on SPARC
    + JDK-8229872: (fs) Increase buffer size used with getmntent
    + JDK-8236179: C1 register allocation error with T_ADDRESS
    + JDK-8237368: Problem with NullPointerException in RMI
    TCPEndpoint.read
  * Import of OpenJDK 8 u252 build 05
    + JDK-8022263: use same Clang warnings on BSD as on Linux
    + JDK-8055283: Expand ResourceHashtable with C_HEAP allocation,
    removal and some unit tests
    + JDK-8068184: Fix for JDK-8032832 caused a deadlock
    + JDK-8079693: Add support for ECDSA P-384 and P-521 curves to
    XML Signature
    + JDK-8132130: some docs cleanup
    + JDK-8144526: Remove Marlin logging use of deleted internal API
    + JDK-8144654: Improve Marlin logging
    + JDK-8144718: Pisces / Marlin Strokers may generate invalid
    curves with huge coordinates and round joins
    + JDK-8166976: TestCipherPBECons has wrong @run line
    + JDK-8167409: Invalid value passed to critical JNI function
    + JDK-8181872: C1: possible overflow when strength reducing
    integer multiply by constant
    + JDK-8187078: -XX:+VerifyOops finds numerous problems when
    running JPRT
    + JDK-8191227: issues with unsafe handle resolution
    + JDK-8216472: (se) Stack overflow during selection operation
    leads to crash (win)
    + JDK-8229022: BufferedReader performance can be improved by
    using StringBuilder
    + JDK-8231430: C2: Memory stomp in max_array_length() for
    T_ILLEGAL type
    + JDK-8235904: Infinite loop when rendering huge lines
  * Import of OpenJDK 8 u252 build 06
    + JDK-8225130: Add exception for expiring Comodo roots to
    VerifyCACerts test
    + JDK-8230235: Rendering HTML with empty img attribute and
    documentBaseKey cause Exception
    + JDK-8235744: PIT:
    test/jdk/javax/swing/text/html/TestJLabelWithHTMLText.java
    times out in linux-x64
    + JDK-8240521: Revert backport of 8231584: Deadlock with
    ClassLoader.findLibrary and System.loadLibrary call
  * Import of OpenJDK 8 u252 build 07
    + JDK-8197441: Signature#initSign/initVerify for an invalid
    private/public key fails with ClassCastException for SunPKCS11
    provider
  * Import of OpenJDK 8 u252 build 08
    + JDK-8241296: Segfault in JNIHandleBlock::oops_do()
    + JDK-8241307: Marlin renderer should not be the default in
    8u252
  * Import of OpenJDK 8 u252 build 09
    + JDK-8204152: SignedObject throws NullPointerException for
    null keys with an initialized Signature object
    + JDK-8219597: (bf) Heap buffer state changes could provoke
    unexpected exceptions
  * Backports
    + JDK-8035949, PR3784: Remove unused macro USE_SELECT and clean
    up Unix version of net_util_md.{c,h}
    + JDK-8167481, PR3784: cleanup of headers and includes for
    native libnet
    + JDK-8195607, PR3776:
    sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with
    "NSS initialization failed" on NSS 3.34.1
  * Bug fixes
    + PR3786: Use 'JDK-' as prefix for bugs from the OpenJDK bug
    tracker
  * Shenandoah
    + AArch64: Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + [backport] 8221751: Shenandoah: Improve SATB enqueueing
    + [backport] 8221848: Shenandoah: ArrayCopy post-barrier
    improvements
    + [backport] 8222766: Shenandoah: streamline post-LRB CAS
    barrier (x86)
    + [backport] 8223951: Shenandoah: Only need to update thread
    roots during final update refs
    + [backport] 8224179: Shenandoah: CTW test failures with
    traversal GC
    + [backport] 8224495: Shenandoah: Do not rescan code roots in
    final mark pause if it is not degenerated GC
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224525: Shenandoah: Eliminate shenandoah
    verifier's side-effects
    + [backport] 8225171: Remove leftovers in
    shenandoahBarrierSetC1.cpp
    + [backport] 8225341: Shenandoah: CM::update_thread_roots()
    needs to handle derived pointers
    + [backport] 8226586: Shenandoah: No need to pre-evacuate roots
    for degenerated GC
    + [backport] 8227327: Shenandoah: Faster and more parallel tests
    + [backport] 8227676: Shenandoah: More consistent naming of LRB
    entry points
    + [backport] 8228364: Shenandoah: Remove unused code from
    ShenandoahBarrierSetC1
    + [backport] 8229865: Use explicit #include debug.hpp for
    STATIC_ASSERT in gc/shenandoah/shenandoahUtils.cpp
    + [backport] 8229919: Support JNI Critical functions in object
    pinning API on x86_32 platforms
    + [backport] 8231086: Shenandoah: Stronger invariant for
    object-arraycopy
    + [backport] 8231293: Shenandoah: Traversal should not revive
    dead weak roots
    + [backport] 8231410: Shenandoah: clone barrier should use base
    pointer
    + [backport] 8231447: Shenandoah: Compilation-time regression
    after JDK-8231086
    + [backport] 8231499: Shenandoah:
    compiler/arraycopy/TestDefaultMethodArrayCloneDeoptC2 fails
    + [backport] 8232205: Shenandoah: missing "Update References"
  - &gt; "Update Roots" tracing
    + [backport] 8232778: Shenandoah: SBSA::arraycopy_prologue
    checks wrong register
    + [backport] 8232908: Shenandoah: compact heuristics has
    incorrect trigger "Free is lower than allocated recently"
    + [backport] 8233387: Shenandoah: passive mode should disable
    pacing ergonomically
    + [backport] 8233520: Shenandoah: do not sleep when thread is
    attaching
    + [backport] 8233850: Shenandoah: Shenandoah thread count
    ergonomics should be container aware
    + [backport] 8234232: [TESTBUG]
    gc/shenandoah/jvmti/TestHeapDump.java fails with -Xcomp
    + [backport] 8235636:
    gc/shenandoah/compiler/TestUnsafeOffheapSwap.java fails after
    JDK-8226411
    + [backport] 8235729: Shenandoah: Remove useless casting to
    non-constant
    + [backport] 8236106: [TESTBUG] Shenandoah: Make
    TestThreadFailure more resilient
    + [backport] 8236181: C2: Remove useless step_over_gc_barrier()
    in int-&gt;bool conversion
    + [backport] 8236732: Shenandoah: Stricter placement for
    oom-evac scopes
    + [backport] 8236851: Shenandoah: More details in Traversal GC
    event messages
    + [backport] 8237007: Shenandoah: assert(_base == Tuple)
    failure during C2 compilation
    + [backport] 8237038: Shenandoah: Reduce thread pool size in
    TestEvilSyncBug.java test
    + [backport] 8237570: Shenandoah: cleanup uses of
    allocation/free threshold in static heuristics
    + [backport] 8237586: Shenandoah: provide option to disable
    periodic GC
    + [backport] 8239868: Shenandoah: ditch C2 node limit
    adjustments
    + [backport] 8239904: Shenandoah: accumulated penalties should
    not be over 100% of capacity
    + [backport] 8240069: Shenandoah: turn more flags diagnostic
    + [backport] 8240070: Shenandoah: remove obsolete
    ShenandoahCommonGCStateLoads
    + [backport] 8240076: Shenandoah: pacer should cover reset and
    preclean phases
    + [backport] 8240215: Shenandoah: remove
    ShenandoahAllocationTrace
    + [backport] 8240216: Shenandoah: remove
    ShenandoahTerminationTrace
    + [backport] 8240217: Shenandoah: remove ShenandoahEvacAssist
    + [backport] 8240534: Shenandoah: ditch debug safepoint timeout
    adjustment
    + Fix LRB use in LIRGenerator::do_UnsafeGetAndSetObject
    + Fix tier2_gc_shenandoah group definition
    + Rectify JDK-8191227 workaround for Shenandoah
    + Revert leftover changes in type.{cpp|hpp}
    + JDK-8233500: Shenandoah: Shenandoah load barrier should save
    registers before calling keep alive barrier on x86
  * AArch64 port
    + JDK-8224851, PR3785: AArch64: fix warnings and errors with
    Clang and GCC 8.3
  * AArch32 port
    + JDK-8240219: CPU specific port of 8229345: Memory leak due to
    vtable stubs not being shared on SPARC</changelog>
  <changelog author="Josef Cejka &lt;jcejka@suse.com&gt;" date="1590753600">- Ignore whitespaces after the header or footer in PEM X.509 cert
  (bsc#1171352)
  + JDK_1_8_0-8208602.patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1603886400">- Update to version jdk8u272 (icedtea 3.17.0) (July 2020 CPU,
  bsc#1174157, and October 2020 CPU, bsc#1177943)
  * New features
    + JDK-8245468: Add TLSv1.3 implementation classes from 11.0.7
    + PR3796: Allow the number of curves supported to be specified
  * Security fixes
    + JDK-8028431, CVE-2020-14579: NullPointerException in
    DerValue.equals(DerValue)
    + JDK-8028591, CVE-2020-14578: NegativeArraySizeException in
    sun.security.util.DerInputStream.getUnalignedBitString()
    + JDK-8230613: Better ASCII conversions
    + JDK-8231800: Better listing of arrays
    + JDK-8232014: Expand DTD support
    + JDK-8233255: Better Swing Buttons
    + JDK-8233624: Enhance JNI linkage
    + JDK-8234032: Improve basic calendar services
    + JDK-8234042: Better factory production of certificates
    + JDK-8234418: Better parsing with CertificateFactory
    + JDK-8234836: Improve serialization handling
    + JDK-8236191: Enhance OID processing
    + JDK-8236196: Improve string pooling
    + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class
    + JDK-8237117, CVE-2020-14556: Better ForkJoinPool behavior
    + JDK-8237592, CVE-2020-14577: Enhance certificate verification
    + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts
    + JDK-8237995, CVE-2020-14782: Enhance certificate processing
    + JDK-8238002, CVE-2020-14581: Better matrix operations
    + JDK-8238804: Enhance key handling process
    + JDK-8238842: AIOOBE in GIFImageReader.initializeStringTable
    + JDK-8238843: Enhanced font handing
    + JDK-8238920, CVE-2020-14583: Better Buffer support
    + JDK-8238925: Enhance WAV file playback
    + JDK-8240119, CVE-2020-14593: Less Affine Transformations
    + JDK-8240124: Better VM Interning
    + JDK-8240482: Improved WAV file playback
    + JDK-8241114, CVE-2020-14792: Better range handling
    + JDK-8241379: Update JCEKS support
    + JDK-8241522: Manifest improved jar headers redux
    + JDK-8242136, CVE-2020-14621: Better XML namespace handling
    + JDK-8242680, CVE-2020-14796: Improved URI Support
    + JDK-8242685, CVE-2020-14797: Better Path Validation
    + JDK-8242695, CVE-2020-14798: Enhanced buffer support
    + JDK-8243302: Advanced class supports
    + JDK-8244136, CVE-2020-14803: Improved Buffer supports
    + JDK-8244479: Further constrain certificates
    + JDK-8244955: Additional Fix for JDK-8240124
    + JDK-8245407: Enhance zoning of times
    + JDK-8245412: Better class definitions
    + JDK-8245417: Improve certificate chain handling
    + JDK-8248574: Improve jpeg processing
    + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit
    + JDK-8253019: Enhanced JPEG decoding
  * Import of OpenJDK 8 u262 build 01
    + JDK-4949105: Access Bridge lacks html tags parsing
    + JDK-8003209: JFR events for network utilization
    + JDK-8030680: 292 cleanup from default method code assessment
    + JDK-8035633: TEST_BUG: java/net/NetworkInterface/Equals.java
    and some tests failed on windows intermittently
    + JDK-8041626: Shutdown tracing event
    + JDK-8141056: Erroneous assignment in HeapRegionSet.cpp
    + JDK-8149338: JVM Crash caused by Marlin renderer not handling
    NaN coordinates
    + JDK-8151582: (ch) test java/nio/channels/
    /AsyncCloseAndInterrupt.java failing due to "Connection
    succeeded"
    + JDK-8165675: Trace event for thread park has incorrect unit
    for timeout
    + JDK-8176182: 4 security tests are not run
    + JDK-8178910: Problemlist sample tests
    + JDK-8183925: Decouple crash protection from watcher thread
    + JDK-8191393: Random crashes during cfree+0x1c
    + JDK-8195817: JFR.stop should require name of recording
    + JDK-8195818: JFR.start should increase autogenerated name by
    one
    + JDK-8195819: Remove recording=x from jcmd JFR.check output
    + JDK-8199712: Flight Recorder
    + JDK-8202578: Revisit location for class unload events
    + JDK-8202835: jfr/event/os/TestSystemProcess.java fails on
    missing events
    + JDK-8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + JDK-8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + JDK-8203664: JFR start failure after AppCDS archive created
    with JFR StartFlightRecording
    + JDK-8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + JDK-8203929: Limit amount of data for JFR.dump
    + JDK-8205516: JFR tool
    + JDK-8207392: [PPC64] Implement JFR profiling
    + JDK-8207829: FlightRecorderMXBeanImpl is leaking the first
    classloader which calls it
    + JDK-8209960: -Xlog:jfr* doesn't work with the JFR
    + JDK-8210024: JFR calls virtual is_Java_thread from ~Thread()
    + JDK-8210776: Upgrade X Window System 6.8.2 to the latest XWD
    1.0.7
    + JDK-8211239: Build fails without JFR: empty JFR events
    signatures mismatch
    + JDK-8212232: Wrong metadata for the configuration of the
    cutoff for old object sample events
    + JDK-8213015: Inconsistent settings between JFR.configure and
  - XX:FlightRecorderOptions
    + JDK-8213421: Line number information for execution samples
    always 0
    + JDK-8213617: JFR should record the PID of the recorded process
    + JDK-8213734: SAXParser.parse(File, ..) does not close
    resources when Exception occurs.
    + JDK-8213914: [TESTBUG] Several JFR VM events are not covered
    by tests
    + JDK-8213917: [TESTBUG] Shutdown JFR event is not covered by
    test
    + JDK-8213966: The ZGC JFR events should be marked as
    experimental
    + JDK-8214542: JFR: Old Object Sample event slow on a deep heap
    in debug builds
    + JDK-8214750: Unnecessary &lt;p&gt; tags in jfr classes
    + JDK-8214896: JFR Tool left files behind
    + JDK-8214906: [TESTBUG] jfr/event/sampling/TestNative.java
    fails with UnsatisfiedLinkError
    + JDK-8214925: JFR tool fails to execute
    + JDK-8215175: Inconsistencies in JFR event metadata
    + JDK-8215237: jdk.jfr.Recording javadoc does not compile
    + JDK-8215284: Reduce noise induced by periodic task
    getFileSize()
    + JDK-8215355: Object monitor deadlock with no threads holding
    the monitor (using jemalloc 5.1)
    + JDK-8215362: JFR GTest JfrTestNetworkUtilization fails
    + JDK-8215771: The jfr tool should pretty print reference chains
    + JDK-8216064: -XX:StartFlightRecording:settings= doesn't work
    properly
    + JDK-8216486: Possibility of integer overflow in
    JfrThreadSampler::run()
    + JDK-8216528: test/jdk/java/rmi/transport/
    /runtimeThreadInheritanceLeak/
    /RuntimeThreadInheritanceLeak.java failing with Xcomp
    + JDK-8216559: [JFR] Native libraries not correctly parsed from
    /proc/self/maps
    + JDK-8216578: Remove unused/obsolete method in JFR code
    + JDK-8216995: Clean up JFR command line processing
    + JDK-8217744: [TESTBUG] JFR TestShutdownEvent fails on some
    systems due to process surviving SIGINT
    + JDK-8217748: [TESTBUG] Exclude TestSig test case from JFR
    TestShutdownEvent
    + JDK-8218935: Make jfr strncpy uses GCC 8.x friendly
    + JDK-8223147: JFR Backport
    + JDK-8223689: Add JFR Thread Sampling Support
    + JDK-8223690: Add JFR BiasedLock Event Support
    + JDK-8223691: Add JFR G1 Region Type Change Event Support
    + JDK-8223692: Add JFR G1 Heap Summary Event Support
    + JDK-8224172: assert(jfr_is_event_enabled(id)) failed:
    invariant
    + JDK-8224475: JTextPane does not show images in HTML rendering
    + JDK-8226253: JAWS reports wrong number of radio buttons when
    buttons are hidden.
    + JDK-8226779: [TESTBUG] Test JFR API from Java agent
    + JDK-8226892: ActionListeners on JRadioButtons don't get
    notified when selection is changed with arrow keys
    + JDK-8227011: Starting a JFR recording in response to JVMTI
    VMInit and / or Java agent premain corrupts memory
    + JDK-8227605: Kitchensink fails "assert((((klass)-&gt;trace_id()
    &amp; (JfrTraceIdEpoch::leakp_in_use_this_epoch_bit())) != 0))
    failed: invariant"
    + JDK-8229366: JFR backport allows unchecked writing to memory
    + JDK-8229401: Fix JFR code cache test failures
    + JDK-8229708: JFR backport code does not initialize
    + JDK-8229873: 8229401 broke jdk8u-jfr-incubator
    + JDK-8230448: [test] JFRSecurityTestSuite.java is failing on
    Windows
    + JDK-8230707: JFR related tests are failing
    + JDK-8230782: Robot.createScreenCapture() fails if
    "awt.robot.gtk" is set to false
    + JDK-8230856: Java_java_net_NetworkInterface_getByName0 on
    unix misses ReleaseStringUTFChars in early return
    + JDK-8230947: TestLookForUntestedEvents.java is failing after
    JDK-8230707
    + JDK-8231995: two jtreg tests failed after 8229366 is fixed
    + JDK-8233623: Add classpath exception to copyright in
    EventHandlerProxyCreator.java file
    + JDK-8236002: CSR for JFR backport suggests not leaving out
    the package-info
    + JDK-8236008: Some backup files were accidentally left in the
    hotspot tree
    + JDK-8236074: Missed package-info
    + JDK-8236174: Should update javadoc since tags
    + JDK-8238076: Fix OpenJDK 7 Bootstrap Broken by JFR Backport
    + JDK-8238452: Keytool generates wrong expiration date if
    validity is set to 2050/01/01
    + JDK-8238555: Allow Initialization of SunPKCS11 with NSS when
    there are external FIPS modules in the NSSDB
    + JDK-8238589: Necessary code cleanup in JFR for JDK8u
    + JDK-8238590: Enable JFR by default during compilation in 8u
    + JDK-8239055: Wrong implementation of VMState.hasListener
    + JDK-8239476: JDK-8238589 broke windows build by moving
    OrderedPair
    + JDK-8239479: minimal1 and zero builds are failing
    + JDK-8239867: correct over use of INCLUDE_JFR macro
    + JDK-8240375: Disable JFR by default for July 2020 release
    + JDK-8241444: Metaspace::_class_vsm not initialized if
    compressed class pointers are disabled
    + JDK-8241902: AIX Build broken after integration of
    JDK-8223147 (JFR Backport)
    + JDK-8242788: Non-PCH build is broken after JDK-8191393
  * Import of OpenJDK 8 u262 build 02
    + JDK-8130737: AffineTransformOp can't handle child raster with
    non-zero x-offset
    + JDK-8172559: [PIT][TEST_BUG] Move @test to be 1st annotation
    in java/awt/image/Raster/TestChildRasterOp.java
    + JDK-8230926: [macosx] Two apostrophes are entered instead of
    one with "U.S. International - PC" layout
    + JDK-8240576: JVM crashes after transformation in C2
    IdealLoopTree::merge_many_backedges
    + JDK-8242883: Incomplete backport of JDK-8078268: backport
    test part
  * Import of OpenJDK 8 u262 build 03
    + JDK-8037866: Replace the Fun class in tests with lambdas
    + JDK-8146612: C2: Precedence edges specification violated
    + JDK-8150986: serviceability/sa/jmap-hprof/
    /JMapHProfLargeHeapTest.java failing because expects HPROF
    JAVA PROFILE 1.0.1 file format
    + JDK-8229888: (zipfs) Updating an existing zip file does not
    preserve original permissions
    + JDK-8230597: Update GIFlib library to the 5.2.1
    + JDK-8230769: BufImg_SetupICM add
    ReleasePrimitiveArrayCritical call in early return
    + JDK-8233880, PR3798: Support compilers with multi-digit major
    version numbers
    + JDK-8239852: java/util/concurrent tests fail with
  - XX:+VerifyGraphEdges: assert(!VerifyGraphEdges) failed:
    verification should have failed
    + JDK-8241638: launcher time metrics always report 1 on Linux
    when _JAVA_LAUNCHER_DEBUG set
    + JDK-8243059: Build fails when --with-vendor-name contains a
    comma
    + JDK-8243474: [TESTBUG] removed three tests of 0 bytes
    + JDK-8244461: [JDK 8u] Build fails with glibc 2.32
    + JDK-8244548: JDK 8u: sun.misc.Version.jdkUpdateVersion()
    returns wrong result
  * Import of OpenJDK 8 u262 build 04
    + JDK-8067796: (process) Process.waitFor(timeout, unit) doesn't
    throw NPE if timeout is less than, or equal to zero when unit
    == null
    + JDK-8148886: SEGV in sun.java2d.marlin.Renderer._endRendering
    + JDK-8171934:
    ObjectSizeCalculator.getEffectiveMemoryLayoutSpecification()
    does not recognize OpenJDK's HotSpot VM
    + JDK-8196969: JTreg Failure:
    serviceability/sa/ClhsdbJstack.java causes NPE
    + JDK-8243539: Copyright info (Year) should be updated for fix
    of 8241638
    + JDK-8244777: ClassLoaderStats VM Op uses constant hash value
  * Import of OpenJDK 8 u262 build 05
    + JDK-7147060: com/sun/org/apache/xml/internal/security/
    /transforms/ClassLoaderTest.java doesn't run in agentvm mode
    + JDK-8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + JDK-8181841: A TSA server returns timestamp with precision
    higher than milliseconds
    + JDK-8227269: Slow class loading when running with JDWP
    + JDK-8229899: Make java.io.File.isInvalid() less racy
    + JDK-8236996: Incorrect Roboto font rendering on Windows with
    subpixel antialiasing
    + JDK-8241750: x86_32 build failure after JDK-8227269
    + JDK-8244407: JVM crashes after transformation in C2
    IdealLoopTree::split_fall_in
    + JDK-8244843: JapanEraNameCompatTest fails
  * Import of OpenJDK 8 u262 build 06
    + JDK-8246223: Windows build fails after JDK-8227269
  * Import of OpenJDK 8 u262 build 07
    + JDK-8233197: Invert JvmtiExport::post_vm_initialized() and
    Jfr:on_vm_start() start-up order for correct option parsing
    + JDK-8243541: (tz) Upgrade time-zone data to tzdata2020a
    + JDK-8245167: Top package in method profiling shows null in JMC
    + JDK-8246703: [TESTBUG] Add test for JDK-8233197
  * Import of OpenJDK 8 u262 build 08
    + JDK-8220293: Deadlock in JFR string pool
    + JDK-8225068: Remove DocuSign root certificate that is
    expiring in May 2020
    + JDK-8225069: Remove Comodo root certificate that is expiring
    in May 2020
  * Import of OpenJDK 8 u262 build 09
    + JDK-8248399: Build installs jfr binary when JFR is disabled
  * Import of OpenJDK 8 u262 build 10
    + JDK-8248715: New JavaTimeSupplementary localisation for 'in'
    installed in wrong package
  * Import of OpenJDK 8 u265 build 01
    + JDK-8249677: Regression in 8u after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250546: Expect changed behaviour reported in JDK-8249846
  * Import of OpenJDK 8 u272 build 01
    + JDK-8006205: [TESTBUG] NEED_TEST: please JTREGIFY
    test/compiler/7177917/Test7177917.java
    + JDK-8035493: JVMTI PopFrame capability must instruct
    compilers not to prune locals
    + JDK-8036088: Replace strtok() with its safe equivalent
    strtok_s() in DefaultProxySelector.c
    + JDK-8039082: [TEST_BUG] Test java/awt/dnd/
    /BadSerializationTest/BadSerializationTest.java fails
    + JDK-8075774: Small readability and performance improvements
    for zipfs
    + JDK-8132206: move ScanTest.java into OpenJDK
    + JDK-8132376: Add @requires os.family to the client tests with
    access to internal OS-specific API
    + JDK-8132745: minor cleanup of java/util/Scanner/ScanTest.java
    + JDK-8137087: [TEST_BUG] Cygwin failure of java/awt/
    /appletviewer/IOExceptionIfEncodedURLTest/
    /IOExceptionIfEncodedURLTest.sh
    + JDK-8145808: java/awt/Graphics2D/MTGraphicsAccessTest/
    /MTGraphicsAccessTest.java hangs on Win. 8
    + JDK-8151788: NullPointerException from ntlm.Client.type3
    + JDK-8151834: Test SmallPrimeExponentP.java times out
    intermittently
    + JDK-8153430: jdk regression test MletParserLocaleTest,
    ParserInfiniteLoopTest reduce default timeout
    + JDK-8153583: Make OutputAnalyzer.reportDiagnosticSummary
    public
    + JDK-8156169: Some sound tests rarely hangs because of
    incorrect synchronization
    + JDK-8165936: Potential Heap buffer overflow when seaching
    timezone info files
    + JDK-8166148: Fix for JDK-8165936 broke solaris builds
    + JDK-8167300: Scheduling failures during gcm should be fatal
    + JDK-8167615: Opensource unit/regression tests for JavaSound
    + JDK-8172012: [TEST_BUG] delays needed in
    javax/swing/JTree/4633594/bug4633594.java
    + JDK-8177628: Opensource unit/regression tests for ImageIO
    + JDK-8183341: Better cleanup for javax/imageio/AllowSearch.java
    + JDK-8183351: Better cleanup for jdk/test/javax/imageio/spi/
    /AppletContextTest/BadPluginConfigurationTest.sh
    + JDK-8193137: Nashorn crashes when given an empty script file
    + JDK-8194298: Add support for per Socket configuration of TCP
    keepalive
    + JDK-8198004: javax/swing/JFileChooser/6868611/bug6868611.java
    throws error
    + JDK-8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + JDK-8210147: adjust some WSAGetLastError usages in windows
    network coding
    + JDK-8211714: Need to update vm_version.cpp to recognise
    VS2017 minor versions
    + JDK-8214862: assert(proj != __null) at compile.cpp:3251
    + JDK-8217606: LdapContext#reconnect always opens a new
    connection
    + JDK-8217647: JFR: recordings on 32-bit systems unreadable
    + JDK-8226697: Several tests which need the @key headful
    keyword are missing it.
    + JDK-8229378: jdwp library loader in linker_md.c quietly
    truncates on buffer overflow
    + JDK-8230303: JDB hangs when running monitor command
    + JDK-8230711: ConnectionGraph::unique_java_object(Node* N)
    return NULL if n is not in the CG
    + JDK-8234617: C1: Incorrect result of field load due to
    missing narrowing conversion
    + JDK-8235243: handle VS2017 15.9 and VS2019 in
    abstract_vm_version
    + JDK-8235325: build failure on Linux after 8235243
    + JDK-8235687: Contents/MacOS/libjli.dylib cannot be a symlink
    + JDK-8237951: CTW: C2 compilation fails with "malformed
    control flow"
    + JDK-8238225: Issues reported after replacing symlink at
    Contents/MacOS/libjli.dylib with binary
    + JDK-8239385: KerberosTicket client name refers wrongly to
    sAMAccountName in AD
    + JDK-8239819: XToolkit: Misread of screen information memory
    + JDK-8240295: hs_err elapsed time in seconds is not accurate
    enough
    + JDK-8241888: Mirror jdk.security.allowNonCaAnchor system
    property with a security one
    + JDK-8242498: Invalid "sun.awt.TimedWindowEvent" object leads
    to JVM crash
    + JDK-8243489: Thread CPU Load event may contain wrong data for
    CPU time under certain conditions
    + JDK-8244818: Java2D Queue Flusher crash while moving
    application window to external monitor
    + JDK-8246310: Clean commented-out code about ModuleEntry
    and PackageEntry in JFR
    + JDK-8246384: Enable JFR by default on supported architectures
    for October 2020 release
    + JDK-8248643: Remove extra leading space in JDK-8240295 8u
    backport
    + JDK-8249610: Make
    sun.security.krb5.Config.getBooleanObject(String... keys)
    method public
  * Import of OpenJDK 8 u272 build 02
    + JDK-8023697: failed class resolution reports different class
    name in detail message for the first and subsequent times
    + JDK-8025886: replace [[ and == bash extensions in regtest
    + JDK-8046274: Removing dependency on jakarta-regexp
    + JDK-8048933: -XX:+TraceExceptions output should include the
    message
    + JDK-8076151: [TESTBUG] Test java/awt/FontClass/CreateFont/
    /fileaccess/FontFile.java fails
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8154313: Generated javadoc scattered all over the place
    + JDK-8163251: Hard coded loop limit prevents reading of smart
    card data greater than 8k
    + JDK-8173300: [TESTBUG]compiler/tiered/NonTieredLevelsTest.java
    fails with compiler.whitebox.SimpleTestCaseHelper(int) must be
    compiled
    + JDK-8183349: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java and WriteAfterAbort.java
    + JDK-8191678: [TESTBUG] Add keyword headful in java/awt
    FocusTransitionTest test.
    + JDK-8201633: Problems with AES-GCM native acceleration
    + JDK-8211049: Second parameter of "initialize" method is not
    used
    + JDK-8219566: JFR did not collect call stacks when
    MaxJavaStackTraceDepth is set to zero
    + JDK-8220165: Encryption using GCM results in
    RuntimeException- input length out of bound
    + JDK-8220555: JFR tool shows potentially misleading message
    when it cannot access a file
    + JDK-8224217: RecordingInfo should use textual representation
    of path
    + JDK-8231779: crash
    HeapWord*ParallelScavengeHeap::failed_mem_allocate
    + JDK-8238380, PR3798: java.base/unix/native/libjava/childproc.c
    "multiple definition" link errors with GCC10
    + JDK-8238386, PR3798: (sctp) jdk.sctp/unix/native/libsctp/
    /SctpNet.c "multiple definition" link errors with GCC10
    + JDK-8238388, PR3798: libj2gss/NativeFunc.o "multiple
    definition" link errors with GCC10
    + JDK-8242556: Cannot load RSASSA-PSS public key with non-null
    params from byte array
    + JDK-8250755: Better cleanup for jdk/test/javax/imageio/
    /plugins/shared/CanWriteSequence.java
  * Import of OpenJDK 8 u272 build 03
    + JDK-6574989: TEST_BUG:
    javax/sound/sampled/Clip/bug5070081.java fails sometimes
    + JDK-8148754: C2 loop unrolling fails due to unexpected graph
    shape
    + JDK-8192953: sun/management/jmxremote/bootstrap/*.sh tests
    fail with error : revokeall.exe: Permission denied
    + JDK-8203357: Container Metrics
    + JDK-8209113: Use WeakReference for lastFontStrike for created
    Fonts
    + JDK-8216283: Allow shorter method sampling interval than 10 ms
    + JDK-8221569: JFR tool produces incorrect output when both
  - -categories and --events are specified
    + JDK-8233097: Fontmetrics for large Fonts has zero width
    + JDK-8248851: CMS: Missing memory fences between free chunk
    check and klass read
    + JDK-8250875: Incorrect parameter type for update_number in
    JDK_Version::jdk_update
  * Import of OpenJDK 8 u272 build 04
    + JDK-8061616: HotspotDiagnosticMXBean.getVMOption() throws
    IllegalArgumentException for flags of type double
    + JDK-8177334: Update xmldsig implementation to Apache
    Santuario 2.1.1
    + JDK-8217878: ENVELOPING XML signature no longer works in JDK
    11
    + JDK-8218629: XML Digital Signature throws NAMESPACE_ERR
    exception on OpenJDK 11, works 8/9/10
    + JDK-8243138: Enhance BaseLdapServer to support starttls
    extended request
  * Import of OpenJDK 8 u272 build 05
    + JDK-8026236: Add PrimeTest for BigInteger
    + JDK-8057003: Large reference arrays cause extremely long
    synchronization times
    + JDK-8060721: Test runtime/SharedArchiveFile/
    /LimitSharedSizes.java fails in jdk 9 fcs new
    platforms/compiler
    + JDK-8152077: (cal) Calendar.roll does not always roll the
    hours during daylight savings
    + JDK-8168517: java/lang/ProcessBuilder/Basic.java failed
    + JDK-8211163: UNIX version of Java_java_io_Console_echo does
    not return a clean boolean
    + JDK-8220674: [TESTBUG] MetricsMemoryTester failcount test in
    docker container only works with debug JVMs
    + JDK-8231213: Migrate SimpleDateFormatConstTest to JDK Repo
    + JDK-8236645: JDK 8u231 introduces a regression with
    incompatible handling of XML messages
    + JDK-8240676: Meet not symmetric failure when running lucene
    on jdk8
    + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA
    program
    + JDK-8249158: THREAD_START and THREAD_END event posted in
    primordial phase
    + JDK-8250627: Use -XX:+/-UseContainerSupport for
    enabling/disabling Java container metrics
    + JDK-8251546: 8u backport of JDK-8194298 breaks AIX and
    Solaris builds
    + JDK-8252084: Minimal VM fails to bootcycle: undefined symbol:
    AgeTableTracer::is_tenuring_distribution_event_enabled
  * Import of OpenJDK 8 u272 build 06
    + JDK-8064319: Need to enable -XX:+TraceExceptions in release
    builds
    + JDK-8080462, PR3801: Update SunPKCS11 provider with PKCS11
    v2.40 support
    + JDK-8160768: Add capability to custom resolve host/domain
    names within the default JNDI LDAP provider
    + JDK-8161973: PKIXRevocationChecker.getSoftFailExceptions()
    not working
    + JDK-8169925, PR3801: PKCS #11 Cryptographic Token Interface
    license
    + JDK-8184762: ZapStackSegments should use optimized memset
    + JDK-8193234: When using -Xcheck:jni an internally allocated
    buffer can leak
    + JDK-8219919: RuntimeStub name lost with
    PrintFrameConverterAssembly
    + JDK-8220313: [TESTBUG] Update base image for Docker testing
    to OL 7.6
    + JDK-8222079: Don't use memset to initialize fields decode_env
    constructor in disassembler.cpp
    + JDK-8225695: 32-bit build failures after JDK-8080462 (Update
    SunPKCS11 provider with PKCS11 v2.40 support)
    + JDK-8226575: OperatingSystemMXBean should be made container
    aware
    + JDK-8226809: Circular reference in printed stack trace is not
    correctly indented &amp; ambiguous
    + JDK-8228835: Memory leak in PKCS11 provider when using AES GCM
    + JDK-8233621: Mismatch in jsse.enableMFLNExtension property
    name
    + JDK-8238898, PR3801: Missing hash characters for header on
    license file
    + JDK-8243320: Add SSL root certificates to Oracle Root CA
    program
    + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest
    release 1.8.26
    + JDK-8245467: Remove 8u TLSv1.2 implementation files
    + JDK-8245469: Remove DTLS protocol implementation
    + JDK-8245470: Fix JDK8 compatibility issues
    + JDK-8245471: Revert JDK-8148188
    + JDK-8245472: Backport JDK-8038893 to JDK8
    + JDK-8245473: OCSP stapling support
    + JDK-8245474: Add TLS_KRB5 cipher suites support according to
    RFC-2712
    + JDK-8245476: Disable TLSv1.3 protocol in the ClientHello
    message by default
    + JDK-8245477: Adjust TLS tests location
    + JDK-8245653: Remove 8u TLS tests
    + JDK-8245681: Add TLSv1.3 regression test from 11.0.7
    + JDK-8251117: Cannot check P11Key size in P11Cipher and
    P11AEADCipher
    + JDK-8251120, PR3793: [8u] HotSpot build assumes ENABLE_JFR is
    set to either true or false
    + JDK-8251341: Minimal Java specification change
    + JDK-8251478: Backport TLSv1.3 regression tests to JDK8u
  * Import of OpenJDK 8 u272 build 07
    + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ
  * Import of OpenJDK 8 u272 build 08
    + JDK-8062947: Fix exception message to correctly represent
    LDAP connection failure
    + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    due to timeout on DeadServerNoTimeoutTest is incorrect
    + JDK-8252573: 8u: Windows build failed after 8222079 backport
  * Import of OpenJDK 8 u272 build 09
    + JDK-8252886: [TESTBUG] sun/security/ec/TestEC.java :
    Compilation failed
  * Import of OpenJDK 8 u272 build 10
    + JDK-8254673: Call to JvmtiExport::post_vm_start() was removed
    by the fix for JDK-8249158
    + JDK-8254937: Revert JDK-8148854 for 8u272
  * Backports
    + JDK-8038723, PR3806: Openup some PrinterJob tests
    + JDK-8041480, PR3806: ArrayIndexOutOfBoundsException when
    JTable contains certain string
    + JDK-8058779, PR3805: Faster implementation of
    String.replace(CharSequence, CharSequence)
    + JDK-8130125, PR3806: [TEST_BUG] add @modules to the several
    client tests unaffected by the automated bulk update
    + JDK-8144015, PR3806: [PIT] failures of text layout font tests
    + JDK-8144023, PR3806: [PIT] failure of text measurements in
    javax/swing/text/html/parser/Parser/6836089/bug6836089.java
    + JDK-8144240, PR3806: [macosx][PIT] AIOOB in
    closed/javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8145542, PR3806: The case failed automatically and thrown
    java.lang.ArrayIndexOutOfBoundsException exception
    + JDK-8151725, PR3806: [macosx] ArrayIndexOOB exception when
    displaying Devanagari text in JEditorPane
    + JDK-8152358, PR3800: code and comment cleanups found during
    the hunt for 8077392
    + JDK-8152545, PR3804: Use preprocessor instead of compiling a
    program to generate native nio constants
    + JDK-8152680, PR3806: Regression in
    GlyphVector.getGlyphCharIndex behaviour
    + JDK-8158924, PR3806: Incorrect i18n text document layout
    + JDK-8166003, PR3806: [PIT][TEST_BUG] missing helper for
    javax/swing/text/GlyphPainter2/6427244/bug6427244.java
    + JDK-8166068, PR3806: test/java/awt/font/GlyphVector/
    /GetGlyphCharIndexTest.java does not compile
    + JDK-8169879, PR3806: [TEST_BUG] javax/swing/text/
    /GlyphPainter2/6427244/bug6427244.java - compilation failed
    + JDK-8191512, PR3806: T2K font rasterizer code removal
    + JDK-8191522, PR3806: Remove Bigelow&amp;Holmes Lucida fonts from
    JDK sources
    + JDK-8236512, PR3801: PKCS11 Connection closed after
    Cipher.doFinal and NoPadding
    + JDK-8254177, PR3809: (tz) Upgrade time-zone data to
    tzdata2020b
  * Bug fixes
    + PR3798: Fix format-overflow error on GCC 10, caused by
    passing NULL to a '%s' directive
    + PR3795: ECDSAUtils for XML digital signatures should support
    the same curve set as the rest of the JDK
    + PR3799: Adapt elliptic curve patches to JDK-8245468: Add
    TLSv1.3 implementation classes from 11.0.7
    + PR3808: IcedTea does not install the JFR *.jfc files
    + PR3810: Enable JFR on x86 (32-bit) now that JDK-8252096 has
    fixed its use with Shenandoah
    + PR3811: Don't attempt to install JFR files when JFR is
    disabled
  * Shenandoah
    + [backport] 8221435: Shenandoah should not mark through weak
    roots
    + [backport] 8221629: Shenandoah: Cleanup class unloading logic
    + [backport] 8222992: Shenandoah: Pre-evacuate all roots
    + [backport] 8223215: Shenandoah: Support verifying subset of
    roots
    + [backport] 8223774: Shenandoah: Refactor
    ShenandoahRootProcessor and family
    + [backport] 8224210: Shenandoah: Refactor
    ShenandoahRootScanner to support scanning CSet codecache roots
    + [backport] 8224508: Shenandoah: Need to update thread roots
    in final mark for piggyback ref update cycle
    + [backport] 8224579: ResourceMark not declared in
    shenandoahRootProcessor.inline.hpp with
  - -disable-precompiled-headers
    + [backport] 8224679: Shenandoah: Make
    ShenandoahParallelCodeCacheIterator noncopyable
    + [backport] 8224751: Shenandoah: Shenandoah Verifier should
    select proper roots according to current GC cycle
    + [backport] 8225014: Separate ShenandoahRootScanner method for
    object_iterate
    + [backport] 8225216: gc/logging/TestMetaSpaceLog.java doesn't
    work for Shenandoah
    + [backport] 8225573: Shenandoah: Enhance ShenandoahVerifier to
    ensure roots to-space invariant
    + [backport] 8225590: Shenandoah: Refactor
    ShenandoahClassLoaderDataRoots API
    + [backport] 8226413: Shenandoah: Separate root scanner for
    SH::object_iterate()
    + [backport] 8230853: Shenandoah: replace leftover
    assert(is_in(...)) with rich asserts
    + [backport] 8231198: Shenandoah: heap walking should visit all
    roots most of the time
    + [backport] 8231244: Shenandoah: all-roots heap walking misses
    some weak roots
    + [backport] 8237632: Shenandoah: accept NULL fwdptr to
    cooperate with JVMTI and JFR
    + [backport] 8239786: Shenandoah: print per-cycle statistics
    + [backport] 8239926: Shenandoah: Shenandoah needs to mark
    nmethod's metadata
    + [backport] 8240671: Shenandoah: refactor
    ShenandoahPhaseTimings
    + [backport] 8240749: Shenandoah: refactor ShenandoahUtils
    + [backport] 8240750: Shenandoah: remove leftover files and
    mentions of ShenandoahAllocTracker
    + [backport] 8240868: Shenandoah: remove CM-with-UR
    piggybacking cycles
    + [backport] 8240872: Shenandoah: Avoid updating new regions
    from start of evacuation
    + [backport] 8240873: Shenandoah: Short-cut arraycopy barriers
    + [backport] 8240915: Shenandoah: Remove unused fields in init
    mark tasks
    + [backport] 8240948: Shenandoah: cleanup not-forwarded-objects
    paths after JDK-8240868
    + [backport] 8241007: Shenandoah: remove
    ShenandoahCriticalControlThreadPriority support
    + [backport] 8241062: Shenandoah: rich asserts trigger "empty
    statement" inspection
    + [backport] 8241081: Shenandoah: Do not modify
    update-watermark concurrently
    + [backport] 8241093: Shenandoah: editorial changes in flag
    descriptions
    + [backport] 8241139: Shenandoah: distribute mark-compact work
    exactly to minimize fragmentation
    + [backport] 8241142: Shenandoah: should not use parallel
    reference processing with single GC thread
    + [backport] 8241351: Shenandoah: fragmentation metrics overhaul
    + [backport] 8241435: Shenandoah: avoid disabling pacing with
    "aggressive"
    + [backport] 8241520: Shenandoah: simplify region sequence
    numbers handling
    + [backport] 8241534: Shenandoah: region status should include
    update watermark
    + [backport] 8241574: Shenandoah: remove
    ShenandoahAssertToSpaceClosure
    + [backport] 8241583: Shenandoah: turn heap lock asserts into
    macros
    + [backport] 8241668: Shenandoah: make ShenandoahHeapRegion not
    derive from ContiguousSpace
    + [backport] 8241673: Shenandoah: refactor anti-false-sharing
    padding
    + [backport] 8241675: Shenandoah: assert(n-&gt;outcnt() &gt; 0) at
    shenandoahSupport.cpp:2858 with
    java/util/Collections/FindSubList.java
    + [backport] 8241692: Shenandoah: remove
    ShenandoahHeapRegion::_reserved
    + [backport] 8241700: Shenandoah: Fold
    ShenandoahKeepAliveBarrier flag into ShenandoahSATBBarrier
    + [backport] 8241740: Shenandoah: remove
    ShenandoahHeapRegion::_heap
    + [backport] 8241743: Shenandoah: refactor and inline
    ShenandoahHeap::heap()
    + [backport] 8241748: Shenandoah: inline MarkingContext TAMS
    methods
    + [backport] 8241838: Shenandoah: no need to trash cset during
    final mark
    + [backport] 8241841: Shenandoah: ditch one of allocation type
    counters in ShenandoahHeapRegion
    + [backport] 8241842: Shenandoah: inline
    ShenandoahHeapRegion::region_number
    + [backport] 8241844: Shenandoah: rename
    ShenandoahHeapRegion::region_number
    + [backport] 8241845: Shenandoah: align ShenandoahHeapRegions
    to cache lines
    + [backport] 8241926: Shenandoah: only print heap changes for
    operations that directly affect it
    + [backport] 8241983: Shenandoah: simplify FreeSet logging
    + [backport] 8241985: Shenandoah: simplify collectable garbage
    logging
    + [backport] 8242040: Shenandoah: print allocation failure type
    + [backport] 8242041: Shenandoah: adaptive heuristics should
    account evac reserve in free target
    + [backport] 8242042: Shenandoah: tune down
    ShenandoahGarbageThreshold
    + [backport] 8242054: Shenandoah: New incremental-update mode
    + [backport] 8242075: Shenandoah: rename
    ShenandoahHeapRegionSize flag
    + [backport] 8242082: Shenandoah: Purge Traversal mode
    + [backport] 8242083: Shenandoah: split "Prepare Evacuation"
    tracking into cset/freeset counters
    + [backport] 8242089: Shenandoah: per-worker stats should be
    summed up, not averaged
    + [backport] 8242101: Shenandoah: coalesce and parallelise heap
    region walks during the pauses
    + [backport] 8242114: Shenandoah: remove
    ShenandoahHeapRegion::reset_alloc_metadata_to_shared
    + [backport] 8242130: Shenandoah: Simplify arraycopy-barrier
    dispatching
    + [backport] 8242211: Shenandoah: remove
    ShenandoahHeuristics::RegionData::_seqnum_last_alloc
    + [backport] 8242212: Shenandoah: initialize
    ShenandoahHeuristics::_region_data eagerly
    + [backport] 8242213: Shenandoah: remove
    ShenandoahHeuristics::_bytes_in_cset
    + [backport] 8242217: Shenandoah: Enable GC mode to be
    diagnostic/experimental and have a name
    + [backport] 8242227: Shenandoah: transit regions to cset state
    when adding to collection set
    + [backport] 8242228: Shenandoah: remove unused
    ShenandoahCollectionSet methods
    + [backport] 8242229: Shenandoah: inline ShenandoahHeapRegion
    liveness-related methods
    + [backport] 8242267: Shenandoah: regions space needs to be
    aligned by os::vm_allocation_granularity()
    + [backport] 8242271: Shenandoah: add test to verify GC mode
    unlock
    + [backport] 8242273: Shenandoah: accept either SATB or IU
    barriers, but not both
    + [backport] 8242301: Shenandoah: Inline LRB runtime call
    + [backport] 8242316: Shenandoah: Turn NULL-check into assert
    in SATB slow-path entry
    + [backport] 8242353: Shenandoah: micro-optimize region
    liveness handling
    + [backport] 8242365: Shenandoah: use uint16_t instead of
    jushort for liveness cache
    + [backport] 8242375: Shenandoah: Remove
    ShenandoahHeuristic::record_gc_start/end methods
    + [backport] 8242641: Shenandoah: clear live data and update
    TAMS optimistically
    + [backport] 8243238: Shenandoah: explicit GC request should
    wait for a complete GC cycle
    + [backport] 8243301: Shenandoah: ditch
    ShenandoahAllowMixedAllocs
    + [backport] 8243307: Shenandoah: remove
    ShCollectionSet::live_data
    + [backport] 8243395: Shenandoah: demote guarantee in
    ShenandoahPhaseTimings::record_workers_end
    + [backport] 8243463: Shenandoah: ditch total_pause counters
    + [backport] 8243464: Shenandoah: print statistic counters in
    time order
    + [backport] 8243465: Shenandoah: ditch unused pause_other,
    conc_other counters
    + [backport] 8243487: Shenandoah: make _num_phases illegal
    phase type
    + [backport] 8243494: Shenandoah: set counters once per cycle
    + [backport] 8243573: Shenandoah: rename GCParPhases and
    related code
    + [backport] 8243848: Shenandoah: Windows build fails after
    JDK-8239786
    + [backport] 8244180: Shenandoah: carry Phase to
    ShWorkerTimingsTracker explicitly
    + [backport] 8244200: Shenandoah: build breakages after
    JDK-8241743
    + [backport] 8244226: Shenandoah: per-cycle statistics contain
    worker data from previous cycles
    + [backport] 8244326: Shenandoah: global statistics should not
    accept bogus samples
    + [backport] 8244509: Shenandoah: refactor
    ShenandoahBarrierC2Support::test_* methods
    + [backport] 8244551: Shenandoah: Fix racy update of
    update_watermark
    + [backport] 8244667: Shenandoah: SBC2Support::test_gc_state
    takes loop for wrong control
    + [backport] 8244730: Shenandoah: gc/shenandoah/options/
    /TestHeuristicsUnlock.java should only verify the heuristics
    + [backport] 8244732: Shenandoah: move heuristics code to
    gc/shenandoah/heuristics
    + [backport] 8244737: Shenandoah: move mode code to
    gc/shenandoah/mode
    + [backport] 8244739: Shenandoah: break superclass dependency
    on ShenandoahNormalMode
    + [backport] 8244740: Shenandoah: rename ShenandoahNormalMode
    to ShenandoahSATBMode
    + [backport] 8245461: Shenandoah: refine mode name()-s
    + [backport] 8245463: Shenandoah: refine ShenandoahPhaseTimings
    constructor arguments
    + [backport] 8245464: Shenandoah: allocate collection set
    bitmap at lower addresses
    + [backport] 8245465: Shenandoah: test_in_cset can use more
    efficient encoding
    + [backport] 8245726: Shenandoah: lift/cleanup
    ShenandoahHeuristics names and properties
    + [backport] 8245754: Shenandoah: ditch ShenandoahAlwaysPreTouch
    + [backport] 8245757: Shenandoah: AlwaysPreTouch should not
    disable heap resizing or uncommits
    + [backport] 8245773: Shenandoah: Windows assertion failure
    after JDK-8245464
    + [backport] 8245812: Shenandoah: compute root phase parallelism
    + [backport] 8245814: Shenandoah: reconsider format specifiers
    for stats
    + [backport] 8245825: Shenandoah: Remove diagnostic flag
    ShenandoahConcurrentScanCodeRoots
    + [backport] 8246162: Shenandoah: full GC does not mark code
    roots when class unloading is off
    + [backport] 8247310: Shenandoah: pacer should not affect
    interrupt status
    + [backport] 8247358: Shenandoah: reconsider free budget slice
    for marking
    + [backport] 8247367: Shenandoah: pacer should wait on lock
    instead of exponential backoff
    + [backport] 8247474: Shenandoah: Windows build warning after
    JDK-8247310
    + [backport] 8247560: Shenandoah: heap iteration holds root
    locks all the time
    + [backport] 8247593: Shenandoah: should not block pacing
    reporters
    + [backport] 8247751: Shenandoah: options tests should run with
    smaller heaps
    + [backport] 8247754: Shenandoah: mxbeans tests can be shorter
    + [backport] 8247757: Shenandoah: split heavy tests by
    heuristics to improve parallelism
    + [backport] 8247860: Shenandoah: add update watermark line in
    rich assert failure message
    + [backport] 8248041: Shenandoah: pre-Full GC root updates may
    miss some roots
    + [backport] 8248652: Shenandoah: SATB buffer handling may
    assume no forwarded objects
    + [backport] 8249560: Shenandoah: Fix racy GC request handling
    + [backport] 8249649: Shenandoah: provide per-cycle pacing stats
    + [backport] 8249801: Shenandoah: Clear soft-refs on requested
    GC cycle
    + [backport] 8249953: Shenandoah: gc/shenandoah/mxbeans tests
    should account for corner cases
    + Fix slowdebug build after JDK-8230853 backport
    + JDK-8252096: Shenandoah: adjust SerialPageShiftCount for
    x86_32 and JFR
    + JDK-8252366: Shenandoah: revert/cleanup changes in
    graphKit.cpp
    + Shenandoah: add JFR roots to root processor after JFR
    integration
    + Shenandoah: add root statistics for string dedup table/queues
    + Shenandoah: enable low-frequency STW class unloading
    + Shenandoah: fix build failures after JDK-8244737 backport
    + Shenandoah: Fix build failure with +JFR -PCH
    + Shenandoah: fix forceful pacer claim
    + Shenandoah: fix formats in
    ShenandoahStringSymbolTableUnlinkTask
    + Shenandoah: fix runtime linking failure due to non-compiled
    shenandoahBarrierSetC1
    + Shenandoah: hook statistics printing to PrintGCDetails, not
    PrintGC
    + Shenandoah: JNI weak roots are always cleared before Full GC
    mark
    + Shenandoah: missing SystemDictionary roots in
    ShenandoahHeapIterationRootScanner
    + Shenandoah: move barrier sets to their proper locations
    + Shenandoah: move parallelCleaning.* to shenandoah/
    + Shenandoah: pacer should use proper Atomics for intptr_t
    + Shenandoah: properly deallocates class loader metadata
    + Shenandoah: specialize String Table scans for better pause
    performance
    + Shenandoah: Zero build fails after recent Atomic cleanup in
    Pacer
  * AArch64 port
    + JDK-8161072, PR3797: AArch64: jtreg
    compiler/uncommontrap/TestDeoptOOM failure
    + JDK-8171537, PR3797: aarch64: compiler/c1/Test6849574.java
    generates guarantee failure in C1
    + JDK-8183925, PR3797: [AArch64] Decouple crash protection from
    watcher thread
    + JDK-8199712, PR3797: [AArch64] Flight Recorder
    + JDK-8203481, PR3797: Incorrect constraint for unextended_sp
    in frame:safe_for_sender
    + JDK-8203699, PR3797: java/lang/invoke/SpecialInterfaceCall
    fails with SIGILL on aarch64
    + JDK-8209413, PR3797: AArch64: NPE in clhsdb jstack command
    + JDK-8215961, PR3797: jdk/jfr/event/os/TestCPUInformation.java
    fails on AArch64
    + JDK-8216989, PR3797:
    CardTableBarrierSetAssembler::gen_write_ref_array_post_barrier()
    does not check for zero length on AARCH64
    + JDK-8217368, PR3797: AArch64: C2 recursive stack locking
    optimisation not triggered
    + JDK-8221658, PR3797: aarch64: add necessary predicate for
    ubfx patterns
    + JDK-8237512, PR3797: AArch64: aarch64TestHook leaks a
    BufferBlob
    + JDK-8246482, PR3797: Build failures with +JFR -PCH
    + JDK-8247979, PR3797: aarch64: missing side effect of killing
    flags for clearArray_reg_reg
    + JDK-8248219, PR3797: aarch64: missing memory barrier in
    fast_storefield and fast_accessfield
- Modified patch:
  * java-atk-wrapper-security.patch
    + rediff to changed context</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318400">- Added patch:
  * JDK-8250861.patch
    + Fix regression "8250861: Crash in MinINode::Ideal(PhaseGVN*,
    bool)" introduced in October 2020 CPU</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604318401">- Added patch:
  * s390.patch
    + Fix build on s390 31bit</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1604491200">- Enable Shenandoah garbage collector on supported architectures
  and distributions</changelog>
  <changelog author="Archie Cobbs &lt;archie.cobbs@gmail.com&gt;" date="1604577600">- Add missing /etc/alternatives link for "jcmd" utility</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1605614400">- Modified patch:
  * java-atk-wrapper-security.patch
    + Fix errors introduced by manual rediffing of the patch</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="Fridrich Strba &lt;fstrba@suse.com&gt;" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
</package>
<package pkgid="8926afdda1aaf95a15a124d2b4e2403940cb25524b4d559892897035106e2503" name="jhead-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.00" rel="lp152.7.3.1"/>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- security update
- added patches
  fix heap-based buffer overflow in Get16u() in exif.c
  + CVE-2021-3496.patch</changelog>
</package>
<package pkgid="c6b0642f3344182d2ee1570606f9c09946db153dd8907366cff59b6f120bd856" name="jhead-debugsource" arch="x86_64">
  <version epoch="0" ver="3.00" rel="lp152.7.3.1"/>
  <changelog author="toganm@opensuse.org" date="1331812800">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1540382400">- Renamed CVE-2018-16554.patch to CVE-2018-17088.patch, because
  it is in fact fix of boo#1108672
- Buffer overflow fix (boo#1108480) CVE-2018-16554.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618833600">- security update
- added patches
  fix heap-based buffer overflow in Get16u() in exif.c
  + CVE-2021-3496.patch</changelog>
</package>
<package pkgid="d99d866fc3bc1399d8221d2b3e29a4e8d15af426010bd8a4dbe3a377ac23bea3" name="jq-debuginfo" arch="i586">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="442ada03782180c9a19bc4c638544f306f7560bd0734c7e7695a8c04213ea155" name="jq-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="379403b23d89dfe9fcb94a62083f456e475e1da55c9a689af77a211dd50857dd" name="jq-debugsource" arch="i586">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="3fe5906451a223c01556de1b30950c21be1ebdaa884f3123037ba2640c117c28" name="jq-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6" rel="lp152.4.3.1"/>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="Avindra Goolcharan &lt;aavindraa@gmail.com&gt;" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
</package>
<package pkgid="10904e4149e9248ec26d1ac34125f7ee054843cf4bb54ede6cc3425d438cb6d1" name="k4dirstat-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp152.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1301054400">- Initial version (git.20101010)</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1415707200">- Replace k4dirstat with the fork by Jerome Robert
- Update to 2.7.8</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1442664000">- Update to 3.1:
  * Package ported to KDE Framework 5.
  * Detailed changelog not available.
- Package ported to KF5. Updated build and runtime requirements to
  the KF5 ones.</changelog>
  <changelog author="wbauer@tmo.at" date="1480420800">- Update to 3.1.2:
  * Detailed changelog not available.</changelog>
  <changelog author="axel.braun@gmx.de" date="1483876800">- make sure language packet gets installed as well</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.1.3. No changelog available.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554206400">- Update to 3.1.4:
  * No longer ignore files containing dot when reading cache file
  * Remove trailing slash from command line argument</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578916800">- Update to 3.2.0:
  * Rewrite the tree view to support navigation with keyboard and
    multi-selection
  * 'Open in terminal' now open Konsole in the selected folder
  * Move from bitbucket to github
- Add patch to fix build on Leap 15.1
  * 0001-Add-the-missing-cassert-include.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1594209600">- Update to 3.2.1 (boo#1173905):
  * Fix crashes on startup in some certain KIO related circumstances</changelog>
</package>
<package pkgid="c036f64563d66113ffca4b51bf96a38fe67e3dd5b3c9f85ba411669458f96f27" name="k4dirstat-debugsource" arch="x86_64">
  <version epoch="0" ver="3.2.1" rel="lp152.2.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1301054400">- Initial version (git.20101010)</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1415707200">- Replace k4dirstat with the fork by Jerome Robert
- Update to 2.7.8</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1442664000">- Update to 3.1:
  * Package ported to KDE Framework 5.
  * Detailed changelog not available.
- Package ported to KF5. Updated build and runtime requirements to
  the KF5 ones.</changelog>
  <changelog author="wbauer@tmo.at" date="1480420800">- Update to 3.1.2:
  * Detailed changelog not available.</changelog>
  <changelog author="axel.braun@gmx.de" date="1483876800">- make sure language packet gets installed as well</changelog>
  <changelog author="christophe@krop.fr" date="1527249600">- Update to 3.1.3. No changelog available.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1554206400">- Update to 3.1.4:
  * No longer ignore files containing dot when reading cache file
  * Remove trailing slash from command line argument</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578916800">- Update to 3.2.0:
  * Rewrite the tree view to support navigation with keyboard and
    multi-selection
  * 'Open in terminal' now open Konsole in the selected folder
  * Move from bitbucket to github
- Add patch to fix build on Leap 15.1
  * 0001-Add-the-missing-cassert-include.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1594209600">- Update to 3.2.1 (boo#1173905):
  * Fix crashes on startup in some certain KIO related circumstances</changelog>
</package>
<package pkgid="25bb8ba5864a30caebef1a2da2c68fb1e5c704230abd9add642a30e60c75e421" name="kactivitymanagerd-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.18.5" rel="lp152.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1562673600">- Update to 5.16.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.3.php
- No code changes since 5.16.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564488000">- Update to 5.16.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.4.php
- No code changes since 5.16.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1567512000">- Update to 5.16.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.5.php
- No code changes since 5.16.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1568894400">- Update to 5.16.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.90.php
- Changes since 5.16.5:
  * update to latest kf5 dependency
  * Extract mimetype from recentlyused.xbel
  * Fix compile warning
  * Add a event Spy for GtkFileChooser recent files
  * Set a parent for the dir watcher
  * Fix bug found by Andreas Scholta reported on github
  * Fix typo in CREATE_GETTER_AND_SETTER
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1570708800">- Update to 5.17.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.0.php
- No code changes since 5.16.90</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1571745600">- Update to 5.17.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.1.php
- No code changes since 5.17.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1572350400">- Update to 5.17.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.2.php
- No code changes since 5.17.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1573560000">- Update to 5.17.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.3.php
- No code changes since 5.17.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1575460800">- Update to 5.17.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.4.php
- No code changes since 5.17.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1578398400">- Update to 5.17.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.5.php
- No code changes since 5.17.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579176000">- Update to 5.17.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.90.php
- Changes since 5.17.5:
  * KF5_MIN_VERSION for plasma 5.18 is KF5 5.66.0
  * Remove pointless QDBusServiceWatcher
  * Remove transient file CMakeLists.txt.user
  * Add KDEClangFormat cmake support
  * Rename cmake project to KActivityManagerd, remove unused option
  * Fix two clazy performance warning: missing &amp;
  * Fix minor issues found by EBN
  * Now we depend against kf5.58
  * Add previous-/nextActivity methods
  * Make it compile without deprecated methods</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579780800">- Replace %make_jobs with %cmake_build</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1580990400">- Update to 5.18.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.0.php
- No code changes since 5.17.90</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582027200">- Update to 5.18.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.1.php
- Changes since 5.18.0:
  * Replace plasma.kde.org with kde.org/plasma-desktop</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582632000">- Update to 5.18.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.2.php
- No code changes since 5.18.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1583841600">- Update to 5.18.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.3.php
- Changes since 5.18.2:
  * set correct version
  * KF5 only deprecate up to target frameworks</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656000">- Update to 5.18.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.4.php
- No code changes since 5.18.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656001">- Update to 5.18.4.1:
  * Version fixed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1588680000">- Update to 5.18.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.5.php
- Changes since 5.18.4.1:
  * Remove too strict Qt/KF5 deprecation rule</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1611144000">- Add upstream patch to fix switching to a certain activity via a
  global keyboard shortcut (boo#1172261, kde#374575):
  * Use-correct-way-to-register-for-a-shortcut.patch</changelog>
</package>
<package pkgid="eb1ac63cab4e202081904828ab7b9807f1459fa41662183787a9b51c82f9fd3e" name="kactivitymanagerd-debugsource" arch="x86_64">
  <version epoch="0" ver="5.18.5" rel="lp152.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1562673600">- Update to 5.16.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.3.php
- No code changes since 5.16.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1564488000">- Update to 5.16.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.4.php
- No code changes since 5.16.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1567512000">- Update to 5.16.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.5.php
- No code changes since 5.16.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1568894400">- Update to 5.16.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.16.90.php
- Changes since 5.16.5:
  * update to latest kf5 dependency
  * Extract mimetype from recentlyused.xbel
  * Fix compile warning
  * Add a event Spy for GtkFileChooser recent files
  * Set a parent for the dir watcher
  * Fix bug found by Andreas Scholta reported on github
  * Fix typo in CREATE_GETTER_AND_SETTER
  * Install in new logging directory when we use kf5 5.59.0
  * Fix forward declaration</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1570708800">- Update to 5.17.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.0.php
- No code changes since 5.16.90</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1571745600">- Update to 5.17.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.1.php
- No code changes since 5.17.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1572350400">- Update to 5.17.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.2.php
- No code changes since 5.17.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1573560000">- Update to 5.17.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.3.php
- No code changes since 5.17.2</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1575460800">- Update to 5.17.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.4.php
- No code changes since 5.17.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1578398400">- Update to 5.17.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.5.php
- No code changes since 5.17.4</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579176000">- Update to 5.17.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.90.php
- Changes since 5.17.5:
  * KF5_MIN_VERSION for plasma 5.18 is KF5 5.66.0
  * Remove pointless QDBusServiceWatcher
  * Remove transient file CMakeLists.txt.user
  * Add KDEClangFormat cmake support
  * Rename cmake project to KActivityManagerd, remove unused option
  * Fix two clazy performance warning: missing &amp;
  * Fix minor issues found by EBN
  * Now we depend against kf5.58
  * Add previous-/nextActivity methods
  * Make it compile without deprecated methods</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579780800">- Replace %make_jobs with %cmake_build</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1580990400">- Update to 5.18.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.0.php
- No code changes since 5.17.90</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582027200">- Update to 5.18.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.1.php
- Changes since 5.18.0:
  * Replace plasma.kde.org with kde.org/plasma-desktop</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582632000">- Update to 5.18.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.2.php
- No code changes since 5.18.1</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1583841600">- Update to 5.18.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.3.php
- Changes since 5.18.2:
  * set correct version
  * KF5 only deprecate up to target frameworks</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656000">- Update to 5.18.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.4.php
- No code changes since 5.18.3</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656001">- Update to 5.18.4.1:
  * Version fixed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1588680000">- Update to 5.18.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.5.php
- Changes since 5.18.4.1:
  * Remove too strict Qt/KF5 deprecation rule</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1611144000">- Add upstream patch to fix switching to a certain activity via a
  global keyboard shortcut (boo#1172261, kde#374575):
  * Use-correct-way-to-register-for-a-shortcut.patch</changelog>
</package>
<package pkgid="eae4ea2c833df612eaeab5f4cde6eff724e77bd3501c457f61b4fd4e3bc9249f" name="kdeconnect-kde-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Add patch to fix unauthenticated HTML injection (kde#382243):
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542196800">- Add 0001-Fix-build-on-Leap-42.3.patch to make it build on Leap
  42.3</changelog>
  <changelog author="wbauer@tmo.at" date="1553515200">- Update to 1.3.4
  * Always play when call ended (kde#400787)
  * [cli] Show all reachable devices (kde#402088)
  * [sftp] Get device ID from URL
  * Retry the network packet if it failed to unserialize
  * Fix sending keys via CLI
  * [kio] Fix file browsing with non-KIO file managers
- Run spec-cleaner
- Refresh 0001-Fix-build-on-Leap-42.3.patch
- Add 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
  to make it build on Leap 42.3
- Drop Provides/Obsoletes for kdeconnect-kde-devel, that package
  doesn't exist anymore since 2015 and nothing should need it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Use noun phrase in descriptions.</changelog>
  <changelog author="wbauer@tmo.at" date="1564488000">- Update to 1.3.5
  * Add detectPlatform to always use wayland in a wayland session
  * i18n: fix extraction of nautilus extension
  * Don't update new notifications
  * Install desktop file for kdeconnectd
  * [sftp] Fix error message wording
  * Change plugin name
  * [sftp] Give better error messages for common errors
  * [sftp] Improve error reporting
  * Use KAboutData to set information about the daemon
  * Disable session management
  * Print socket error when connection fails
  * [kio] Mount device during stat if necessary
  * [backends/lan] Don't fail silently when a UDP packet could not
    be unserialized
  * Fix crash in daemon
  * Fix crash in notifications plugin (kde#400010)
  * Don't show multiple windows when replying to a notification
- Drop Leap 42.3 specific patches, it's no longer supported:
  * 0001-Fix-build-on-Leap-42.3.patch
  * 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
- Don't install SuSEfirewall2 file on Tumbleweed anymore, Sf2 has
  been dropped</changelog>
  <changelog author="wbauer@tmo.at" date="1579953600">- Update to 1.4
  * New "KDE Connect" desktop app to control the phone from the PC
  * SMS app that can read and write SMS texts
  * control PC system's global volume from a phone
  * flip forward and back through presentation slides
  * compatibility with Thunar (Xfce's file manager) and Elementary
    applications such as Pantheon Files.
- Run spec-cleaner</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * kdeconnect-kde is now part of the KDE applications release
    service</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Exception doesn't have strerr
  * Check for null notification
  * [fileitemactionplugin] Use async DBus call (kde#419133)
  * Improve call notification handling
  * Read payload size as qint64
  * Use kdeconnect-settings for command configuration</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Unmute audio when volume changes (kde#408705)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590580800">- Add patch submitted upstream to use
  ecm_qt_declare_logging_category so users can easily modify the
  debugging configuration and use a default logging level of
  Warning instead of sending all debug messages to the log:
  * 0001-Use-ecm_qt_declare_logging_category-to-declare-the-l.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix findthisdevice sound URL
  * Remove windows CI in stable too</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1601640000">- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch</changelog>
</package>
<package pkgid="dce42021d8258cd2f1c2891a23d6f75fd9e19fd25386cbe3da69a1e203b25365" name="kdeconnect-kde-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542196800">- Add 0001-Fix-build-on-Leap-42.3.patch to make it build on Leap
  42.3</changelog>
  <changelog author="wbauer@tmo.at" date="1553515200">- Update to 1.3.4
  * Always play when call ended (kde#400787)
  * [cli] Show all reachable devices (kde#402088)
  * [sftp] Get device ID from URL
  * Retry the network packet if it failed to unserialize
  * Fix sending keys via CLI
  * [kio] Fix file browsing with non-KIO file managers
- Run spec-cleaner
- Refresh 0001-Fix-build-on-Leap-42.3.patch
- Add 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
  to make it build on Leap 42.3
- Drop Provides/Obsoletes for kdeconnect-kde-devel, that package
  doesn't exist anymore since 2015 and nothing should need it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Use noun phrase in descriptions.</changelog>
  <changelog author="wbauer@tmo.at" date="1564488000">- Update to 1.3.5
  * Add detectPlatform to always use wayland in a wayland session
  * i18n: fix extraction of nautilus extension
  * Don't update new notifications
  * Install desktop file for kdeconnectd
  * [sftp] Fix error message wording
  * Change plugin name
  * [sftp] Give better error messages for common errors
  * [sftp] Improve error reporting
  * Use KAboutData to set information about the daemon
  * Disable session management
  * Print socket error when connection fails
  * [kio] Mount device during stat if necessary
  * [backends/lan] Don't fail silently when a UDP packet could not
    be unserialized
  * Fix crash in daemon
  * Fix crash in notifications plugin (kde#400010)
  * Don't show multiple windows when replying to a notification
- Drop Leap 42.3 specific patches, it's no longer supported:
  * 0001-Fix-build-on-Leap-42.3.patch
  * 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
- Don't install SuSEfirewall2 file on Tumbleweed anymore, Sf2 has
  been dropped</changelog>
  <changelog author="wbauer@tmo.at" date="1579953600">- Update to 1.4
  * New "KDE Connect" desktop app to control the phone from the PC
  * SMS app that can read and write SMS texts
  * control PC system's global volume from a phone
  * flip forward and back through presentation slides
  * compatibility with Thunar (Xfce's file manager) and Elementary
    applications such as Pantheon Files.
- Run spec-cleaner</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * kdeconnect-kde is now part of the KDE applications release
    service</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Exception doesn't have strerr
  * Check for null notification
  * [fileitemactionplugin] Use async DBus call (kde#419133)
  * Improve call notification handling
  * Read payload size as qint64
  * Use kdeconnect-settings for command configuration</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Unmute audio when volume changes (kde#408705)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590580800">- Add patch submitted upstream to use
  ecm_qt_declare_logging_category so users can easily modify the
  debugging configuration and use a default logging level of
  Warning instead of sending all debug messages to the log:
  * 0001-Use-ecm_qt_declare_logging_category-to-declare-the-l.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix findthisdevice sound URL
  * Remove windows CI in stable too</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1601640000">- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1608638400">- Add upstream patch to use fingerprinting for device
  verification (boo#1177672):
  * 0001-Add-a-verification-key-that-s-displayed-when-pairing.patch</changelog>
</package>
<package pkgid="b047f6c161179b9c7fefe5b01a957199baa312259a43cf4580afdaadc84f1d5c" name="kdeconnect-kde-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499860800">- Add patch to fix unauthenticated HTML injection (kde#382243):
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542196800">- Add 0001-Fix-build-on-Leap-42.3.patch to make it build on Leap
  42.3</changelog>
  <changelog author="wbauer@tmo.at" date="1553515200">- Update to 1.3.4
  * Always play when call ended (kde#400787)
  * [cli] Show all reachable devices (kde#402088)
  * [sftp] Get device ID from URL
  * Retry the network packet if it failed to unserialize
  * Fix sending keys via CLI
  * [kio] Fix file browsing with non-KIO file managers
- Run spec-cleaner
- Refresh 0001-Fix-build-on-Leap-42.3.patch
- Add 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
  to make it build on Leap 42.3
- Drop Provides/Obsoletes for kdeconnect-kde-devel, that package
  doesn't exist anymore since 2015 and nothing should need it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Use noun phrase in descriptions.</changelog>
  <changelog author="wbauer@tmo.at" date="1564488000">- Update to 1.3.5
  * Add detectPlatform to always use wayland in a wayland session
  * i18n: fix extraction of nautilus extension
  * Don't update new notifications
  * Install desktop file for kdeconnectd
  * [sftp] Fix error message wording
  * Change plugin name
  * [sftp] Give better error messages for common errors
  * [sftp] Improve error reporting
  * Use KAboutData to set information about the daemon
  * Disable session management
  * Print socket error when connection fails
  * [kio] Mount device during stat if necessary
  * [backends/lan] Don't fail silently when a UDP packet could not
    be unserialized
  * Fix crash in daemon
  * Fix crash in notifications plugin (kde#400010)
  * Don't show multiple windows when replying to a notification
- Drop Leap 42.3 specific patches, it's no longer supported:
  * 0001-Fix-build-on-Leap-42.3.patch
  * 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
- Don't install SuSEfirewall2 file on Tumbleweed anymore, Sf2 has
  been dropped</changelog>
  <changelog author="wbauer@tmo.at" date="1579953600">- Update to 1.4
  * New "KDE Connect" desktop app to control the phone from the PC
  * SMS app that can read and write SMS texts
  * control PC system's global volume from a phone
  * flip forward and back through presentation slides
  * compatibility with Thunar (Xfce's file manager) and Elementary
    applications such as Pantheon Files.
- Run spec-cleaner</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * kdeconnect-kde is now part of the KDE applications release
    service</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Exception doesn't have strerr
  * Check for null notification
  * [fileitemactionplugin] Use async DBus call (kde#419133)
  * Improve call notification handling
  * Read payload size as qint64
  * Use kdeconnect-settings for command configuration</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Unmute audio when volume changes (kde#408705)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590580800">- Add patch submitted upstream to use
  ecm_qt_declare_logging_category so users can easily modify the
  debugging configuration and use a default logging level of
  Warning instead of sending all debug messages to the log:
  * 0001-Use-ecm_qt_declare_logging_category-to-declare-the-l.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix findthisdevice sound URL
  * Remove windows CI in stable too</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1601640000">- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch</changelog>
</package>
<package pkgid="b89ef5424d65e9adeea21c39b099d76e6967cccc1c23608226cc26a20c52d7d7" name="kdeconnect-kde-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1506859200">- Update to 1.2.0
- Update build requirements, it needs Qt 5.7 and KF 5.38 now
- Remove patches, now upstream:
  * 0001-Treat-device-names-as-plaintext-not-rich-text.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1516276800">- Update to 1.2.1
  * Require the latest version of KF5
  * Was getting a double-delete, now it won't crash
  * Get rid of ProcessRunner
  * Add album art to mpris network packets
  * Add title, artist and album to MPRIS network packets
  * Fix information leak via /tmp (kde#383144)
  * Add support for new Android 2.3 (API 9+) cipher
  * Fix kdeconnect-cli device list
  * Fix "error activiting kdeconnectd" for kdeconnect-cli
  * Delay kdeconnectd autostart phase
  * Fix Notifications in Plasmoid
  * Make sure there's not a path within the filename
  * share plugin: fix path display
  * Use pactl instead of KMix in PauseMusic Plugin
- needs KDE Frameworks 5.42 now</changelog>
  <changelog author="alarrosa@suse.com" date="1519128000">- Add 0001-Fix-null-dereference.patch to fix a null dereference.
- Add signature file kdeconnect-kde-v1.2.1.tar.xz.sig</changelog>
  <changelog author="kamikazow@opensuse.org" date="1523275200">- Update to 1.3.0
  * Fixed frequent crash when receiving notifications
  * Fixed MPRIS player entries never being deleted
  * Added a Gnome Files (Nautilus) extension to send files from the
    context menu
  * Added handling of "tel:" links with KDE Connect
  * Support sending album art in MPRIS plugin
  * Allow sharing more than one file from the CI (eg: --share *.mp3)
- Remove patches, now upstream:
  * 0001-Fix-null-dereference.patch
- Modified wording in Description to match that KDE Connect
  runs under any Linux desktop (see upstream README.md file)</changelog>
  <changelog author="wbauer@tmo.at" date="1527854400">- Update to 1.3.1
  * Fix a bug that would hang Nautilus when copying a file if
    paired devices were available
  * Fix remote filesystem reconnection issue
  * Add a missing dependency check in cmake
  * Add missing notification category to the plasmoid
- Mark license file with %license instead of %doc</changelog>
  <changelog author="wbauer@tmo.at" date="1539864000">- Update to 1.3.2
  * Also allow modern algorithms, for compat with future apps
  * Remove characters from UUID that aren't legal in URLs
  * Add new notifications at the top of the list
  * Change the 'Dismiss all notifications' icon
  * Fix DBus signals in Mprisremote</changelog>
  <changelog author="wbauer@tmo.at" date="1541592000">- Update to 1.3.3
  * Instantiate QApplication object to fix crash on KDE Neon
    (kde#400178)
  * Fix build failure on musl based systems (kde#395161)</changelog>
  <changelog author="wbauer@tmo.at" date="1542196800">- Add 0001-Fix-build-on-Leap-42.3.patch to make it build on Leap
  42.3</changelog>
  <changelog author="wbauer@tmo.at" date="1553515200">- Update to 1.3.4
  * Always play when call ended (kde#400787)
  * [cli] Show all reachable devices (kde#402088)
  * [sftp] Get device ID from URL
  * Retry the network packet if it failed to unserialize
  * Fix sending keys via CLI
  * [kio] Fix file browsing with non-KIO file managers
- Run spec-cleaner
- Refresh 0001-Fix-build-on-Leap-42.3.patch
- Add 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
  to make it build on Leap 42.3
- Drop Provides/Obsoletes for kdeconnect-kde-devel, that package
  doesn't exist anymore since 2015 and nothing should need it</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1554120000">- Use noun phrase in descriptions.</changelog>
  <changelog author="wbauer@tmo.at" date="1564488000">- Update to 1.3.5
  * Add detectPlatform to always use wayland in a wayland session
  * i18n: fix extraction of nautilus extension
  * Don't update new notifications
  * Install desktop file for kdeconnectd
  * [sftp] Fix error message wording
  * Change plugin name
  * [sftp] Give better error messages for common errors
  * [sftp] Improve error reporting
  * Use KAboutData to set information about the daemon
  * Disable session management
  * Print socket error when connection fails
  * [kio] Mount device during stat if necessary
  * [backends/lan] Don't fail silently when a UDP packet could not
    be unserialized
  * Fix crash in daemon
  * Fix crash in notifications plugin (kde#400010)
  * Don't show multiple windows when replying to a notification
- Drop Leap 42.3 specific patches, it's no longer supported:
  * 0001-Fix-build-on-Leap-42.3.patch
  * 0001-Revert-Retry-the-network-packet-if-it-failed-to-unse.patch
- Don't install SuSEfirewall2 file on Tumbleweed anymore, Sf2 has
  been dropped</changelog>
  <changelog author="wbauer@tmo.at" date="1579953600">- Update to 1.4
  * New "KDE Connect" desktop app to control the phone from the PC
  * SMS app that can read and write SMS texts
  * control PC system's global volume from a phone
  * flip forward and back through presentation slides
  * compatibility with Thunar (Xfce's file manager) and Elementary
    applications such as Pantheon Files.
- Run spec-cleaner</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * kdeconnect-kde is now part of the KDE applications release
    service</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Exception doesn't have strerr
  * Check for null notification
  * [fileitemactionplugin] Use async DBus call (kde#419133)
  * Improve call notification handling
  * Read payload size as qint64
  * Use kdeconnect-settings for command configuration</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Unmute audio when volume changes (kde#408705)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1590580800">- Add patch submitted upstream to use
  ecm_qt_declare_logging_category so users can easily modify the
  debugging configuration and use a default logging level of
  Warning instead of sending all debug messages to the log:
  * 0001-Use-ecm_qt_declare_logging_category-to-declare-the-l.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Fix findthisdevice sound URL
  * Remove windows CI in stable too</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1601640000">- Add upstream patches to fix security issues in kdeconnect
  (CVE-2020-26164, boo#1176268):
  * 0001-Do-not-leak-the-local-user-in-the-device-name.patch
  * 0002-Fix-use-after-free-in-LanLinkProvider-connectError.patch
  * 0003-Limit-identity-packets-to-8KiB.patch
  * 0004-Do-not-let-lanlink-connections-stay-open-for-long-wi.patch
  * 0005-Don-t-brute-force-reading-the-socket.patch
  * 0006-Limit-number-of-connected-sockets-from-unpaired-devi.patch
  * 0007-Do-not-remember-more-than-a-few-identity-packets-at-.patch
  * 0008-Limit-the-ports-we-try-to-connect-to-to-the-port-ran.patch
  * 0009-Do-not-replace-connections-for-a-given-deviceId-if-t.patch</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1608638400">- Add upstream patch to use fingerprinting for device
  verification (boo#1177672):
  * 0001-Add-a-verification-key-that-s-displayed-when-pairing.patch</changelog>
</package>
<package pkgid="8a153cdf5210ca2d715d90b2f3b6aad3276bf719bc279d771f7706d6a879e1f5" name="kdevelop5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.5.2" rel="lp152.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1543665600">- Add kdevelop provides</changelog>
  <changelog author="wbauer@tmo.at" date="1544961600">- Require clang, without it the C++ parser won't work (boo#1119186)</changelog>
  <changelog author="wbauer@tmo.at" date="1545480000">- New upstream release 5.3.1
  * Remove the CVS plugin. This was unusable and would crash if
    used in most cases, but accidentally remained in 5.3.0
  * Don't add 'override' specifier for non-modern project settings
    (kde#372280)
  * Use qCWarning in path.cpp
  * Fix qmakeproject unittest to work on Windows
  * Fix defines and includes test to run on Windows
  * Fix projectmodel unittest to work on Windows
  * Make the filteringstrategy test work on Windows as well
  * Fix problem model test on Windows. Make sure that when we
    create a path the root of that path is created according to
    what is expected on the current platform. E.g. C: on Windows.
  * Appimage: use original app desktop file as base for appimage
    one
  * Make test outputmodel pass on windows.
  * Increase timeout for duchain gcc compatibility test
  * Auto-find Clazy documentation also with clazy &gt;= 1.4
    (kde#401075)
  * Disable plugin project config if project without a
    IBuildSystemManager dep (kde#400769)
  * Appimage: Do not bundle libfontconfig
  * Cmake: fix missing addition of policies to documentation index
  * FunctionDefinition: only look for (new/other) function
    definition if we don't have one
  * Fix memleaks in duchain unittests
- Drop Auto-find-Clazy-documentation-also-with-clazy-1.4.patch,
  merged upstream
- Use cmake() notation for the Qt BuildRequires instead of
  pkgconfig()</changelog>
  <changelog author="wbauer@tmo.at" date="1551960000">- New upstream release 5.3.2
  * Don't call clear() on a shared pointer we don't own
    (kde#403644)
  * Workaround the bug found by ASan, which can be seen on FreeBSD
    CI
  * Kdev-clazy: use canonical paths
  * Prevent the Extra Arguments ComboBox to Stretch Too Much
  * CMake plugin: don't hardcode a default install prefix
  * Appimage: skip unneeded cp of cmake, removed later again
  * Clang plugin: Handle CUDA files better
  * Clang: detect Clang builtin dirs at runtime on Unix
  * Actually cleanup the duchain from the background thread
    (kde#388743)
  * Appimage: add okteta libs, as used by the debugger memory view
  * Grepview: Fix potential crash in "Find in Files" (kde#402617)
  * Add All Top-Level Targets to the Menu
  * Show "Move into Source" action in code menu
  * QuickOpen: Trim whitespace from input
  * Update kdevelop app icon to latest breeze-icons version
  * Appimage: have only kdevelop appdata in the appimage
  * Fix first run of appimage creation: get install_colorschemes.py
    via $SRC
  * Fix crash in documentation view (kde#402026)
  * CMake: skip server entries without empty build system
    information
  * 2 missing KTextEditorPluginIntegration::MainWindow slots
  * Polish Purpose integration in the PatchReview plugin
  * Hex editor plugin: prepare for incompatible API change of
    libraries from upcoming Okteta 0.26.0
- Require clangX instead of clang on Leap 15 and TW, the exact
  version should not matter anymore</changelog>
  <changelog author="wbauer@tmo.at" date="1563278400">- Add fix-crash-on-undocking-toolviews.patch to fix crash when
  undocking toolviews with Qt 5.13 (kde#409790)</changelog>
  <changelog author="wbauer@tmo.at" date="1563451200">- New upstream release 5.3.3
  * Use KDE_INSTALL_LOGGINGCATEGORIESDIR for kdebugsettings
    .categories files
  * TextDocument: remove actions from contextmenu on hide already
  * Sublime: fix crash on undocking toolviews with Qt 5.13
    (kde#409790)
  * Kdevplatform/interfaces: fix missing explicit QVector include
  * Fix kdevelopui.rc: bump version as required by string context
    changes
  * Shell: overwrite katectagsplugin to be disabled by default
  * Translate relative paths of input files to absolute ones
  * Welcome page: do not add currently unused qml pages to qrc data
  * Fix browse mode not disabled after Ctrl is released
  * Attempt to fix a crash on shutdown
  * ProblemHighlighter: Fix mark type handling
  * Cmakebuilddirchooser: Set a minimum size
  * Fix memory leaks reported by ASAN
  * Qmake: Move builder plugin to correct category (kde#407396)
  * Add DesktopEntry to notifyrc
  * Output config subpages alphabetically, instead of order in
    which corresponding plugins were loaded
  * Flatpak plugin - fix typo ("flies" -&gt; "files")
- Drop fix-crash-on-undocking-toolviews.patch, merged upstream</changelog>
  <changelog author="wbauer@tmo.at" date="1565092800">- New upstream release 5.4.0
  * For a list of changes, see:
    https://www.kdevelop.org/news/kdevelop-540-released
  * New build system support for Meson, current features are:
    + Native support for Meson projects (configuring, compiling,
    installing)
    + Support for KDevelop code autocompletion (plugin reads Meson
    introspection information)
    + Initial support for the Meson rewriter: modifying basic
    aspects of the project (version, license, etc.)
  * New scratchpad plugin to keep "scratches" of code or text to
    experiment or quickly run something without the need to create
    a full project
  * The plugin for Clang-Tidy is now part of KDevelop's default
    plugins
  * Fixes and improvements to the C++ support:
    + Add working directory to clang parser
    + Clang Plugin: Report some problems from included files
    + Make it possible to select -std=c++2a for our language
    support
    + Rename c++1z to C++17
    + Clang CodeCompletion: No auto-completion for numbers
    + Add assistant to generate header guards
  * [Documentation] Set size policy of providers combobox to
    AdjustToContents
  * Contextbrowser: Remove 'separated by only whitespace'
    possibility for showing the problem tooltip
  * Contextbrowser: Minor improvement to tooltip showing behavior
  * CMake plugin: Also show an error message if the CMake
    configuration becomes invalid due to a change, and add an
    instruction to reload the project manually
  * CMake plugin: Show a message box if configuration fails
  * Projectfilter: Include .clang-format by default
  * Add a predefined clang-format custom script formater
  * Fix code completion for nameless structs/unions with the same
    member (kde#409041)
  * Support newer kdebugsettings .categories file format
  * Show session name in the Delete Session confirmation dialog
  * Remove invalid check from test_projectload test
  * Document tree view close on middle button
  * Follow KTextEditor changes for hidpi rendering of icon border
  * Note visibility tag also with signature of friend-declared
    method
  * Guard against crashes when IStatus object gets destroyed at
    bad times
  * Astyle: support the system astyle library
  * Renovate kdevelop bash completion file
  * Fix deadlock exception in FileManagerListJob
  * DVCS Branch Manager with filtering and sorting proposal
  * Also find clang include path based on runtime libclang library
    path
  * TestFile: On destruction, close associated document if open
    and stop the background parser
  * CMake: discover more unit tests (kde#405225)
  * Be less restrictive with failures while searching for LLVM
  * Allow the maximum file size of parse jobs to be configurable
  * Optimize CMakeBuildDirChooser::buildDirSettings()
  * [Sessions Runner] Use icon name
  * Don't eat the backspace event when no alt modifier is set
  * "Reparse Entire Project" action for the ProjectController
  * Introduce QuickOpenEmbeddedWidgetCombiner
  * Add 'back' to QuickOpenEmbeddedWidgetInterface
  * Update documentation: the keyboard shortcuts use ALT not SHIFT
  * Fix up/down keyboard navigation for 'Show documentation' links
  * Lock duchain in AbstractIncludeNavigationContext::html
  * Don't crash when background listing outlasts file manager list
    job
  * Don't crash when project is closed before it was fully opened
  * Make sure we use the same compiler settings as the project is
    by default
  * Debugger plugin fixes
  * CMakeBuildDirChooser: avoid calling deprecated
    KUrlRequester::setPath()
  * Flatpak+cmake: put the cmake build directories into
    .flatpak-builder
  * Allow KDEV_DEFAULT_INSTALL_PREFIX specify a default install
    prefix
  * Flatpak: Improve runtime title
  * Adapt indentation mode after a new project was opened
  * Flatpak: Fix listing runtimes
  * Properly cleanup FileManagerListJob when folder items are
    deleted (kde#260741)
  * Provide debugger name and pid when registering a debugger to
    DrKonqi
  * Support for indent-after-parens astyle option
  * Fix bug 389060 (Heaptrack analysis keeps firing
    /usr/bin/plasmoidviewer) (kde#389060)
  * Contextbrowser: Ability to show combined problems and decl
    tooltip
  * Properly display argument names of template functions
  * Show size and alignment information in tooltips for typedef or
    alias
  * GrepView: Extend default file extensions to search (kde#402207)
  * [clang-tidy] Fix context-menu crash for files not in a project
    (kde#401917)
  * Polish Flatpak integration
  * [clang-tidy] Disable/Block Run actions in projects without
    buildsystem manager
  * Add VcsAnnotationItemDelegate, for control of rendering and
    tooltip
  * Qmljs: Update qmljs from QtCreator v4.7.2
  * LoadedPluginsDialog: Fix initial size
  * Place cursor after opening brace for function implementation
  * Replace leading typed text when completing function
    implementation (kde#384710)
  * Fix crashes when document gets destroyed directly after load
  * Prevent QWebEngine from overriding signal handlers
  * Add missing break in QmlJs code completion
  * Create action to jump to the current execution line in debug
    mode (kde#361411)
  * Fix segfaults in OutputWidget (kde#398615)
  * Fix double delete bug in OutputWidget
  * Cleanup Perforce test case, and thereby its output a little
- Provide/Obsolete kdevelop5-plugin-clang-tidy, it is included now
- Cleanup spec file: remove conditionals for no longer supported
  distribution versions</changelog>
  <changelog author="wbauer@tmo.at" date="1565179200">- Also Provide/Obsolete kdevelop5-plugin-clang-tidy-lang to avoid
  update problems due to file conflicts</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565697600">- Update to 5.4.1
  * Fix crash: add missing Q_INTERFACES to OktetaDocument for
    IDocument. (kde#410820)
  * Shell: do not show bogus error about repo urls on DnD of normal files.
  * [Grepview] Use the correct icons.
  * Fix calculation of commit age in annotation side bar for &lt; 1 year.
  * Appdata: add &lt;launchable/&gt; entry.</changelog>
  <changelog author="wbauer@tmo.at" date="1567512000">- Update to 5.4.2
  * All debuggers: fix VariableCollection to unregister as
    texthinter provider (kde#411371)
  * Contextbrowser: register as texthint provider to existing views
    on creation
  * Fix crash on text hint being triggered after disabling code
    browser plugin (kde#411371)
  * Avoid possible dereference of an invalid iterator (kde#411323)
  * Kdevplatform/shell: fix outdated window title once project of
    document loaded
  * Kdevplatform/shell: work-around for Qt 5.9/macOS bug showing
    modified indicator
  * Kdevplatform/shell: restore document modified flag in
    mainwindow title
  * Kdevplatform/shell: do not repeat query &amp; differently for
    current document
  * Indicate appstream the ps desktop file isn't a separate
    application (kde#410687)
  * Clang: fix tooltip missing closing bracket with default
    argument calls
  * Include more hidden files in projectfilter plugin (CI, Lint
    configs...)</changelog>
  <changelog author="wbauer@tmo.at" date="1571745600">- Update to 5.4.3
  * ProblemNavigationContext: Fix incorrect link target for
    file:line links with declarations
  * ProjectManagerView: Make items with an empty icon have the same
    indent as items with a valid icon
  * Welcome page: fix version of QtQuick.XmlListModel import to
    match Qt 5.7 ff.
  * Welcome page: fix version of QtQuick.Layouts import to match
    Qt 5.7 ff.
  * [Grepview] Use the correct fallback icon for Collapse All
  * FileManagerListJob: use a semaphore for locking
  * Fix Infinite Recursion in DUChain
  * Cache the defines/includes for gcc-like compilers per language
    type
  * Only write defines file when needed
  * Don't set super long name on completely anon structs
  * Use type name as fallback ID for anon typedef'ed structs/unions
    etc. (kde#409041)
  * Fixed crash when filtering class list (kde#406931)
  * Gcclikecompiler: properly resolve include paths with symbolic
    links (kde#405221)</changelog>
  <changelog author="wbauer@tmo.at" date="1572955200">- Update to 5.4.4
  * Fix copyright date display in About KDevelop/KDevPlatform
    dialogs (kde#413390)
  * FindClang.cmake: also search LLVM version 9
  * Clang: Workaround for empty problem ranges at start of document</changelog>
  <changelog author="wbauer@tmo.at" date="1575288000">- Update to 5.4.5
  * Add missing forward declaration (qt5.14)
  * Fix compilation error with gcc 7.4.1, ambiguous overload
  * Remove bad assert
  * Remove duplicate fuzzy character "/"
  * Fix reformat for selected code
  * Qthelp: Unbreak support for zipped/tarred QCH files from KNS
  * Qthelp: adapt KNewStuff config to move from collect.kde.org to
    store.kde.org (kde#377183)</changelog>
  <changelog author="wbauer@tmo.at" date="1577016000">- Require exact grantlee5 version by kdevplatform with which it was
  built, the plugin location contains the version so the installed
  plugin won't be found by different versions</changelog>
  <changelog author="wbauer@tmo.at" date="1578398400">- Update to 5.4.6
  * Filetemplates: update addresses to web ones for GPLv2 &amp; LGPLv2
  * Filetemplates: fix wrong text of LGPLv2+ (KDE) (was GPLv2+
    (KDE) one) (kde#414978)
  * Shell: default to kdevelop icon for plugins in
    LoadedPluginsDialog list
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Make ForegroundLock::isLockedForThread() also consider the
    current thread being the main (Qt) thread, and thus add this
    check in more places
  * Clang: Fix a case of concurrent access to KTextEditor
  * Fix wrongly internally duplicated KHelpMenu instance
  * Only unload plugins after the DUChain shutdown to prevent
    infinite loop due to non-loaded factories for types</changelog>
  <changelog author="wbauer@tmo.at" date="1580731200">- Update to 5.5.0
  * Improved C++ language support:
    + Fix missing header guard warning for a standalone header
    being always present
    + Don't crash when signatures don't match in
    AdaptSignatureAssistant
    + Clazy: add configurable predefined checkset selections
    + Clang-tidy: add configurable predefined checkset selections
    + Don't get confused when encountering parse errors in default
    args
    + Fix ClangUtils::getDefaultArguments when encountering macros
    (kde#369546)
    + Skip clang-provided override items from code completion
    + Unbreak move-into-source for non-class functions
    + Lambda init captures are visited starting with clang 9.0.0
    + Try a bit harder to find types for look-ahead completion
  * Welcome page: remove background in active window when plugin is
    disabled
  * No longer install modeltest.h, not used externally and
    deprecated
  * Fix "invalid project name" hint not always showing
  * Use default scheme option of KColorSchemeManager if available
  * Read the global color scheme name from its file
  * Fix qmljs comment parsing
  * Fix the comment formatting for some Doxygen variants
  * Qmakebuilder: remove unused kcfg files
  * Fix reformat for long strings
  * Introduce shell-embedded message area, to avoid dialog windows
  * Clazy, clang-tidy: share code via new private
    KDevCompileAnalyzerCommon
  * Make tar archives reproducible by setting Pax headers
  * Kdevplatform: remove About data feature
  * Support for rebasing
  * Add a setting to disable the close buttons on tabs
  * CMake: Show project name in showConfigureErrorMessage
  * TemplatePreview: Enable word-wrap for messagebox and Lines
    Policy Label
  * Filetemplates: load and show tooltip for custom options
  * Pass environment variables from process environment and set up
    with flatpak environment
  * Remove usage of columns argument in arch detection since old
    LTS systems may not have that flag
  * Pass the android toolchain file path to CMake as a local file
    path not as a URI
  * Formatter: Hide KTextEditor minimap for the formatter preview
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Mention all fetch project sources in the documentation
    (kde#392550)
  * Script launcher: add env profile configure dialog button to
    config UI (kde#410914)
  * Cmake: FindClang: Detect llvm-project.git checkout</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1582804800">- Add _constraints disk 4GB PowerPC to avoid build failure ppc64</changelog>
  <changelog author="wbauer@tmo.at" date="1588680000">- Update to 5.5.1
  * Clang-tidy: fix storing of custom checksets per project
  * Clazy: fix storing of custom checksets per project
  * Kdev_format_source: eliminate a global QString constant
  * Reduce the scope of local variables in KDevFormatFile::read()
  * Move a format_sources comment from unsupported position
  * Kdev_format_source: don't ignore the root directory
  * Kdev_format_source: fix typos in usage/error messages
  * Work around QDir::match() behavior change in Qt 5.12.0
    (kde#409222, kde#417628)
  * Add failing kdev_format_source and grepview tests
  * Handle errors better in KDevFormatFile::executeCommand()
  * Grepview: search in hidden files and directories
  * FindClang.cmake: Add 10 to the allowed versions
  * Disable CSS images workaround for Qt WebEngine build
  * Disable extra context menu in Documentation tool view
  * Fix flickering when loading documentation
  * [Standard Documentation View] Set the correct mime type for job
    replies
  * Breakpoint icon: add 32 px sized breakpoint icon (also pixel-
    align SVG)
  * IADM: take C++ standard from build system manager into account
    (kde#417903)
  * Clear selection when updating cursor position (kde#415644)
  * Don't crash when we fail to find a screen for the active
    tooltip (kde#417151)
  * Kdev-clang: don't skip unexposed declarations from different
    files (kde#402066)</changelog>
  <changelog author="wbauer@tmo.at" date="1591099200">- Update to 5.5.2
  * Remove plugin "kde repo provider" due to defunct service
  * Fix extra margins around config pages</changelog>
  <changelog author="wbauer@tmo.at" date="1610193600">- Add Fix-version-check-for-GDB-10.x.patch to make debugging work
  with gdb-10.x (kde#428688)</changelog>
</package>
<package pkgid="de06a578f5f2d54fa10935d103dd1cecd44d42ca7ebf83df4cada31723d5ca74" name="kdevelop5-debugsource" arch="x86_64">
  <version epoch="0" ver="5.5.2" rel="lp152.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1543665600">- Add kdevelop provides</changelog>
  <changelog author="wbauer@tmo.at" date="1544961600">- Require clang, without it the C++ parser won't work (boo#1119186)</changelog>
  <changelog author="wbauer@tmo.at" date="1545480000">- New upstream release 5.3.1
  * Remove the CVS plugin. This was unusable and would crash if
    used in most cases, but accidentally remained in 5.3.0
  * Don't add 'override' specifier for non-modern project settings
    (kde#372280)
  * Use qCWarning in path.cpp
  * Fix qmakeproject unittest to work on Windows
  * Fix defines and includes test to run on Windows
  * Fix projectmodel unittest to work on Windows
  * Make the filteringstrategy test work on Windows as well
  * Fix problem model test on Windows. Make sure that when we
    create a path the root of that path is created according to
    what is expected on the current platform. E.g. C: on Windows.
  * Appimage: use original app desktop file as base for appimage
    one
  * Make test outputmodel pass on windows.
  * Increase timeout for duchain gcc compatibility test
  * Auto-find Clazy documentation also with clazy &gt;= 1.4
    (kde#401075)
  * Disable plugin project config if project without a
    IBuildSystemManager dep (kde#400769)
  * Appimage: Do not bundle libfontconfig
  * Cmake: fix missing addition of policies to documentation index
  * FunctionDefinition: only look for (new/other) function
    definition if we don't have one
  * Fix memleaks in duchain unittests
- Drop Auto-find-Clazy-documentation-also-with-clazy-1.4.patch,
  merged upstream
- Use cmake() notation for the Qt BuildRequires instead of
  pkgconfig()</changelog>
  <changelog author="wbauer@tmo.at" date="1551960000">- New upstream release 5.3.2
  * Don't call clear() on a shared pointer we don't own
    (kde#403644)
  * Workaround the bug found by ASan, which can be seen on FreeBSD
    CI
  * Kdev-clazy: use canonical paths
  * Prevent the Extra Arguments ComboBox to Stretch Too Much
  * CMake plugin: don't hardcode a default install prefix
  * Appimage: skip unneeded cp of cmake, removed later again
  * Clang plugin: Handle CUDA files better
  * Clang: detect Clang builtin dirs at runtime on Unix
  * Actually cleanup the duchain from the background thread
    (kde#388743)
  * Appimage: add okteta libs, as used by the debugger memory view
  * Grepview: Fix potential crash in "Find in Files" (kde#402617)
  * Add All Top-Level Targets to the Menu
  * Show "Move into Source" action in code menu
  * QuickOpen: Trim whitespace from input
  * Update kdevelop app icon to latest breeze-icons version
  * Appimage: have only kdevelop appdata in the appimage
  * Fix first run of appimage creation: get install_colorschemes.py
    via $SRC
  * Fix crash in documentation view (kde#402026)
  * CMake: skip server entries without empty build system
    information
  * 2 missing KTextEditorPluginIntegration::MainWindow slots
  * Polish Purpose integration in the PatchReview plugin
  * Hex editor plugin: prepare for incompatible API change of
    libraries from upcoming Okteta 0.26.0
- Require clangX instead of clang on Leap 15 and TW, the exact
  version should not matter anymore</changelog>
  <changelog author="wbauer@tmo.at" date="1563278400">- Add fix-crash-on-undocking-toolviews.patch to fix crash when
  undocking toolviews with Qt 5.13 (kde#409790)</changelog>
  <changelog author="wbauer@tmo.at" date="1563451200">- New upstream release 5.3.3
  * Use KDE_INSTALL_LOGGINGCATEGORIESDIR for kdebugsettings
    .categories files
  * TextDocument: remove actions from contextmenu on hide already
  * Sublime: fix crash on undocking toolviews with Qt 5.13
    (kde#409790)
  * Kdevplatform/interfaces: fix missing explicit QVector include
  * Fix kdevelopui.rc: bump version as required by string context
    changes
  * Shell: overwrite katectagsplugin to be disabled by default
  * Translate relative paths of input files to absolute ones
  * Welcome page: do not add currently unused qml pages to qrc data
  * Fix browse mode not disabled after Ctrl is released
  * Attempt to fix a crash on shutdown
  * ProblemHighlighter: Fix mark type handling
  * Cmakebuilddirchooser: Set a minimum size
  * Fix memory leaks reported by ASAN
  * Qmake: Move builder plugin to correct category (kde#407396)
  * Add DesktopEntry to notifyrc
  * Output config subpages alphabetically, instead of order in
    which corresponding plugins were loaded
  * Flatpak plugin - fix typo ("flies" -&gt; "files")
- Drop fix-crash-on-undocking-toolviews.patch, merged upstream</changelog>
  <changelog author="wbauer@tmo.at" date="1565092800">- New upstream release 5.4.0
  * For a list of changes, see:
    https://www.kdevelop.org/news/kdevelop-540-released
  * New build system support for Meson, current features are:
    + Native support for Meson projects (configuring, compiling,
    installing)
    + Support for KDevelop code autocompletion (plugin reads Meson
    introspection information)
    + Initial support for the Meson rewriter: modifying basic
    aspects of the project (version, license, etc.)
  * New scratchpad plugin to keep "scratches" of code or text to
    experiment or quickly run something without the need to create
    a full project
  * The plugin for Clang-Tidy is now part of KDevelop's default
    plugins
  * Fixes and improvements to the C++ support:
    + Add working directory to clang parser
    + Clang Plugin: Report some problems from included files
    + Make it possible to select -std=c++2a for our language
    support
    + Rename c++1z to C++17
    + Clang CodeCompletion: No auto-completion for numbers
    + Add assistant to generate header guards
  * [Documentation] Set size policy of providers combobox to
    AdjustToContents
  * Contextbrowser: Remove 'separated by only whitespace'
    possibility for showing the problem tooltip
  * Contextbrowser: Minor improvement to tooltip showing behavior
  * CMake plugin: Also show an error message if the CMake
    configuration becomes invalid due to a change, and add an
    instruction to reload the project manually
  * CMake plugin: Show a message box if configuration fails
  * Projectfilter: Include .clang-format by default
  * Add a predefined clang-format custom script formater
  * Fix code completion for nameless structs/unions with the same
    member (kde#409041)
  * Support newer kdebugsettings .categories file format
  * Show session name in the Delete Session confirmation dialog
  * Remove invalid check from test_projectload test
  * Document tree view close on middle button
  * Follow KTextEditor changes for hidpi rendering of icon border
  * Note visibility tag also with signature of friend-declared
    method
  * Guard against crashes when IStatus object gets destroyed at
    bad times
  * Astyle: support the system astyle library
  * Renovate kdevelop bash completion file
  * Fix deadlock exception in FileManagerListJob
  * DVCS Branch Manager with filtering and sorting proposal
  * Also find clang include path based on runtime libclang library
    path
  * TestFile: On destruction, close associated document if open
    and stop the background parser
  * CMake: discover more unit tests (kde#405225)
  * Be less restrictive with failures while searching for LLVM
  * Allow the maximum file size of parse jobs to be configurable
  * Optimize CMakeBuildDirChooser::buildDirSettings()
  * [Sessions Runner] Use icon name
  * Don't eat the backspace event when no alt modifier is set
  * "Reparse Entire Project" action for the ProjectController
  * Introduce QuickOpenEmbeddedWidgetCombiner
  * Add 'back' to QuickOpenEmbeddedWidgetInterface
  * Update documentation: the keyboard shortcuts use ALT not SHIFT
  * Fix up/down keyboard navigation for 'Show documentation' links
  * Lock duchain in AbstractIncludeNavigationContext::html
  * Don't crash when background listing outlasts file manager list
    job
  * Don't crash when project is closed before it was fully opened
  * Make sure we use the same compiler settings as the project is
    by default
  * Debugger plugin fixes
  * CMakeBuildDirChooser: avoid calling deprecated
    KUrlRequester::setPath()
  * Flatpak+cmake: put the cmake build directories into
    .flatpak-builder
  * Allow KDEV_DEFAULT_INSTALL_PREFIX specify a default install
    prefix
  * Flatpak: Improve runtime title
  * Adapt indentation mode after a new project was opened
  * Flatpak: Fix listing runtimes
  * Properly cleanup FileManagerListJob when folder items are
    deleted (kde#260741)
  * Provide debugger name and pid when registering a debugger to
    DrKonqi
  * Support for indent-after-parens astyle option
  * Fix bug 389060 (Heaptrack analysis keeps firing
    /usr/bin/plasmoidviewer) (kde#389060)
  * Contextbrowser: Ability to show combined problems and decl
    tooltip
  * Properly display argument names of template functions
  * Show size and alignment information in tooltips for typedef or
    alias
  * GrepView: Extend default file extensions to search (kde#402207)
  * [clang-tidy] Fix context-menu crash for files not in a project
    (kde#401917)
  * Polish Flatpak integration
  * [clang-tidy] Disable/Block Run actions in projects without
    buildsystem manager
  * Add VcsAnnotationItemDelegate, for control of rendering and
    tooltip
  * Qmljs: Update qmljs from QtCreator v4.7.2
  * LoadedPluginsDialog: Fix initial size
  * Place cursor after opening brace for function implementation
  * Replace leading typed text when completing function
    implementation (kde#384710)
  * Fix crashes when document gets destroyed directly after load
  * Prevent QWebEngine from overriding signal handlers
  * Add missing break in QmlJs code completion
  * Create action to jump to the current execution line in debug
    mode (kde#361411)
  * Fix segfaults in OutputWidget (kde#398615)
  * Fix double delete bug in OutputWidget
  * Cleanup Perforce test case, and thereby its output a little
- Provide/Obsolete kdevelop5-plugin-clang-tidy, it is included now
- Cleanup spec file: remove conditionals for no longer supported
  distribution versions</changelog>
  <changelog author="wbauer@tmo.at" date="1565179200">- Also Provide/Obsolete kdevelop5-plugin-clang-tidy-lang to avoid
  update problems due to file conflicts</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565697600">- Update to 5.4.1
  * Fix crash: add missing Q_INTERFACES to OktetaDocument for
    IDocument. (kde#410820)
  * Shell: do not show bogus error about repo urls on DnD of normal files.
  * [Grepview] Use the correct icons.
  * Fix calculation of commit age in annotation side bar for &lt; 1 year.
  * Appdata: add &lt;launchable/&gt; entry.</changelog>
  <changelog author="wbauer@tmo.at" date="1567512000">- Update to 5.4.2
  * All debuggers: fix VariableCollection to unregister as
    texthinter provider (kde#411371)
  * Contextbrowser: register as texthint provider to existing views
    on creation
  * Fix crash on text hint being triggered after disabling code
    browser plugin (kde#411371)
  * Avoid possible dereference of an invalid iterator (kde#411323)
  * Kdevplatform/shell: fix outdated window title once project of
    document loaded
  * Kdevplatform/shell: work-around for Qt 5.9/macOS bug showing
    modified indicator
  * Kdevplatform/shell: restore document modified flag in
    mainwindow title
  * Kdevplatform/shell: do not repeat query &amp; differently for
    current document
  * Indicate appstream the ps desktop file isn't a separate
    application (kde#410687)
  * Clang: fix tooltip missing closing bracket with default
    argument calls
  * Include more hidden files in projectfilter plugin (CI, Lint
    configs...)</changelog>
  <changelog author="wbauer@tmo.at" date="1571745600">- Update to 5.4.3
  * ProblemNavigationContext: Fix incorrect link target for
    file:line links with declarations
  * ProjectManagerView: Make items with an empty icon have the same
    indent as items with a valid icon
  * Welcome page: fix version of QtQuick.XmlListModel import to
    match Qt 5.7 ff.
  * Welcome page: fix version of QtQuick.Layouts import to match
    Qt 5.7 ff.
  * [Grepview] Use the correct fallback icon for Collapse All
  * FileManagerListJob: use a semaphore for locking
  * Fix Infinite Recursion in DUChain
  * Cache the defines/includes for gcc-like compilers per language
    type
  * Only write defines file when needed
  * Don't set super long name on completely anon structs
  * Use type name as fallback ID for anon typedef'ed structs/unions
    etc. (kde#409041)
  * Fixed crash when filtering class list (kde#406931)
  * Gcclikecompiler: properly resolve include paths with symbolic
    links (kde#405221)</changelog>
  <changelog author="wbauer@tmo.at" date="1572955200">- Update to 5.4.4
  * Fix copyright date display in About KDevelop/KDevPlatform
    dialogs (kde#413390)
  * FindClang.cmake: also search LLVM version 9
  * Clang: Workaround for empty problem ranges at start of document</changelog>
  <changelog author="wbauer@tmo.at" date="1575288000">- Update to 5.4.5
  * Add missing forward declaration (qt5.14)
  * Fix compilation error with gcc 7.4.1, ambiguous overload
  * Remove bad assert
  * Remove duplicate fuzzy character "/"
  * Fix reformat for selected code
  * Qthelp: Unbreak support for zipped/tarred QCH files from KNS
  * Qthelp: adapt KNewStuff config to move from collect.kde.org to
    store.kde.org (kde#377183)</changelog>
  <changelog author="wbauer@tmo.at" date="1577016000">- Require exact grantlee5 version by kdevplatform with which it was
  built, the plugin location contains the version so the installed
  plugin won't be found by different versions</changelog>
  <changelog author="wbauer@tmo.at" date="1578398400">- Update to 5.4.6
  * Filetemplates: update addresses to web ones for GPLv2 &amp; LGPLv2
  * Filetemplates: fix wrong text of LGPLv2+ (KDE) (was GPLv2+
    (KDE) one) (kde#414978)
  * Shell: default to kdevelop icon for plugins in
    LoadedPluginsDialog list
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Make ForegroundLock::isLockedForThread() also consider the
    current thread being the main (Qt) thread, and thus add this
    check in more places
  * Clang: Fix a case of concurrent access to KTextEditor
  * Fix wrongly internally duplicated KHelpMenu instance
  * Only unload plugins after the DUChain shutdown to prevent
    infinite loop due to non-loaded factories for types</changelog>
  <changelog author="wbauer@tmo.at" date="1580731200">- Update to 5.5.0
  * Improved C++ language support:
    + Fix missing header guard warning for a standalone header
    being always present
    + Don't crash when signatures don't match in
    AdaptSignatureAssistant
    + Clazy: add configurable predefined checkset selections
    + Clang-tidy: add configurable predefined checkset selections
    + Don't get confused when encountering parse errors in default
    args
    + Fix ClangUtils::getDefaultArguments when encountering macros
    (kde#369546)
    + Skip clang-provided override items from code completion
    + Unbreak move-into-source for non-class functions
    + Lambda init captures are visited starting with clang 9.0.0
    + Try a bit harder to find types for look-ahead completion
  * Welcome page: remove background in active window when plugin is
    disabled
  * No longer install modeltest.h, not used externally and
    deprecated
  * Fix "invalid project name" hint not always showing
  * Use default scheme option of KColorSchemeManager if available
  * Read the global color scheme name from its file
  * Fix qmljs comment parsing
  * Fix the comment formatting for some Doxygen variants
  * Qmakebuilder: remove unused kcfg files
  * Fix reformat for long strings
  * Introduce shell-embedded message area, to avoid dialog windows
  * Clazy, clang-tidy: share code via new private
    KDevCompileAnalyzerCommon
  * Make tar archives reproducible by setting Pax headers
  * Kdevplatform: remove About data feature
  * Support for rebasing
  * Add a setting to disable the close buttons on tabs
  * CMake: Show project name in showConfigureErrorMessage
  * TemplatePreview: Enable word-wrap for messagebox and Lines
    Policy Label
  * Filetemplates: load and show tooltip for custom options
  * Pass environment variables from process environment and set up
    with flatpak environment
  * Remove usage of columns argument in arch detection since old
    LTS systems may not have that flag
  * Pass the android toolchain file path to CMake as a local file
    path not as a URI
  * Formatter: Hide KTextEditor minimap for the formatter preview
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Mention all fetch project sources in the documentation
    (kde#392550)
  * Script launcher: add env profile configure dialog button to
    config UI (kde#410914)
  * Cmake: FindClang: Detect llvm-project.git checkout</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1582804800">- Add _constraints disk 4GB PowerPC to avoid build failure ppc64</changelog>
  <changelog author="wbauer@tmo.at" date="1588680000">- Update to 5.5.1
  * Clang-tidy: fix storing of custom checksets per project
  * Clazy: fix storing of custom checksets per project
  * Kdev_format_source: eliminate a global QString constant
  * Reduce the scope of local variables in KDevFormatFile::read()
  * Move a format_sources comment from unsupported position
  * Kdev_format_source: don't ignore the root directory
  * Kdev_format_source: fix typos in usage/error messages
  * Work around QDir::match() behavior change in Qt 5.12.0
    (kde#409222, kde#417628)
  * Add failing kdev_format_source and grepview tests
  * Handle errors better in KDevFormatFile::executeCommand()
  * Grepview: search in hidden files and directories
  * FindClang.cmake: Add 10 to the allowed versions
  * Disable CSS images workaround for Qt WebEngine build
  * Disable extra context menu in Documentation tool view
  * Fix flickering when loading documentation
  * [Standard Documentation View] Set the correct mime type for job
    replies
  * Breakpoint icon: add 32 px sized breakpoint icon (also pixel-
    align SVG)
  * IADM: take C++ standard from build system manager into account
    (kde#417903)
  * Clear selection when updating cursor position (kde#415644)
  * Don't crash when we fail to find a screen for the active
    tooltip (kde#417151)
  * Kdev-clang: don't skip unexposed declarations from different
    files (kde#402066)</changelog>
  <changelog author="wbauer@tmo.at" date="1591099200">- Update to 5.5.2
  * Remove plugin "kde repo provider" due to defunct service
  * Fix extra margins around config pages</changelog>
  <changelog author="wbauer@tmo.at" date="1610193600">- Add Fix-version-check-for-GDB-10.x.patch to make debugging work
  with gdb-10.x (kde#428688)</changelog>
</package>
<package pkgid="e0351280af60f767260348ad143e79986b35e1220cea33ce50cf9d5325fe59db" name="kdevplatform-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.5.2" rel="lp152.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1543665600">- Add kdevelop provides</changelog>
  <changelog author="wbauer@tmo.at" date="1544961600">- Require clang, without it the C++ parser won't work (boo#1119186)</changelog>
  <changelog author="wbauer@tmo.at" date="1545480000">- New upstream release 5.3.1
  * Remove the CVS plugin. This was unusable and would crash if
    used in most cases, but accidentally remained in 5.3.0
  * Don't add 'override' specifier for non-modern project settings
    (kde#372280)
  * Use qCWarning in path.cpp
  * Fix qmakeproject unittest to work on Windows
  * Fix defines and includes test to run on Windows
  * Fix projectmodel unittest to work on Windows
  * Make the filteringstrategy test work on Windows as well
  * Fix problem model test on Windows. Make sure that when we
    create a path the root of that path is created according to
    what is expected on the current platform. E.g. C: on Windows.
  * Appimage: use original app desktop file as base for appimage
    one
  * Make test outputmodel pass on windows.
  * Increase timeout for duchain gcc compatibility test
  * Auto-find Clazy documentation also with clazy &gt;= 1.4
    (kde#401075)
  * Disable plugin project config if project without a
    IBuildSystemManager dep (kde#400769)
  * Appimage: Do not bundle libfontconfig
  * Cmake: fix missing addition of policies to documentation index
  * FunctionDefinition: only look for (new/other) function
    definition if we don't have one
  * Fix memleaks in duchain unittests
- Drop Auto-find-Clazy-documentation-also-with-clazy-1.4.patch,
  merged upstream
- Use cmake() notation for the Qt BuildRequires instead of
  pkgconfig()</changelog>
  <changelog author="wbauer@tmo.at" date="1551960000">- New upstream release 5.3.2
  * Don't call clear() on a shared pointer we don't own
    (kde#403644)
  * Workaround the bug found by ASan, which can be seen on FreeBSD
    CI
  * Kdev-clazy: use canonical paths
  * Prevent the Extra Arguments ComboBox to Stretch Too Much
  * CMake plugin: don't hardcode a default install prefix
  * Appimage: skip unneeded cp of cmake, removed later again
  * Clang plugin: Handle CUDA files better
  * Clang: detect Clang builtin dirs at runtime on Unix
  * Actually cleanup the duchain from the background thread
    (kde#388743)
  * Appimage: add okteta libs, as used by the debugger memory view
  * Grepview: Fix potential crash in "Find in Files" (kde#402617)
  * Add All Top-Level Targets to the Menu
  * Show "Move into Source" action in code menu
  * QuickOpen: Trim whitespace from input
  * Update kdevelop app icon to latest breeze-icons version
  * Appimage: have only kdevelop appdata in the appimage
  * Fix first run of appimage creation: get install_colorschemes.py
    via $SRC
  * Fix crash in documentation view (kde#402026)
  * CMake: skip server entries without empty build system
    information
  * 2 missing KTextEditorPluginIntegration::MainWindow slots
  * Polish Purpose integration in the PatchReview plugin
  * Hex editor plugin: prepare for incompatible API change of
    libraries from upcoming Okteta 0.26.0
- Require clangX instead of clang on Leap 15 and TW, the exact
  version should not matter anymore</changelog>
  <changelog author="wbauer@tmo.at" date="1563278400">- Add fix-crash-on-undocking-toolviews.patch to fix crash when
  undocking toolviews with Qt 5.13 (kde#409790)</changelog>
  <changelog author="wbauer@tmo.at" date="1563451200">- New upstream release 5.3.3
  * Use KDE_INSTALL_LOGGINGCATEGORIESDIR for kdebugsettings
    .categories files
  * TextDocument: remove actions from contextmenu on hide already
  * Sublime: fix crash on undocking toolviews with Qt 5.13
    (kde#409790)
  * Kdevplatform/interfaces: fix missing explicit QVector include
  * Fix kdevelopui.rc: bump version as required by string context
    changes
  * Shell: overwrite katectagsplugin to be disabled by default
  * Translate relative paths of input files to absolute ones
  * Welcome page: do not add currently unused qml pages to qrc data
  * Fix browse mode not disabled after Ctrl is released
  * Attempt to fix a crash on shutdown
  * ProblemHighlighter: Fix mark type handling
  * Cmakebuilddirchooser: Set a minimum size
  * Fix memory leaks reported by ASAN
  * Qmake: Move builder plugin to correct category (kde#407396)
  * Add DesktopEntry to notifyrc
  * Output config subpages alphabetically, instead of order in
    which corresponding plugins were loaded
  * Flatpak plugin - fix typo ("flies" -&gt; "files")
- Drop fix-crash-on-undocking-toolviews.patch, merged upstream</changelog>
  <changelog author="wbauer@tmo.at" date="1565092800">- New upstream release 5.4.0
  * For a list of changes, see:
    https://www.kdevelop.org/news/kdevelop-540-released
  * New build system support for Meson, current features are:
    + Native support for Meson projects (configuring, compiling,
    installing)
    + Support for KDevelop code autocompletion (plugin reads Meson
    introspection information)
    + Initial support for the Meson rewriter: modifying basic
    aspects of the project (version, license, etc.)
  * New scratchpad plugin to keep "scratches" of code or text to
    experiment or quickly run something without the need to create
    a full project
  * The plugin for Clang-Tidy is now part of KDevelop's default
    plugins
  * Fixes and improvements to the C++ support:
    + Add working directory to clang parser
    + Clang Plugin: Report some problems from included files
    + Make it possible to select -std=c++2a for our language
    support
    + Rename c++1z to C++17
    + Clang CodeCompletion: No auto-completion for numbers
    + Add assistant to generate header guards
  * [Documentation] Set size policy of providers combobox to
    AdjustToContents
  * Contextbrowser: Remove 'separated by only whitespace'
    possibility for showing the problem tooltip
  * Contextbrowser: Minor improvement to tooltip showing behavior
  * CMake plugin: Also show an error message if the CMake
    configuration becomes invalid due to a change, and add an
    instruction to reload the project manually
  * CMake plugin: Show a message box if configuration fails
  * Projectfilter: Include .clang-format by default
  * Add a predefined clang-format custom script formater
  * Fix code completion for nameless structs/unions with the same
    member (kde#409041)
  * Support newer kdebugsettings .categories file format
  * Show session name in the Delete Session confirmation dialog
  * Remove invalid check from test_projectload test
  * Document tree view close on middle button
  * Follow KTextEditor changes for hidpi rendering of icon border
  * Note visibility tag also with signature of friend-declared
    method
  * Guard against crashes when IStatus object gets destroyed at
    bad times
  * Astyle: support the system astyle library
  * Renovate kdevelop bash completion file
  * Fix deadlock exception in FileManagerListJob
  * DVCS Branch Manager with filtering and sorting proposal
  * Also find clang include path based on runtime libclang library
    path
  * TestFile: On destruction, close associated document if open
    and stop the background parser
  * CMake: discover more unit tests (kde#405225)
  * Be less restrictive with failures while searching for LLVM
  * Allow the maximum file size of parse jobs to be configurable
  * Optimize CMakeBuildDirChooser::buildDirSettings()
  * [Sessions Runner] Use icon name
  * Don't eat the backspace event when no alt modifier is set
  * "Reparse Entire Project" action for the ProjectController
  * Introduce QuickOpenEmbeddedWidgetCombiner
  * Add 'back' to QuickOpenEmbeddedWidgetInterface
  * Update documentation: the keyboard shortcuts use ALT not SHIFT
  * Fix up/down keyboard navigation for 'Show documentation' links
  * Lock duchain in AbstractIncludeNavigationContext::html
  * Don't crash when background listing outlasts file manager list
    job
  * Don't crash when project is closed before it was fully opened
  * Make sure we use the same compiler settings as the project is
    by default
  * Debugger plugin fixes
  * CMakeBuildDirChooser: avoid calling deprecated
    KUrlRequester::setPath()
  * Flatpak+cmake: put the cmake build directories into
    .flatpak-builder
  * Allow KDEV_DEFAULT_INSTALL_PREFIX specify a default install
    prefix
  * Flatpak: Improve runtime title
  * Adapt indentation mode after a new project was opened
  * Flatpak: Fix listing runtimes
  * Properly cleanup FileManagerListJob when folder items are
    deleted (kde#260741)
  * Provide debugger name and pid when registering a debugger to
    DrKonqi
  * Support for indent-after-parens astyle option
  * Fix bug 389060 (Heaptrack analysis keeps firing
    /usr/bin/plasmoidviewer) (kde#389060)
  * Contextbrowser: Ability to show combined problems and decl
    tooltip
  * Properly display argument names of template functions
  * Show size and alignment information in tooltips for typedef or
    alias
  * GrepView: Extend default file extensions to search (kde#402207)
  * [clang-tidy] Fix context-menu crash for files not in a project
    (kde#401917)
  * Polish Flatpak integration
  * [clang-tidy] Disable/Block Run actions in projects without
    buildsystem manager
  * Add VcsAnnotationItemDelegate, for control of rendering and
    tooltip
  * Qmljs: Update qmljs from QtCreator v4.7.2
  * LoadedPluginsDialog: Fix initial size
  * Place cursor after opening brace for function implementation
  * Replace leading typed text when completing function
    implementation (kde#384710)
  * Fix crashes when document gets destroyed directly after load
  * Prevent QWebEngine from overriding signal handlers
  * Add missing break in QmlJs code completion
  * Create action to jump to the current execution line in debug
    mode (kde#361411)
  * Fix segfaults in OutputWidget (kde#398615)
  * Fix double delete bug in OutputWidget
  * Cleanup Perforce test case, and thereby its output a little
- Provide/Obsolete kdevelop5-plugin-clang-tidy, it is included now
- Cleanup spec file: remove conditionals for no longer supported
  distribution versions</changelog>
  <changelog author="wbauer@tmo.at" date="1565179200">- Also Provide/Obsolete kdevelop5-plugin-clang-tidy-lang to avoid
  update problems due to file conflicts</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565697600">- Update to 5.4.1
  * Fix crash: add missing Q_INTERFACES to OktetaDocument for
    IDocument. (kde#410820)
  * Shell: do not show bogus error about repo urls on DnD of normal files.
  * [Grepview] Use the correct icons.
  * Fix calculation of commit age in annotation side bar for &lt; 1 year.
  * Appdata: add &lt;launchable/&gt; entry.</changelog>
  <changelog author="wbauer@tmo.at" date="1567512000">- Update to 5.4.2
  * All debuggers: fix VariableCollection to unregister as
    texthinter provider (kde#411371)
  * Contextbrowser: register as texthint provider to existing views
    on creation
  * Fix crash on text hint being triggered after disabling code
    browser plugin (kde#411371)
  * Avoid possible dereference of an invalid iterator (kde#411323)
  * Kdevplatform/shell: fix outdated window title once project of
    document loaded
  * Kdevplatform/shell: work-around for Qt 5.9/macOS bug showing
    modified indicator
  * Kdevplatform/shell: restore document modified flag in
    mainwindow title
  * Kdevplatform/shell: do not repeat query &amp; differently for
    current document
  * Indicate appstream the ps desktop file isn't a separate
    application (kde#410687)
  * Clang: fix tooltip missing closing bracket with default
    argument calls
  * Include more hidden files in projectfilter plugin (CI, Lint
    configs...)</changelog>
  <changelog author="wbauer@tmo.at" date="1571745600">- Update to 5.4.3
  * ProblemNavigationContext: Fix incorrect link target for
    file:line links with declarations
  * ProjectManagerView: Make items with an empty icon have the same
    indent as items with a valid icon
  * Welcome page: fix version of QtQuick.XmlListModel import to
    match Qt 5.7 ff.
  * Welcome page: fix version of QtQuick.Layouts import to match
    Qt 5.7 ff.
  * [Grepview] Use the correct fallback icon for Collapse All
  * FileManagerListJob: use a semaphore for locking
  * Fix Infinite Recursion in DUChain
  * Cache the defines/includes for gcc-like compilers per language
    type
  * Only write defines file when needed
  * Don't set super long name on completely anon structs
  * Use type name as fallback ID for anon typedef'ed structs/unions
    etc. (kde#409041)
  * Fixed crash when filtering class list (kde#406931)
  * Gcclikecompiler: properly resolve include paths with symbolic
    links (kde#405221)</changelog>
  <changelog author="wbauer@tmo.at" date="1572955200">- Update to 5.4.4
  * Fix copyright date display in About KDevelop/KDevPlatform
    dialogs (kde#413390)
  * FindClang.cmake: also search LLVM version 9
  * Clang: Workaround for empty problem ranges at start of document</changelog>
  <changelog author="wbauer@tmo.at" date="1575288000">- Update to 5.4.5
  * Add missing forward declaration (qt5.14)
  * Fix compilation error with gcc 7.4.1, ambiguous overload
  * Remove bad assert
  * Remove duplicate fuzzy character "/"
  * Fix reformat for selected code
  * Qthelp: Unbreak support for zipped/tarred QCH files from KNS
  * Qthelp: adapt KNewStuff config to move from collect.kde.org to
    store.kde.org (kde#377183)</changelog>
  <changelog author="wbauer@tmo.at" date="1577016000">- Require exact grantlee5 version by kdevplatform with which it was
  built, the plugin location contains the version so the installed
  plugin won't be found by different versions</changelog>
  <changelog author="wbauer@tmo.at" date="1578398400">- Update to 5.4.6
  * Filetemplates: update addresses to web ones for GPLv2 &amp; LGPLv2
  * Filetemplates: fix wrong text of LGPLv2+ (KDE) (was GPLv2+
    (KDE) one) (kde#414978)
  * Shell: default to kdevelop icon for plugins in
    LoadedPluginsDialog list
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Make ForegroundLock::isLockedForThread() also consider the
    current thread being the main (Qt) thread, and thus add this
    check in more places
  * Clang: Fix a case of concurrent access to KTextEditor
  * Fix wrongly internally duplicated KHelpMenu instance
  * Only unload plugins after the DUChain shutdown to prevent
    infinite loop due to non-loaded factories for types</changelog>
  <changelog author="wbauer@tmo.at" date="1580731200">- Update to 5.5.0
  * Improved C++ language support:
    + Fix missing header guard warning for a standalone header
    being always present
    + Don't crash when signatures don't match in
    AdaptSignatureAssistant
    + Clazy: add configurable predefined checkset selections
    + Clang-tidy: add configurable predefined checkset selections
    + Don't get confused when encountering parse errors in default
    args
    + Fix ClangUtils::getDefaultArguments when encountering macros
    (kde#369546)
    + Skip clang-provided override items from code completion
    + Unbreak move-into-source for non-class functions
    + Lambda init captures are visited starting with clang 9.0.0
    + Try a bit harder to find types for look-ahead completion
  * Welcome page: remove background in active window when plugin is
    disabled
  * No longer install modeltest.h, not used externally and
    deprecated
  * Fix "invalid project name" hint not always showing
  * Use default scheme option of KColorSchemeManager if available
  * Read the global color scheme name from its file
  * Fix qmljs comment parsing
  * Fix the comment formatting for some Doxygen variants
  * Qmakebuilder: remove unused kcfg files
  * Fix reformat for long strings
  * Introduce shell-embedded message area, to avoid dialog windows
  * Clazy, clang-tidy: share code via new private
    KDevCompileAnalyzerCommon
  * Make tar archives reproducible by setting Pax headers
  * Kdevplatform: remove About data feature
  * Support for rebasing
  * Add a setting to disable the close buttons on tabs
  * CMake: Show project name in showConfigureErrorMessage
  * TemplatePreview: Enable word-wrap for messagebox and Lines
    Policy Label
  * Filetemplates: load and show tooltip for custom options
  * Pass environment variables from process environment and set up
    with flatpak environment
  * Remove usage of columns argument in arch detection since old
    LTS systems may not have that flag
  * Pass the android toolchain file path to CMake as a local file
    path not as a URI
  * Formatter: Hide KTextEditor minimap for the formatter preview
  * Shell: use KAboutPluginDialog in LoadedPluginsDialog
  * Mention all fetch project sources in the documentation
    (kde#392550)
  * Script launcher: add env profile configure dialog button to
    config UI (kde#410914)
  * Cmake: FindClang: Detect llvm-project.git checkout</changelog>
  <changelog author="Michel Normand &lt;normand@linux.vnet.ibm.com&gt;" date="1582804800">- Add _constraints disk 4GB PowerPC to avoid build failure ppc64</changelog>
  <changelog author="wbauer@tmo.at" date="1588680000">- Update to 5.5.1
  * Clang-tidy: fix storing of custom checksets per project
  * Clazy: fix storing of custom checksets per project
  * Kdev_format_source: eliminate a global QString constant
  * Reduce the scope of local variables in KDevFormatFile::read()
  * Move a format_sources comment from unsupported position
  * Kdev_format_source: don't ignore the root directory
  * Kdev_format_source: fix typos in usage/error messages
  * Work around QDir::match() behavior change in Qt 5.12.0
    (kde#409222, kde#417628)
  * Add failing kdev_format_source and grepview tests
  * Handle errors better in KDevFormatFile::executeCommand()
  * Grepview: search in hidden files and directories
  * FindClang.cmake: Add 10 to the allowed versions
  * Disable CSS images workaround for Qt WebEngine build
  * Disable extra context menu in Documentation tool view
  * Fix flickering when loading documentation
  * [Standard Documentation View] Set the correct mime type for job
    replies
  * Breakpoint icon: add 32 px sized breakpoint icon (also pixel-
    align SVG)
  * IADM: take C++ standard from build system manager into account
    (kde#417903)
  * Clear selection when updating cursor position (kde#415644)
  * Don't crash when we fail to find a screen for the active
    tooltip (kde#417151)
  * Kdev-clang: don't skip unexposed declarations from different
    files (kde#402066)</changelog>
  <changelog author="wbauer@tmo.at" date="1591099200">- Update to 5.5.2
  * Remove plugin "kde repo provider" due to defunct service
  * Fix extra margins around config pages</changelog>
  <changelog author="wbauer@tmo.at" date="1610193600">- Add Fix-version-check-for-GDB-10.x.patch to make debugging work
  with gdb-10.x (kde#428688)</changelog>
</package>
<package pkgid="9ee6ff3185c331ab125203d9a5f7bf6b7f18fc7a01460b10f11033b0f8e879d2" name="kdump-debuginfo" arch="i586">
  <version epoch="0" ver="0.9.0" rel="lp152.7.3.1"/>
  <changelog author="ptesarik@suse.com" date="1553083200">- kdump-recover-from-missing-CRASHTIME.patch: Recover from missing
  CRASHTIME= in VMCOREINFO (bsc#1112387).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083201">- kdump-fix-multipath-user_friendly_names.patch: Fix multipath
  configuration with user_friendly_names and/or aliases
  (bsc#1111207, LTC#171953, bsc#1125218, LTC#175465).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083202">- Use %license instead of %doc (bsc#1082318, bsc#1129947).</changelog>
  <changelog author="ptesarik@suse.com" date="1555416000">- kdump-Add-skip_balance-option-to-BTRFS-mounts.patch: Add
  skip_balance option to BTRFS mounts (bsc#1108255).</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1556280000">- kdump-kdumprd-Look-for-boot-image-and-boot-Image.patch: kdumprd:
  Look for /boot/image-* and /boot/Image-* (bsc#1132799).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573560000">- add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633600">- kdump-preserve-white-space.patch: Preserve white space when
  removing kernel command line options (bsc#1117652).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633601">- kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch:
  Clean up the use of current vs. boot network interface names
  (bsc#1094444, bsc#1116463, bsc#1141064).
- kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a
  custom namespace for physical NICs (bsc#1094444, bsc#1116463,
  bsc#1141064).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892800">- kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related
  mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011).
- kdump-clean-up-kdump-mount-points.patch: Make sure that kdump
  mount points are cleaned up (bsc#1102252, bsc#1125011).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892801">- kdump-nss-modules.patch: Improve the handling of NSS
  (bsc#1021846).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238400">- kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force"
  option to KDUMP_NETCONFIG (bsc#1108919).
- kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add
  fence_kdump_send when fence-agents installed (bsc#1108919).
- kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of
  fence_kdump_send and remove the unnecessary PRESCRIPT check
  (bsc#1108919).
- kdump-Document-fence_kdump_send.patch: Document kdump behaviour
  for fence_kdump_send (bsc#1108919).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238401">- kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not
  reload on CPU hot removal (bsc#1133407, LTC#176111).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584000">- kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and
  device-mapper aliases over kernel device names (bsc#1101149,
  LTC#168532).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584001">- kdump-calibrate-Update-values.patch: calibrate: Update values
  (bsc#1130529).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- Use BuildRequire(udev) instead of udev: allow OBS to shortcut
  through the -mini flavors.
- Use systemd_ordering instead of systemd_requires: systemd is not
  a strict requirement, but if the system is going to use it, we
  want it to beinstalled prior to kdump.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1580126400">- kdump-activate-udev-rules-late-during-boot.patch: Activate
  kdump udev rules late during boot (bsc#1154837)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585569600">- kdump-make-sure-that-the-udev-runtime-directory-exists.patch:
  Make sure that the udev runtime directory exists (bsc#1164713).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1605873600">- kdump-do-not-add-rd.neednet.patch: Do not add 'rd.neednet=1' to
  dracut command line (bsc#1177196).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1606132800">- kdump-remove-console-hvc0-from-commandline.patch: remove
  console=hvc0 from commandline (bsc#1173914).
- kdump-set-serial-console-from-Xen-cmdline.patch: set serial
  console from Xen cmdline (bsc#1173914).</changelog>
</package>
<package pkgid="1098832cf68be19b9694612ca37d7409c8ad6c73a3a1961871ac8f3d08d2d841" name="kdump-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="lp152.7.3.1"/>
  <changelog author="ptesarik@suse.com" date="1553083200">- kdump-recover-from-missing-CRASHTIME.patch: Recover from missing
  CRASHTIME= in VMCOREINFO (bsc#1112387).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083201">- kdump-fix-multipath-user_friendly_names.patch: Fix multipath
  configuration with user_friendly_names and/or aliases
  (bsc#1111207, LTC#171953, bsc#1125218, LTC#175465).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083202">- Use %license instead of %doc (bsc#1082318, bsc#1129947).</changelog>
  <changelog author="ptesarik@suse.com" date="1555416000">- kdump-Add-skip_balance-option-to-BTRFS-mounts.patch: Add
  skip_balance option to BTRFS mounts (bsc#1108255).</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1556280000">- kdump-kdumprd-Look-for-boot-image-and-boot-Image.patch: kdumprd:
  Look for /boot/image-* and /boot/Image-* (bsc#1132799).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573560000">- add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633600">- kdump-preserve-white-space.patch: Preserve white space when
  removing kernel command line options (bsc#1117652).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633601">- kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch:
  Clean up the use of current vs. boot network interface names
  (bsc#1094444, bsc#1116463, bsc#1141064).
- kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a
  custom namespace for physical NICs (bsc#1094444, bsc#1116463,
  bsc#1141064).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892800">- kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related
  mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011).
- kdump-clean-up-kdump-mount-points.patch: Make sure that kdump
  mount points are cleaned up (bsc#1102252, bsc#1125011).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892801">- kdump-nss-modules.patch: Improve the handling of NSS
  (bsc#1021846).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238400">- kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force"
  option to KDUMP_NETCONFIG (bsc#1108919).
- kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add
  fence_kdump_send when fence-agents installed (bsc#1108919).
- kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of
  fence_kdump_send and remove the unnecessary PRESCRIPT check
  (bsc#1108919).
- kdump-Document-fence_kdump_send.patch: Document kdump behaviour
  for fence_kdump_send (bsc#1108919).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238401">- kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not
  reload on CPU hot removal (bsc#1133407, LTC#176111).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584000">- kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and
  device-mapper aliases over kernel device names (bsc#1101149,
  LTC#168532).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584001">- kdump-calibrate-Update-values.patch: calibrate: Update values
  (bsc#1130529).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- Use BuildRequire(udev) instead of udev: allow OBS to shortcut
  through the -mini flavors.
- Use systemd_ordering instead of systemd_requires: systemd is not
  a strict requirement, but if the system is going to use it, we
  want it to beinstalled prior to kdump.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1580126400">- kdump-activate-udev-rules-late-during-boot.patch: Activate
  kdump udev rules late during boot (bsc#1154837)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585569600">- kdump-make-sure-that-the-udev-runtime-directory-exists.patch:
  Make sure that the udev runtime directory exists (bsc#1164713).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1605873600">- kdump-do-not-add-rd.neednet.patch: Do not add 'rd.neednet=1' to
  dracut command line (bsc#1177196).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1606132800">- kdump-remove-console-hvc0-from-commandline.patch: remove
  console=hvc0 from commandline (bsc#1173914).
- kdump-set-serial-console-from-Xen-cmdline.patch: set serial
  console from Xen cmdline (bsc#1173914).</changelog>
</package>
<package pkgid="d19015c2549a81c05fd70e958beea2f3b48d8ea47da6fb850907a9761a69d033" name="kdump-debugsource" arch="i586">
  <version epoch="0" ver="0.9.0" rel="lp152.7.3.1"/>
  <changelog author="ptesarik@suse.com" date="1553083200">- kdump-recover-from-missing-CRASHTIME.patch: Recover from missing
  CRASHTIME= in VMCOREINFO (bsc#1112387).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083201">- kdump-fix-multipath-user_friendly_names.patch: Fix multipath
  configuration with user_friendly_names and/or aliases
  (bsc#1111207, LTC#171953, bsc#1125218, LTC#175465).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083202">- Use %license instead of %doc (bsc#1082318, bsc#1129947).</changelog>
  <changelog author="ptesarik@suse.com" date="1555416000">- kdump-Add-skip_balance-option-to-BTRFS-mounts.patch: Add
  skip_balance option to BTRFS mounts (bsc#1108255).</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1556280000">- kdump-kdumprd-Look-for-boot-image-and-boot-Image.patch: kdumprd:
  Look for /boot/image-* and /boot/Image-* (bsc#1132799).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573560000">- add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633600">- kdump-preserve-white-space.patch: Preserve white space when
  removing kernel command line options (bsc#1117652).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633601">- kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch:
  Clean up the use of current vs. boot network interface names
  (bsc#1094444, bsc#1116463, bsc#1141064).
- kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a
  custom namespace for physical NICs (bsc#1094444, bsc#1116463,
  bsc#1141064).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892800">- kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related
  mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011).
- kdump-clean-up-kdump-mount-points.patch: Make sure that kdump
  mount points are cleaned up (bsc#1102252, bsc#1125011).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892801">- kdump-nss-modules.patch: Improve the handling of NSS
  (bsc#1021846).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238400">- kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force"
  option to KDUMP_NETCONFIG (bsc#1108919).
- kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add
  fence_kdump_send when fence-agents installed (bsc#1108919).
- kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of
  fence_kdump_send and remove the unnecessary PRESCRIPT check
  (bsc#1108919).
- kdump-Document-fence_kdump_send.patch: Document kdump behaviour
  for fence_kdump_send (bsc#1108919).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238401">- kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not
  reload on CPU hot removal (bsc#1133407, LTC#176111).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584000">- kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and
  device-mapper aliases over kernel device names (bsc#1101149,
  LTC#168532).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584001">- kdump-calibrate-Update-values.patch: calibrate: Update values
  (bsc#1130529).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- Use BuildRequire(udev) instead of udev: allow OBS to shortcut
  through the -mini flavors.
- Use systemd_ordering instead of systemd_requires: systemd is not
  a strict requirement, but if the system is going to use it, we
  want it to beinstalled prior to kdump.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1580126400">- kdump-activate-udev-rules-late-during-boot.patch: Activate
  kdump udev rules late during boot (bsc#1154837)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585569600">- kdump-make-sure-that-the-udev-runtime-directory-exists.patch:
  Make sure that the udev runtime directory exists (bsc#1164713).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1605873600">- kdump-do-not-add-rd.neednet.patch: Do not add 'rd.neednet=1' to
  dracut command line (bsc#1177196).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1606132800">- kdump-remove-console-hvc0-from-commandline.patch: remove
  console=hvc0 from commandline (bsc#1173914).
- kdump-set-serial-console-from-Xen-cmdline.patch: set serial
  console from Xen cmdline (bsc#1173914).</changelog>
</package>
<package pkgid="9f82d8c5172b5cb829f61ace3cb16ff07d1ae03d6750c108db9f7b30126f2d82" name="kdump-debugsource" arch="x86_64">
  <version epoch="0" ver="0.9.0" rel="lp152.7.3.1"/>
  <changelog author="ptesarik@suse.com" date="1553083200">- kdump-recover-from-missing-CRASHTIME.patch: Recover from missing
  CRASHTIME= in VMCOREINFO (bsc#1112387).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083201">- kdump-fix-multipath-user_friendly_names.patch: Fix multipath
  configuration with user_friendly_names and/or aliases
  (bsc#1111207, LTC#171953, bsc#1125218, LTC#175465).</changelog>
  <changelog author="ptesarik@suse.com" date="1553083202">- Use %license instead of %doc (bsc#1082318, bsc#1129947).</changelog>
  <changelog author="ptesarik@suse.com" date="1555416000">- kdump-Add-skip_balance-option-to-BTRFS-mounts.patch: Add
  skip_balance option to BTRFS mounts (bsc#1108255).</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1556280000">- kdump-kdumprd-Look-for-boot-image-and-boot-Image.patch: kdumprd:
  Look for /boot/image-* and /boot/Image-* (bsc#1132799).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="Jiri Slaby &lt;jslaby@suse.com&gt;" date="1573560000">- add kdump-savedump-search-also-for-vmlinux.xz.patch (bnc#1155921)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633600">- kdump-preserve-white-space.patch: Preserve white space when
  removing kernel command line options (bsc#1117652).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575633601">- kdump-Clean-up-the-use-of-current-vs-boot-network-iface.patch:
  Clean up the use of current vs. boot network interface names
  (bsc#1094444, bsc#1116463, bsc#1141064).
- kdump-Use-a-custom-namespace-for-physical-NICs.patch: Use a
  custom namespace for physical NICs (bsc#1094444, bsc#1116463,
  bsc#1141064).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892800">- kdump-skip-mounts-if-no-proc-vmcore.patch: Skip kdump-related
  mounts if there is no /proc/vmcore (bsc#1102252, bsc#1125011).
- kdump-clean-up-kdump-mount-points.patch: Make sure that kdump
  mount points are cleaned up (bsc#1102252, bsc#1125011).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1575892801">- kdump-nss-modules.patch: Improve the handling of NSS
  (bsc#1021846).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238400">- kdump-Add-force-option-to-KDUMP_NETCONFIG.patch: Add ":force"
  option to KDUMP_NETCONFIG (bsc#1108919).
- kdump-Add-fence_kdump_send-when-fence-agents-installed.patch: Add
  fence_kdump_send when fence-agents installed (bsc#1108919).
- kdump-FENCE_KDUMP_SEND-variable.patch: Use var for path of
  fence_kdump_send and remove the unnecessary PRESCRIPT check
  (bsc#1108919).
- kdump-Document-fence_kdump_send.patch: Document kdump behaviour
  for fence_kdump_send (bsc#1108919).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576238401">- kdump-powerpc-no-reload-on-CPU-removal.patch: powerpc: Do not
  reload on CPU hot removal (bsc#1133407, LTC#176111).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584000">- kdump-prefer-by-path-and-device-mapper.patch: Prefer by-path and
  device-mapper aliases over kernel device names (bsc#1101149,
  LTC#168532).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1576584001">- kdump-calibrate-Update-values.patch: calibrate: Update values
  (bsc#1130529).</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1579867200">- Use BuildRequire(udev) instead of udev: allow OBS to shortcut
  through the -mini flavors.
- Use systemd_ordering instead of systemd_requires: systemd is not
  a strict requirement, but if the system is going to use it, we
  want it to beinstalled prior to kdump.</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1580126400">- kdump-activate-udev-rules-late-during-boot.patch: Activate
  kdump udev rules late during boot (bsc#1154837)</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585569600">- kdump-make-sure-that-the-udev-runtime-directory-exists.patch:
  Make sure that the udev runtime directory exists (bsc#1164713).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1605873600">- kdump-do-not-add-rd.neednet.patch: Do not add 'rd.neednet=1' to
  dracut command line (bsc#1177196).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1606132800">- kdump-remove-console-hvc0-from-commandline.patch: remove
  console=hvc0 from commandline (bsc#1173914).
- kdump-set-serial-console-from-Xen-cmdline.patch: set serial
  console from Xen cmdline (bsc#1173914).</changelog>
</package>
<package pkgid="6946c940b7935d701336cf6a4bbdd984d3c89615a40579048720eb6ed353aade" name="keepassxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="lp152.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
</package>
<package pkgid="af0723c2d8dfe460d9b7fe3fd6ac0c7bc2025572d5fd22e410132f18f063eeea" name="keepassxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="lp152.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
</package>
<package pkgid="99eaee0822377c7ab6bb2164d2e7a61b30a872652d19998e755f0bf58a528c58" name="keepassxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp152.3.9.1"/>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
</package>
<package pkgid="7dfef12d2cf61f436e88ca9439a43aaa1680e5d007e8df46cc2aea1d1529497f" name="keepassxc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="lp152.3.12.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
</package>
<package pkgid="46a5ce042a37ba3e477670f8f857f2b6afb065074b81ef59fc383af9984c33b6" name="keepassxc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.0" rel="lp152.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1525867200">- update to 2.3.2
  - Enable high entropy ASLR on Windows [#1747]
  - Enhance favicon fetching [#1786]
  - Fix crash on Windows due to Auto-Type [#1691]
  - Fix dark tray icon changing all icons [#1680]
  - Fix --pw-stdin not using getPassword function [#1686]
  - Fix placeholders being resolved in notes [#1907]
  - Enable auto-type start delay to be configurable [#1908]
  - Browser: Fix native messaging reply size [#1719]
  - Browser: Increase maximum buffer size [#1720]
  - Browser: Enhance usability and functionality
    [#1810, #1822, #1830, #1884, #1906]
  - SSH Agent: Parse aes-256-cbc/ctr keys [#1682]
  - SSH Agent: Enhance usability and functionality
    [#1677, #1679, #1681, #1787]</changelog>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
</package>
<package pkgid="e50b9ae75ba25eb09f149584fa8f41b2ef99998d7d901f37ffe1814ffd8f7e62" name="keepassxc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="lp152.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1526299200">- update to 2.3.3
  - Fix crash when browser integration is enabled [#1923]</changelog>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
</package>
<package pkgid="40325b1dc9981a25da7db89d98286ff9a2a8274475024c169ff7002a32c930ac" name="keepassxc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="lp152.3.9.1"/>
  <changelog author="mpluskal@suse.com" date="1530100800">- Fix building with Qt 5.11:
  * keepassxc-qt_includes.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535112000">- update to 2.3.4
  - Show all URL schemes in entry view [#1768]
  - Disable merge when database is locked [#1975]
  - Fix intermittent crashes with favorite icon downloads [#1980]
  - Provide potential crash warning to Qt 5.5.x users [#2211]
  - Disable apply button when creating new entry/group to prevent
    data loss [#2204]
  - Multiple SSH Agent fixes [#1981, #2117]
  - Multiple Browser Integration enhancements [#1993, #2003, #2055,
    [#2116], #2159, #2174, #2185]
  - Fix browser proxy application not closing properly [#2142]
  - Add real names and Patreon supporters to about dialog [#2214]
  - Add settings button to toolbar, Donate button, and Report a Bug
    button to help menu [#2214]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
</package>
<package pkgid="21bf7951fb1baca5ba9f6623aa96729b24c6b039fc667e232568730deb34e3b9" name="keepassxc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="lp152.3.12.1"/>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1535544000">- add klipper-hint.patch:
  Prevent Klipper from storing secrets in clipboard history (#1969)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1553083200">- update to 2.4.0
  - New Database Wizard [#1952]
  - Advanced Search [#1797]
  - Automatic update checker [#2648]
  - KeeShare database synchronization [#2109, #1992, #2738, #2742,
    [#2746], #2739]
  - Improve favicon fetching; transition to Duck-Duck-Go [#2795,
    [#2011], #2439]
  - Remove KeePassHttp support [#1752]
  - CLI: output info to stderr for easier scripting [#2558]
  - CLI: Add --quiet option [#2507]
  - CLI: Add create command [#2540]
  - CLI: Add recursive listing of entries [#2345]
  - CLI: Fix stdin/stdout encoding on Windows [#2425]
  - SSH Agent: Support OpenSSH for Windows [#1994]
  - macOS: TouchID Quick Unlock [#1851]
  - macOS: Multiple improvements; include CLI in DMG [#2165, #2331,
    [#2583]]
  - Linux: Prevent Klipper from storing secrets in clipboard
    [#1969]
  - Linux: Use polling based file watching for NFS [#2171]
  - Linux: Enable use of browser plugin in Snap build [#2802]
  - TOTP QR Code Generator [#1167]
  - High-DPI Scaling for 4k screens [#2404]
  - Make keyboard shortcuts more consistent [#2431]
  - Warn user if deleting referenced entries [#1744]
  - Allow toolbar to be hidden and repositioned [#1819, #2357]
  - Increase max allowed database timeout to 12 hours [#2173]
  - Password generator uses existing password length by default
    [#2318]
  - Improve alert message box button labels [#2376]
  - Show message when a database merge makes no changes [#2551]
  - Browser Integration Enhancements [#1497, #2253, #1904, #2232,
    [#1850], #2218, #2391, #2396, #2542, #2622, #2637, #2790]
  - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410,
    [#2419], #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731]
- drop patches: keepassxc-qt_includes.patch  klipper-hint.patch
- add support to build for more distros
  - track debian files as sources
  - add macros for fedora
- use GIT_HEAD_OVERRIDE to pass the git rev to the build
- enable keeshare secure (new BR: quazip Qt5)
- add BR for the QR code feature:
  pkgconfig(libqrencode)
  pkgconfig(Qt5Svg)
- workaround for boo#1117355
  add BR/R for libgcrypt20-hmac
- BR: libcurl-devel
- enable dbus support
- enable ssh agent and browser support</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1555070400">- update to 2.4.1
  - Fix database deletion when using unsafe saves to a different
    file system [#2889]
  - Fix opening databases with legacy key files that contain '/'
    [#2872]
  - Fix opening database files from the command line [#2919]
  - Fix crash when editing master key [#2836]
  - Fix multiple issues with apply button behavior [#2947]
  - Fix issues on application startup (tab order, --pw-stdin, etc.)
    [#2830]
  - Fix building without WITH_XC_KEESHARE
  - Fix reference entry coloring on macOS dark mode [#2984]
  - Hide window when performing entry auto-type on macOS [#2969]
  - Improve UX of update checker; reduce checks to every 7 days
    [#2968]
  - KeeShare improvements [#2946, #2978, #2824]
  - Re-enable Ctrl+C to copy password from search box [#2947]
  - Add KeePassXC-Browser integration for Brave browser [#2933]
  - SSH Agent: Re-Add keys on database unlock [#2982]
  - SSH Agent: Only remove keys on app exit if they are removed on
    lock [#2985]
  - CLI: Add --no-password option [#2708]
  - CLI: Improve database extraction to XML [#2698]
  - CLI: Don't call mandb on build [#2774]
  - CLI: Add debug info [#2714]
  - Improve support for Snap theming [#2832]
  - Add support for building on Haiku OS [#2859]
  - Ctrl+PgDn now goes to the next tab and Ctrl+PgUp to the
    previous
  - Fix compiling on GCC 5 / Xenial [#2990]
  - Add .gitrev output to tarball for third-party builds [#2970]
  - Add WITH_XC_UPDATECHECK compile flag to toggle the update
    checker [#2968]
- disable update check
- no longer use our gitrev hack in favor for upstream solution</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1559563200">- update to 2.4.2
  - Improve resilience against memory attacks - overwrite memory
    before free [#3020]
  - Prevent infinite save loop when location is unavailable [#3026]
  - Attempt to fix quitting application when shutdown or logout
    issued [#3199]
  - Support merging database custom data [#3002]
  - Fix opening URL's with non-http schemes [#3153]
  - Fix data loss due to not reading all database attachments if
    duplicates exist [#3180]
  - Fix entry context menu disabling when using keyboard navigation
    [#3199]
  - Fix behaviors when canceling an entry edit [#3199]
  - Fix processing of tray icon click and doubleclick [#3112]
  - Update group in preview widget when focused [#3199]
  - Prefer DuckDuckGo service over direct icon download (increases
    resolution) [#2996]
  - Remove apply button in application settings [#3019]
  - Use winqtdeploy on Windows to correct deployment issues [#3025]
  - Don't mark entry edit as modified when attribute selection
    changes [#3041]
  - Use console code page CP_UTF8 on Windows if supported [#3050]
  - Snap: Fix locking database with session lock [#3046]
  - Snap: Fix theming across Linux distributions [#3057]
  - Snap: Use SNAP_USER_COMMON and SNAP_USER_DATA directories
    [#3131]
  - KeeShare: Automatically enable WITH_XC_KEESHARE_SECURE if
    quazip is found [#3088]
  - macOS: Fix toolbar text when in dark mode [#2998]
  - macOS: Lock database on switching user [#3097]
  - macOS: Fix global Auto-Type when the database is locked [#3138]
  - Browser: Close popups when database is locked [#3093]
  - Browser: Add tests [#3016]
  - Browser: Don't create default group if custom group is enabled
    [#3127]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1560340800">- update to 2.4.3
  - Fix library loading issues in the Snap and macOS releases
    [#3247]
  - Fix various keyboard navigation issues [#3248]
  - Fix main window toggling regression when clicking the tray icon
    on KDE [#3258]
  - Add documentation for keyboard shortcuts to source code
    distribution [#3215]</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567425600">- Disable lto for keepassxc. It causes a build error.
- Provide/Obsolete keepassx. Keepassx still depends on Qt4 and shall be
  dropped shortly. (boo#1148401)</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1572091200">- update to 2.5.0
  https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.0</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1575892800">- Update to version 2.5.1:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.1</changelog>
  <changelog author="droidmonkey &lt;support@dmapps.us&gt;" date="1578139200">- Update to version 2.5.2:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.2</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1579435200">- Update to version 2.5.3:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.3</changelog>
  <changelog author="Michal Suchanek &lt;msuchanek@suse.com&gt;" date="1582891200">- Clicking the tray icon momentarily shows and immediately hides window. Make
  it stick (boo#1165293).
- Fix window not minimizing to tray.
  + add keepassxc-Fix-window-hiding-after-shown.patch</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1586433600">- Update to version 2.5.4:
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.5.4</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1589198400">- Drop build/requirement on libgcrypt20-hmac boo#1171438</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123200">- Update to version 2.6.0:
  * https://keepassxc.org/blog/2020-07-07-2.6.0-released/
  * https://github.com/keepassxreboot/keepassxc/releases/tag/2.6.0
- drop keepassxc-Fix-window-hiding-after-shown.patch:
  included in update</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594123201">- add BR for asciidoctor</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1594209600">- add _constraints with 6GB to fix build on ppc64 hopefully</changelog>
  <changelog author="Carsten Ziepke &lt;kieltux@gmail.com&gt;" date="1598788800">- Update to version 2.6.1:
  - Add menu entries for auto-typing only username or only
    password [#4891]
  - Browser: Add command for retrieving current TOTP [#5278]
  - Improve man pages [#5010]
  - Linux: Support Xfce screen lock signals [#4971]
  - Linux: Add OARS metadata to AppStream markup [#5031]
  - SSH Agent: Substitute tilde with %USERPROFILE% on Windows
    [#5116]
  - Improve password generator UI and UX [#5129]
  - Do not prompt to restart if switching the theme back and
    forth [#5084]
  - Change actions for F1, F2, and F3 keys [#5082]
  - Skip referenced passwords in health check report [#5056]
  - Check system-wide Qt translations directory for downstream
  - translations packaging [#5064]
  - macOS: Change password visibility toggle shortcut to Ctrl+H to
  - avoid conflict with system shortcut [#5114]
  - Browser: Only display domain name in browser access confirm
    dialog to avoid overly wide window sizes [#5214]
  - Fix clipboard not being cleared when database is locked while
    timeout is still active [#5184]
  - Fix list of previous databases not being cleared in some
    cases [#5123]
  - Fix saving of non-data changes on database lock [#5210]
  - Fix search results banner theming [#5197]
  - Don?t enforce theme palette in Classic theme mode and add hover
    effect for buttons [#5122, #5267]
  - Fix label clipping in settings on high-DPI screens [#5227]
  - Fix excessive memory usage by icons on systems with high-DPI
    screens [#5266]
  - Fix crash if number of TOTP digits exceeds ten [#5106]
  - Fix slot detection when first YubiKey is configured on the second
    slot [#5004]
  - Prevent crash if focus widget gets deleted during saving [#5005]
  - Always show buttons for opening or saving attachments [#4956]
  - Update link to Auto-Type help [#5228]
  - Fix build errors with Ninja [#5121]
  - CLI: Fix db-info command wrongly labelled as db-show in
    usage listing [#5140]
  - Windows: Use Classic theme by default if high-contrast mode
    is on [#5191]
  - Linux: Add workaround for qt5ct bug, causing icons not to show
    up [#5011]
  - Linux: Correct high-DPI display by not allowing fractional
    scaling [#5185]
  - Browser: Consider subdomain and path when requesting only
    ?best-matching credentials? [#4832]
  - SSH Agent: Always forget all keys on lock [#5115]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1603368000">- Update to version 2.6.2
  - Added
  - Add option to keep window always on top to view menu [#5542]
  - Move show/hide usernames and passwords to view menu [#5542]
  - Add command line options and environment variables for
    changing the config locations [#5452]
  - Include TOTP settings in CSV import/export and add support
    for ISO datetimes [#5346]
  - Changed
  - Mask sensitive information in command execution confirmation
    prompt [#5542]
  - SSH Agent: Avoid shortcut conflict on macOS by changing "Add
    key" to Ctrl+H on all platforms [#5484]
  - Fixed
  - Prevent data loss with drag and drop between databases
    [#5536]
  - Fix crash when toggling Capslock rapidly [#5545]
  - Don't mark URL references as invalid URL [#5380]
  - Reset entry preview after search [#5483]
  - Set Qt::Dialog flag on database open dialog [#5356]
  - Fix sorting of database report columns [#5426]
  - Fix IfDevice matching logic [#5344]
  - Fix layout issues and a stray scrollbar appearing on top of
    the entry edit screen [#5424]
  - Fix tabbing into the notes field [#5424]
  - Fix password generator ignoring settings on load [#5340]
  - Restore natural entry sort order on application load [#5438]
  - Fix paperclip and TOTP columns not saving state [#5327]
  - Enforce fixed password font in entry preview [#5454]
  - Add scrollbar when new database wizard exceeds screen size
    [#5560]
  - Do not mark database as modified when viewing Auto-Type
    associations [#5542]
  - CLI: Fix two heap-use-after-free crashes [#5368, #5470]
  - Browser: Fix key exchange not working with multiple
    simultaneous users on Windows [#5485]
  - Browser: Fix entry retrieval when "only best matching" is
    enabled [#5316]
  - Browser: Ignore recycle bin on KeePassHTTP migration [#5481]
  - KeeShare: Fix import crash [#5542]
  - macOS: Fix toolbar theming and breadcrumb display issues
    [#5482]
  - macOS: Fix file dialog randomly closing [#5479]
  - macOS: Fix being unable to select OPVault files for import
    [#5341]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1610452800">- Update to version 2.6.3
  - Added
  - Support Argon2id KDF [#5778]
  - Support XMLv2 key files [#5798]
  - Changed
  - Improve CSV Import/Export, include time fields and TOTP
    [#5346]
  - Support empty area dragging of the application window [#5860]
  - Display default Auto-Type sequence in preview pane [#5654]
  - Remove strict length limit on generated passwords [#5748]
  - Hide key file path by default when unlocking database [#5779]
  - Document browser extension use with Edge in managed mode
    [#5692]
  - Windows: Prevent clipboard history and cloud sync [#5853]
  - macOS: Update the application icon to Big Sur styling [#5851]
  - Fixed
  - Re-select previously selected entry on database unlock
    [#5559]
  - Properly save special character choice in password generator
    [#5610]
  - Fix crash in browser integration with multiple similar
    entries [#5653]
  - Remove offset on username field in classic theme [#5788]
  - Ensure entry history is copied when drag/dropping entries and
    groups [#5817]
  - Close modal dialogs when database is locked [#5820]
  - Prevent crash when KeeShare modifies an entry that is
    currently being edited [#5827]
  - Improve preview of entry attributes [#5834]
  - Always activate/focus database open dialog preventing mistype
    [#5878]
  - Reports: fix calculation of average password length [#5862]
  - Linux: Delay startup on login to correct tray icon issues
    [#5724]</changelog>
  <changelog author="Marcus Rueckert &lt;mrueckert@suse.de&gt;" date="1612267200">- Update to 2.6.4
  - Added
  - Automatically adapt to light/dark system theme changes
    (Windows/macOS only) [#6034]
  - Changed
  - Show window title as tooltip on system tray [#5948]
  - Compress Snap release as LZO for faster initial startup
    [#5877]
  - Password generator: Set maximum selectable password length to
    999 [#5937]
  - Fixed
  - Fix crash on app close when using SSH agent [#5935]
  - Fix KDF selection showing wrong item when using Argon2id
    [#5923]
  - Automatically close About dialog on database lock if it is
    still open [#5947]
  - Linux: Fix automatic launch at system startup with AppImages
    [#5901]
  - Linux: Fix click-to-move on empty area activating when using
    menus [#5971]
  - Linux: Try multiple times to show tray icon if tray is not
    ready yet [#5948]
  - macOS: Fix KeePassXC blocking clean shutdown [#6002]</changelog>
</package>
<package pkgid="a55583eaa611a0cb02b6161329d99a3a80cb8dd8f189908fa66ed56892e9bd68" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="ed060ca59c1d023e5d5b7e8579d79d320d2e33bda77365c66e6c949d4f553824" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="1c1a4506d56f37a63e5369a555c2fdf11c05fc048694eebfed940d6e7d3643d3" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="e411c450360ffbb53efaff78695b17a87021d94be9bb95e6f65a8e3f54130f9c" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="e86809e79aaf58d3026f7d805a8dc3c4de08d515f058f2b753aec2901e278796" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="9e2c5a0608b6f022065be071f127c65d9f5a2205feae65b57115291de21526bf" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="b31f1bfbd86a4566883fdf7fc9f27f352f2d2e6625e33393bd532b2e384520ae" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="d1edef9f5ecd3d0581e1ed3b20748e32dfb291ee1926fee6dd4fec928fed9da8" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="036d6735676963af5feaefd13cd47215215b588d3b13482c254c8d338030fe9e" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="7d428aeadd71f3823a6cfe9b651dcaa4ca56606dff11ddfb8081a59b1cd004f6" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="8ebf30bdddaf77367849fec8aa2259d4c0318ad542d59126407379ae2f08eacc" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="ecbc2882e29a6a824d7c8681e296be7a8e76490a145f980725e38b219df63587" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="8f96faa54bc3310854c38411167262642d63064cc9b80dc8e60ff3a387bb7d6a" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="50e491703ed24a7ce84a4f6a6823988a6ff9141e2a875ec377f568872500e0c9" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="3969e4f904d3a81f10c80f44198db8aff23d03a5af502f8f179347cdbbe1865b" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="b298bc0b24dee01a26567162686b524c55f27aa5a6557a8e2359750d204d59df" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="4f51c1fe7b515c1c4ddbfa96cda8994cabad28b96e34734b823f1f9d09847249" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="9f6979d3bda24c13bd3b664055b6b018a9a79431b64365d6014093f0f7995ef2" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="c29754fd587b04cf4e1b9adda6332ced042fec4e38e8e57dcfbc1e35722e4a31" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="1bf6712f4a60af34f13a5932230130bb9a3f84815081758e44b64390d8a8b83a" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="a3a0484af396d3ed766425a5848b8a48d5d543dc92dc63183bd4d589bd4f9a32" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="2482d3ba66dee8483edff93b30aee91a98818ade99dd382e587289350547677a" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="76329ef3d1190b187d26fb72876ab229cc5b193d3ba406300c760cd87bc1e1cb" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="3901337722b3db6b098e0924f1755ba0cd71858f3eec6334c2cd597eb10fe889" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="571661fc6496fc426d888e50491c466c994e60bee556d77ece51fdd706d525b1" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="44df1d4e74db5038bf3c5c3550b7191dd256cb126fdc81d90fbe89ac36ad55a2" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="9fc868f401e34c5ea69e756a5f0da22c560209beaffe50ca19baba29be07bc87" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="efbbdaba9a005ebb9b70da7d27b37843de1acdf294c77ca3d013b8d834c29796" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="c1bd581444b6fc48dd420737948af0a8e7e136cd5e3823a9f0b970844aec4453" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="f58e8f150fbc11761c6ac0ba15a4640c62d6b864d968507c456e9d0fcf087261" name="kernel-debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="6aadd9153f5237d0744782a4c04ac113d1345b1366f7f02fa4f1b65b61552846" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="9561dcfc1b3822e7007a42298375db5863d89411e3bc18581fec42b749d635f2" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="2f3db61f9fb36fb626b63170e386a9d1e425bb074c7aa9458886bed355f975d5" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="0fd50feebd1fb2473c8e03a040caabd32e143935b4f65267e674f84b463b5dae" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="39cf6ef974a5d32fb059913a413ae50aec80a14403c59d967bbf7d4ed7b01863" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="404c29e82080b95f469075f4142d390e88d17dc6a76d1c81f8f979c1d8c77a8a" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="94f8e0a48bb8a3935368b8af9d9909a43a507d167b19009b65c077d80dfa3e4e" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="31337550e936f38ef1c99b0f8e1b1df583645c19fae7a75cc05bb4c328041b8a" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="3ca28a8d7dd331d348d52f42be55cfd39944349e695730c04a4ab9b9dddb9f8d" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="f7696fe67e3130c0e0c08a3dae317cb98d064dd72dfa4f62c711583c8215a1bd" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="52428d39dcaaf3271045b618fd55c579cff57672f44aebcb474ef60cbddd7768" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="ad27762c2b5e612edace8114b00855b7597d226dfb32a743017e1fc366b078fc" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="e6b4f14a9449bd989d5cc1cc2bb692bd0bd348745ad31c16e9b5d30ba6a54296" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="a5c4eb0574010e68714db6034b22800071de9d6938e335ec6712bd985998ae75" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="eb7d56d2785cd0fd8bef3bb5710992d4c1330c15e70d0ae66e2f3d194aaef274" name="kernel-debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="c0e78acc61d6ea14bbcff1a942df0154ee50e489dd9c8d5b48b6c3c46ad22bd7" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="bdbeeca29f19c98b1f044d534c3ffaab2248845e631e18ab43080c63e4d22231" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="f7f879ddc1b059fe75a8dab51246600d724d3ef72e3a65f0c6024bbec7ad5973" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="c362d3a28b5fc4986f929db893853dcae9a6ae3644e6911b201a7d1d666ee580" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="48ddce0e564478a3c5101839932774e0dd6e7577c722dec2568d6989ff054d02" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="7231b69331455795852b149373daa9a72a3e364b62ffe56a67f6cb0e86a75cf2" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="4353ea38648ca047f5c6947673d055c2430cc60fb591a3f8d104ba01badd1603" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="b45cf32d92e34cedc8174f0b134fe3d2791e6817084372896b18258930d23f0c" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="bace6c26d9bd1aa21ae04248374509c6177533c62459ac12454b66b293ce285f" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="25e2a01ed1881ede022b3d84b25fc6d0896e7e108b3632c982510bade98d8651" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="ed0062cfbd6ed3a3dd910509948c38d7b44e873c20582571a54daa4308cb3056" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="1a4530b9a842db76691a7e352c71906067a1c08d83d0a5d9a084e836a1a21f8c" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="ae374d4459edb18497d08bb874090420f270e8798290e3707fa9de03a9643490" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="6c1b9a1bd09eb4f92f02809f2d1e66079ed8a10c412e75c22a1bc03cec10f435" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="56d0a28d1d37a0ccc830968d76891f0b0251904ffee6ee82a90671cf96007283" name="kernel-default-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="83227a3b61cfdd2719b3465e25d21799911b7d9a3afd7dbea0a51947f0bf4f71" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="b63e1d2b916515c6013d6da43b0aa899f9def532ba871f0a9cf587f68d7a23b2" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="23a91b50a7b43a32dec36319564c69d8ce64f13712d9e3fbde9772798be56d0e" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="6c3f915b5aa18a50d7ab26cc61e7f6518ff7f2746ca903a6134859a32f166891" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="433c73a7c01879c463b80f6e2b5c4fe08a528d520e63d3066e4a95782c2347d2" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="482d3c4e2e77a2b701cae6731f7a666f71eccee0360b219d2305a33bb37968e3" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="85191cb278f08dea40cd45cfb987318a3a17042be2dc5b6673fc52dacc93ae20" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="2fe104913d637abd04bdb4c5777b18f8be9fd4bbd7e0032ba815d00601711caa" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="b87db7c79d73ed5e774e59332c06898e6a8197515ea69a82058764813ce041fa" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="3d883d5b9850d94159694a37e789835776083a85903330500d78ee15ad9268c1" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="9aaab293a05b81183e23bf2c4bf99644ee8e49c0cf85e59f3d7b67e70400f5a9" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="f267ab28bd6f7c4a4816e115f0aeb862729ebb65377b3a8c4b6871db4d9bfbaf" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="470296d3a6a61bcfb5a47d101b3081fe9332de297195235301c769a2b236cebd" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="faeb033fadc8df5a7b5ca24f3c01968d3749fdf1cbd66c0bd8e0eaadadaba4d7" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="67947a81de7b870e9841e31d8282fc342cb4f1ca5820df192773975a4c88c953" name="kernel-default-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="9d1bd295044363e287c453c0d7dd69a7686848a8f3a86874f7ed8da7979180e2" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="d056a5a9242b09e7dfc5524d2db88ecdb90d03ceaa0cb9effed48cd8bec2db38" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="5927641d1b70cc1d5e5b3b1c70936dab059cf3789d60945ee99dfa11c54fb17a" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="b44c8e6724c61d1ca7924b86c74df997bc05690247a7ae60a8944576466e3318" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="cf97c132d41326609ddbfb6d595d824d7fd6f31e34492044daf609717b5d5fab" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="89595bf7039226f01eb8c342c0b3c5f89b525c00f694878a066f17be38d977ef" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="99d03fafde82c2456d0aae35678fe554a3a3800d7d6325b508a16ffc1ae77872" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="8e0ef9949d2cef9c3431ff2b9eaea6409d134e7f2d3399f10b77bf18d6e555ce" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="ffc8408da8537124eb5b33dac5d6704c11b4c0f3201d60410597fd72e2816975" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="401c3185ec757c1fb8836a1d759102c82e02d9304ec4aab8cae82c79283af7ed" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="f2e543cc71d8b256dec6f66c91e7724635fcce97f7b5e068a0fdf505798e8f0a" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="95e5583a2e36663276d354432dd861f980e8b5225a3007bd3347897c4628368b" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="17095a4e40251169f06f4164861bc14befefa70e7b06be4fe77677ff907b515c" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="6d76e96f45fd395ceb19e9ad8259eecdaf97fd9dec0b7e716983b6546f0bc988" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="84f9a74740a934b246cf4b107faed3ac2c66bd9990f1032017b26cc220021df8" name="kernel-default-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="d139d22ab49f17fb140b6ab237ad94953327ab1558f246b167d1dd1a909580f2" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="beeddd16130449ea505def041dadaac361cb79d0426d7f62058b54e9d763479c" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="5ce58ae0e520da81f7af431791236c65abd50a86365be956a424173d01853091" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="225adcd6fef1e96fa25ca9dcf3cc4c7726a24bb2c3407ba240285e5ac67bff43" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="6f845ec6de3c5c567efefead521bcb966a35ee2001edbb4c380e47c8658296b5" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="c949128112c5d0c202ee17ecd19c72bafcaf472a55d0ebff15fdf8a10d39c642" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="16e0321443b5dbaf6ac8a0f48d66101c511c67fbe693eab72377259914d46407" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="510080b8e3fac28c057cdc68eeb18d7e36c18f7f8a527b5b72032dd63756213b" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="7b81a232a2ad8a09a130afe9a86c666555ca1578eb0d7c5018fe0ff55dfc74f8" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="42da2806fd2b6baac04e29dee26af30b1483bf8ea78f3b009248df61e005db2e" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="5f5a3423868a1508372d2a5f999c084d35764679c20fdbbe3655ec77d7f983f3" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="3635688bffa0a4b0bcb860c868e6b4b8aa85e3491a3e826b4b65602cce0f9454" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="d92a2cdf73272f00f9a57fac9490b98a3dde8b93b4679cf9f460a4234aa02451" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="6c93adb28a72f8b961d0d0f69d45b2eff102d3f09157684ba0ae1c6de14c9ce7" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="64b18b9156bfc8543119b3abbe69f49cf22552a8bb22242088ee550dcaad6f37" name="kernel-kvmsmall-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="d5fc5d87405c32089a574e4216c7dc899100d376137bfbc4ee901c0aa2ae08d7" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="a02f1801f884a81bb0c0b4ad55d7d34a16dd62cff171ab467959a03cbb05ffc3" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="410ffedbbe1b8def2b592594ac6c782cf6087dcbaf98f3d6acfa0edc621d98ae" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="c9eadf537bcc792886d99f1f016476543ddf38b78fa300bd71a23f91ec896d07" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="3ab825ec71cf9fce4f0118733967e664a392944093ead4eb07971b736750bd5c" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="02795b9165f58bd6645e4ff11a60e15e938bb0383f2ba50b4c5ca816bdc1270e" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="1505947e3b11a8449b2b2fca0c64fc16d3c8e20ada6be6e313cdc6adcf6d9431" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="87c988b5ccb8ab90ce8c48499852953b18e110483e4a7e6337f7af0bdc1f0f3d" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="2d3b4d307dabe433a65966e2d07df66d00d0b716fcba4c4eb7dc74cbb106c122" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="2b94d2a6d6fd8ef919609c1389552793e081b91292257873816002a977baac1c" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="123436d009399c25ffe615af203c060faa7782b617e8ab790bf096bedf8acaff" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="f90d4322229ba91433cabf68064d2a90e334020b1fc0757d6f134dd4d8ca9a24" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="a33f878aed8d2d2a281e9f3a9e5c79b5beb09e4d11fd5738f4f4de5f1d65d713" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="1112162a3ceec7ab37b980ac87dc4f424a19e9e30c540eb364bcf14c2d469620" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="13b152272b900df83cea3f931f2ce1b3dc3b2f967650c55719fde3ee1c68e495" name="kernel-kvmsmall-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="3c7afb0d2353d7a94facb9b4de7ba802fa1bd71e31bb6fa6e5220ea73e39b1ce" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="389358703ee681db922cc9f45b26bed88f115b7ca3366904d86d28ef44a7050b" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="7cb4261f3302481225b6c285d320aab4be319bf134e4a0ef3042da6dec390a93" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="fe7813f81a2cf0497a79602711e89f341179810ce77b6cf0ab69259bec940bdd" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="ef88eb3d30c8b382177258e2bc562053ff3771f069d27eeba9421483899d94fb" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="13dd82ee7fb6a317299b0f8ce12c4e41773ae0e92bc9780244ce16c97c78aa80" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="169adda0a655e9a0950365fa2a220c06ee84153fdfb689f7fc6f1d8fd27452a6" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="56b9fb21dd73716451e30aa72240262920d963cae3e4c80f2132fe6820016da8" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="a30c4ada94a28d55c31090c7b36b4f14bffc80045ff8633e61a169085dc2b01c" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="3f81ef8b93cfba5651b591a541b4ba5929fc3becd2b20965ce13649b441379e4" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="f5d220704d3fa8f8ccdf8c6682fba177ba69e9d89faadf746a8ec00a3d8096b8" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="ca5ab8cf3563041d7754f958023a4c12d81bc952ebc0bfd1786edcb3a62c014f" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="b6d97a5ec391f7a1b3ea4b900db6c65abdf411ef3a88595d634c51879124e28d" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="1d61e8a7e8cce4535e6b1a655b88ec10708864e6fa212e2f76f6d3f91cda5aea" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="1f3b4a4f0e8be0be431cebe4b8f5327e8ba4b0404a41e2b90a2c173bca268775" name="kernel-kvmsmall-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="73e6690647ea4b047c718b3025b0d9f5a3fe420a417441a62f68a9f02a5ac4f2" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="ff4faa0ffaf68964370427faefd24367a2c399efac8121d90817221f08efdf16" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="98a922e417b0500c5515e746b3d6f3309575e99ccea52e9a1e67d565fbedcbac" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="bee530ba7f5711aca1045008be60bbc2416ae73d5648a719d2cab49b5f86d30a" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="c5beacb9d757a106a9b2a46927363d27dfb0c160f498ca093f265060e7296228" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="cc1199e7558725fa4d4358d42ec1e73fb19e3e37d1b6243665a51b9d7fd8612e" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="be62e99d938124fda0b37a7d8cdc5bbace67e679e234aa19545a66e8c4b62a57" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="bf1975516f03b80bfcfd213183fc0cf6b6f513e7a6c494b8d7f32059f7002536" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="34a8a673286f574ab2cb83b2c9ba5ccf8d7d8db76d425376d58aafdcf19fe384" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="0c915b28c75a5e3925b91f329b6fb07186d83dc2d385d7bf4326cf2947bf8bfb" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="0ca3579f9ac24734588efe8cb1949787f81abcea763cc434e19e711f30be136f" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="2e9ed3329445fa39f36e6133b1a1834fada2923a7a648fa13265dd1cf337e868" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="4b34ebe05511b5b52dc2a3064956628a5412d0436f1bed743097c8946edee087" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="d377153734951cf87096bfdb5db3a6a55f58a3ca803d137e60739cc29294dd92" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="4afd37d962ebee292f7004156e9ad41b7b2f6fe84c2f3b64409149d75e6f546d" name="kernel-obs-build-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="78ffeda1dbd2589f7bf25c2cebf674d5fb34de2cc75c580e8a6c13b9ce5a7a91" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="124c5384d45845dd7cd18e619a324026a9fe407bcd22826804722f922501b59c" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="af8712063313e79de76cc83262582d46e6b758dde04aa00d4b290995ae151555" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="16f4803e2321863820318df49f8ebe8ca2fcff3c38324ce1f119d6f6e816ce2b" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="7759055835053e1be80936077fcf8320b7cc208544086b2fbc3548209beb2bdc" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="0e04bcadb4ee15bc5ee464e4502ae1225340f81546dc2b59a23f9b9202a091df" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="6633596db34bb10dfce5f6dedf763b50d684d2425c05d98865ed2917e7e652ea" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="c8a52cb6aee90124857ab614646c7a26ceb412c06c442fa7055519f1698d0e37" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="55d09c7314047c08422421c5cba711108d1aa5c2cbc444414b171d4249b8dd0c" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="d5d0e09f2dc9d3ac569f27885d1223c62b13dd10caaed5ea27d12271a2bb5fd1" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="df630994a67baa94a2496d8179e3ef5d44a2f9a4197ed3a378300142fbb78735" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="30c502befd95946d57f0e09ae02957d8e88431c5a6fe30be9c62277f19fe06ac" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="4d1a3f60e3fa5d20bb35f7c4d3bfbabfb55de11b7ad3daad691da442ef8df7c6" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="4df126695932f44cf620fbd86ad887e88f86389695bda428c80e0102b7dca37e" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="296900d7797e3503e3cc88ed2b792166263b4e69f753c7127edfde9f6cfdc906" name="kernel-preempt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="9826fdbad9ab8d7360db2ed4ae6773e2f7ead214128a8ba9bbeb1462af017dbb" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="a783ccb2c8490a842ed22272b0da2443e7dab34ccc368982d1b0fcb9f93d09cb" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="30976213d1e908bec448f588aa7e61edf49e74f596cb6c2545bb1dd303d24a0d" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="f2beb51abee9e159a5db9bc857d11949f992e4c24ae33d131b62764351922214" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="e6538ff0b7c18bae1802d737386d12ba0be60b8d4b5e4b8851b0306054e4e7ad" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="21194b4dce28af74c615179b8e32f5f51df5cb7efce6544831a6652189143db5" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="fb61173d30f0ecde3ea301a6303e9bb9c68af88c5fabaa4f38900a967c7c1ad1" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="d2e8871934b0a39a8fe36e3d0e11f39063ef3b70f6e43167eb8ce4dd8918b0f9" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="6f2423d4366270dc8f6d410bac4f76e8d2ff1b3d14860af5842d777d29ea873a" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="260ae540a82d56bd14b7027bb889832cb1cc7cd71790f4e3d0c5f5674928e57f" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="6a2cebd4da4af9a76b3526c338e7a8184f0bdb9d9994eda1e9b2fa22040bab79" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="a9b732884409b7f0ffcd8523477ac52efddc47221dd0e0ea1957c7b659ca7e24" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="1dbec97498db358af275e5846c81fabcde44ab248f5943ac30b5fb52cbd6d2c5" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="74bed0e20056e677e0d0c867396df8905e295fd7d80ed51860dae480d38292ad" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="426a60dfe5e06c8b0946ef5cdb8cd58c41673ca522585574f9a7dde3fb6c3b62" name="kernel-preempt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="b5d2b03e54bbaeb33ff461ead8ff57aafac6b7bc7dcafc35bf78a3408c7b8888" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.26.2"/>
  <changelog author="mhocko@suse.com" date="1593000000">- mm: adjust vm_committed_as_batch according to vm overcommit
  policy (bnc#1173271).
- mm/util.c: make vm_memory_committed() more accurate
  (bnc#1173271).
- proc/meminfo: avoid open coded reading of vm_committed_as
  (bnc#1173271).
- commit aef113d</changelog>
  <changelog author="tiwai@suse.de" date="1593000001">- ntb: intel: fix static declaration (jsc#SLE-12710).
- ntb: intel: add hw workaround for NTB BAR alignment
  (jsc#SLE-12710).
- commit 2f0e6e8</changelog>
  <changelog author="tiwai@suse.de" date="1593000002">- thermal: intel: intel_pch_thermal: Add Comet Lake (CML)
  platform support (jsc#SLE-12668).
- commit fd37b6c</changelog>
  <changelog author="tiwai@suse.de" date="1593000003">- spi: dw-pci: Fix Chip Select amount on Intel Elkhart Lake PSE
  SPI (jsc#SLE-12735).
- spi: dw-pci: Add runtime power management support
  (jsc#SLE-12735).
- SPI: designware: pci: Switch over to MSI interrupts
  (jsc#SLE-12735).
- spi: dw-pci: Add MODULE_DEVICE_TABLE (jsc#SLE-12735).
- spi: dw-pci: Add support for Intel Elkhart Lake PSE SPI
  (jsc#SLE-12735).
- commit fb43301</changelog>
  <changelog author="mgorman@suse.de" date="1593000004">- sched/cfs: change initial value of runnable_avg (bsc#1158765).
- commit daa01a4</changelog>
  <changelog author="dwagner@suse.de" date="1593172800">- wireguard: receive: account for napi_gro_receive never returning
  GRO_DROP (git-fixes).
- wireguard: device: avoid circular netns references (git-fixes).
- wireguard: noise: do not assign initiation time in if condition
  (git-fixes).
- wireguard: send/receive: use explicit unlikely branch instead
  of implicit coalescing (git-fixes).
  Update context:
  patches.suse/wireguard-noise-separate-receive-counter-from-send-c.patch
- wireguard: selftests: initalize ipv6 members to NULL to squelch
  clang warning (git-fixes).
- commit 4d2639d</changelog>
  <changelog author="bp@suse.de" date="1593172801">- EDAC/ghes: Setup DIMM label from DMI and use it in error reports
  (bsc#1168779).
- commit a469a1d</changelog>
  <changelog author="msuchanek@suse.de" date="1593172802">- ibmveth: Fix max MTU limit (bsc#1173428 ltc#186397).
- commit 79145c1</changelog>
  <changelog author="msuchanek@suse.de" date="1593172803">- Refresh metadata of patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch.
- commit 9767e8e</changelog>
  <changelog author="dbueso@suse.de" date="1593345600">- selftests/timens: handle a case when alarm clocks are not
  supported (bsc#1164648,jsc#SLE-11493).
- eventpoll: fix missing wakeup for ovflist in ep_poll_callback
  (bsc#1159867).
- random: fix data races at timer_rand_state (bsc#1173438).
- timer: Use hlist_unhashed_lockless() in timer_pending()
  (bsc#1173438).
- jbd2: fix data races at struct journal_head (bsc#1173438).
- list: Add hlist_unhashed_lockless() (bsc#1173438).
- rcu: Fix data-race due to atomic_t copy-by-value (bsc#1171828).
- tick/sched: Annotate lockless access to last_jiffies_update
  (bsc#1173438).
- commit ea6eb59</changelog>
  <changelog author="dbueso@suse.de" date="1593345601">- rcu: Use WRITE_ONCE() for assignments to -&gt;pprev for hlist_nulls
  (bsc#1173438).
- commit f9be02d</changelog>
  <changelog author="bp@suse.de" date="1593432000">- EDAC/skx: Use the mcmtr register to retrieve
  close_pg/bank_xor_enable (bsc#1152489).
- commit ba796e7</changelog>
  <changelog author="mkubecek@suse.cz" date="1593432001">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-to-init-in-CRQ-reset-returns-H_CLOS.patch
- commit 8848a5a</changelog>
  <changelog author="dwagner@suse.de" date="1593432002">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (bsc#1172823).
- sched/deadline: Initialize -&gt;dl_boosted (bsc#1172823).
- commit b64bd29</changelog>
  <changelog author="ptesarik@suse.cz" date="1593432003">- s390/pci: Log new handle in clp_disable_fh() (git-fixes).
- commit 0747f74</changelog>
  <changelog author="mgorman@suse.de" date="1593432004">- Refresh
  patches.suse/sched-cfs-change-initial-value-of-runnable_avg.patch.
- Refresh
  patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch.
- Refresh patches.suse/sched-core-Fix-ttwu-race.patch.
- Refresh patches.suse/sched-core-s-WF_ON_RQ-WQ_ON_CPU.patch.
- commit 302ff9b</changelog>
  <changelog author="mgorman@suse.de" date="1593432005">- sched/deadline: Initialize -&gt;dl_boosted (git fixes (sched)).
- commit d7f40dc</changelog>
  <changelog author="mgorman@suse.de" date="1593432006">- sched/core: Fix PI boosting between RT and DEADLINE tasks
  (git fixes (sched)).
- commit 55e2b0c</changelog>
  <changelog author="fvogt@suse.de" date="1593432007">- efi/tpm: Verify event log header before parsing (bsc#1173461).
- commit 855e4d4</changelog>
  <changelog author="mgorman@suse.de" date="1593432008">- Delete
  patches.suse/fs-Do-not-check-if-there-is-a-fsnotify-watcher-on-pseudo-inodes.patch.
  This patch (mainline commit e9c15badbb7b) breaks chromium browser:
  http://lkml.kernel.org/r/7b4aa1e985007c6d582fffe5e8435f8153e28e0f.camel@redhat.com
- commit e23a2e5</changelog>
</package>
<package pkgid="57c3b0e1ca82aceb85d537ad6f7b52e9d29606c2f16ff211c3e3b29453e28602" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.33.1"/>
  <changelog author="mgorman@suse.de" date="1594296000">- sched: Fix loadavg accounting race (bnc#1155798 (CPU scheduler
  functional and performance backports)).
- commit 38a840e</changelog>
  <changelog author="mgorman@suse.de" date="1594296001">- series.conf: cleanup (sort)
- patches.suse/sched-core-Check-cpus_mask-not-cpus_ptr-in-__set_cpus_allowed_ptr-to-fix-mask-corruption.patch
- commit 451a6ea</changelog>
  <changelog author="dwagner@suse.de" date="1594296002">- Refresh metadata of patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit 964e72b</changelog>
  <changelog author="dwagner@suse.de" date="1594296003">- scsi: lpfc: Fix less-than-zero comparison of unsigned value
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix interrupt assignments when multiple vectors
  are supported on same CPU (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix inconsistent indenting (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Update lpfc version to 12.8.0.2 (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add an internal trace log buffer (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Add blk_io_poll support for latency improvment
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Add support to display if adapter dumps are
  available (bsc#1172687 bsc#1171530).
- scsi: lpfc: Allow applications to issue Common Set Features
  mailbox command (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix language in 0373 message to reflect non-error
  message (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix kdump hang on PPC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix shost refcount mismatch when deleting vport
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix stack trace seen while setting rrq active
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix oops due to overrun when reading SLI3 data
  (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix NVMe rport deregister and registration during
  ADISC (bsc#1172687 bsc#1171530).
- scsi: lpfc: Fix missing MDS functionality (bsc#1172687
  bsc#1171530).
- scsi: lpfc: Fix unused assignment in
  lpfc_sli4_bsg_link_diag_test (bsc#1172687 bsc#1171530).
- commit fa0f156</changelog>
  <changelog author="tiwai@suse.de" date="1594296004">- Fix boot crash with MD (bsc#1173860)
  Refresh patches.suse/mdraid-fix-read-write-bytes-accounting.patch
- commit 119f164</changelog>
  <changelog author="ohering@suse.de" date="1594382400">- Drivers: hv: Change flag to write log level in panic msg to
  false (bsc#1170617).
- commit bcd509e</changelog>
  <changelog author="ohering@suse.de" date="1594382401">- kabi: hv: prevent struct device_node to become defined
  (bsc#1172871).
- PCI: hv: Retry PCI bus D0 entry on invalid device state
  (bsc#1172871).
- PCI: hv: Fix the PCI HyperV probe failure path to release
  resource properly (bsc#1172871).
- PCI: hv: Introduce hv_msi_entry (bsc#1172871).
- PCI: hv: Move retarget related structures into tlfs header
  (bsc#1172871).
- PCI: hv: Move hypercall related definitions into tlfs header
  (bsc#1172871).
- PCI: hv: Decouple the func definition in hv_dr_state from VSP
  message (bsc#1172871).
- PCI: hv: Change pci_protocol_version to per-hbus (bsc#1172871).
- PCI: hv: Reorganize the code in preparation of hibernation
  (bsc#1172871).
- commit 35a7d93</changelog>
  <changelog author="dwagner@suse.de" date="1594382402">- net: core: device_rename: Use rwsem instead of a seqcount
  (bsc#1162702).
- commit 7a01d9d</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382403">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFSv4-fix-CLOSE-not-waiting-for-direct-IO-compeletio.patch
  patches.suse/SUNRPC-Properly-set-the-subbuf-parameter-of-xdr_buf_.patch
  patches.suse/libceph-don-t-omit-recovery_deletes-in-target_copy.patch
  patches.suse/nfsd-apply-umask-on-fs-without-ACL-support.patch
  patches.suse/nfsd-fix-nfsdfs-inode-reference-count-leak.patch
  patches.suse/nfsd4-fix-nfsdfs-reference-count-loop.patch
  patches.suse/pNFS-flexfiles-Fix-list-corruption-if-the-mirror-cou.patch
  patches.suse/sunrpc-fixed-rollback-in-rpc_gssd_dummy_populate.patch
  patches.suse/xprtrdma-Fix-handling-of-RDMA_ERROR-replies.patch
- commit ad850c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1594382404">- series.conf: cleanup
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-Fix-packet-size-calculation.patch
- commit f5de6d1</changelog>
  <changelog author="mkoutny@suse.com" date="1594382405">- signal: Avoid corrupting si_pid and si_uid in do_notify_parent
  (bsc#1171529).
- commit eb37c8d</changelog>
  <changelog author="mkoutny@suse.com" date="1594382406">- fork: prevent accidental access to clone3 features
  (bsc#1174018).
- commit 8b81b50</changelog>
  <changelog author="msuchanek@suse.de" date="1594641600">- dm writecache: reject asynchronous pmem devices (bsc#1156395).
- commit 26f82f2</changelog>
  <changelog author="ohering@suse.de" date="1594641601">- hv_netvsc: Fix netvsc_start_xmit's return type (git-fixes).
- commit 5b7bc98</changelog>
  <changelog author="ptesarik@suse.cz" date="1594641602">- net/smc: tolerate future SMCD versions (bsc#1172543 LTC#186069).
- commit fd05166</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641603">- Fix
  patches.suse/media-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  (fix build without the kabi fix)
- Refresh
  patches.kabi/kABI-fixup-mtk-vpu-avoid-unaligned-access-to-DTCM-buffer.patch
  This commit has no effect on expanded tree but it fixes build without
  patches.kabi/* (so that it will be needed for SLE15-SP3).
- commit 62b468e</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641604">- fix patch metadata
- fix Patch-mainline tag:
  patches.suse/net-smc-tolerate-future-smcd-versions
- commit 83f40de</changelog>
  <changelog author="mkubecek@suse.cz" date="1594641605">- Update kabi files.
- update to first maintenance update submission (commit eabfb0896fac)
- commit 9da6523</changelog>
  <changelog author="mkubecek@suse.cz" date="1595073600">- fix bdev inode reference count disbalance regression (bsc#1174244)
  Update patches.suse/bdev-add-open_finish.patch to adapt to changes
  introduced by patches.suse/block-Fix-use-after-free-in-blkdev_get.patch
  (backport of mainline commit 2d3a8e2dedde).
- commit 7efbe7b</changelog>
  <changelog author="mgorman@suse.de" date="1595332800">- sched: Fix race against ptrace_freeze_trace() (bsc#1174345).
- commit 2138587</changelog>
</package>
<package pkgid="3c6c3709ffe273f007edb49c6ca7b366e34a019330c928a3a1112f017601aa20" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.36.1"/>
  <changelog author="tzimmermann@suse.de" date="1597752000">- drm/dbi: Fix SPI Type 1 (9-bit) transfer (bsc#1152472)
  * move drm_mipi_dbi.c -&gt; tinydrm/mipi-dbi.c
- commit 7401aea</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752001">- drm/bridge: ti-sn65dsi86: Fix off-by-one error in clock choice (bsc#1152489)
  * refreshed for context changes
- commit fa0e7b9</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752002">- drm/amdgpu/display: use blanked rather than plane state for sync (bsc#1152489)
  * refreshed for context changes
  * protect code with CONFIG_DRM_AMD_DC_DCN2_0
- commit 481d44a</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752003">- blacklist.conf: Append 'drm: encoder_slave: fix refcouting error for modules'
- commit 29d30a2</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752004">- blacklist.conf: Append 'Revert "drm/amd/display: disable dcn20 abm feature for bring up"'
- commit 196a32f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752005">- blacklist.conf: Append 'drm/radeon: fix fb_div check in ni_init_smc_spll_table()'
- commit 85aef32</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1597752006">- net: ena: support new LLQ acceleration mode (bsc#1174852).
- net: ena: move llq configuration from ena_probe to
  ena_device_init() (bsc#1174852).
- net: ena: enable support of rss hash key and function changes
  (bsc#1174852).
- net: ena: add support for traffic mirroring (bsc#1174852).
- net: ena: cosmetic: change ena_com_stats_admin stats to u64
  (bsc#1174852).
- net: ena: cosmetic: satisfy gcc warning (bsc#1174852).
- net: ena: add reserved PCI device ID (bsc#1174852).
- net: ena: avoid unnecessary rearming of interrupt vector when
  busy-polling (bsc#1174852).
- net: ena: Fix using plain integer as NULL pointer in
  ena_init_napi_in_range (bsc#1174852).
- net: ena: reduce driver load time (bsc#1174852).
- net: ena: cosmetic: minor code changes (bsc#1174852).
- net: ena: cosmetic: fix spacing issues (bsc#1174852).
- net: ena: cosmetic: code reorderings (bsc#1174852).
- net: ena: cosmetic: remove unnecessary code (bsc#1174852).
- net: ena: cosmetic: fix line break issues (bsc#1174852).
- net: ena: cosmetic: fix spelling and grammar mistakes in
  comments (bsc#1174852).
- net: ena: cosmetic: set queue sizes to u32 for consistency
  (bsc#1174852).
- net: ena: cosmetic: rename
  ena_update_tx/rx_rings_intr_moderation() (bsc#1174852).
- net: ena: simplify ena_com_update_intr_delay_resolution()
  (bsc#1174852).
- net: ena: fix ena_com_comp_status_to_errno() return value
  (bsc#1174852).
- net: ena: use explicit variable size for clarity (bsc#1174852).
- net: ena: rename ena_com_free_desc to make API more uniform
  (bsc#1174852).
- net: ena: add support for the rx offset feature (bsc#1174852).
- net: ena: cosmetic: extract code to ena_indirection_table_set()
  (bsc#1174852).
- net: ena: cosmetic: remove unnecessary spaces and tabs in
  ena_com.h macros (bsc#1174852).
- net: ena: use SHUTDOWN as reset reason when closing interface
  (bsc#1174852).
- net: ena: drop superfluous prototype (bsc#1174852).
- net: ena: add support for reporting of packet drops
  (bsc#1174852).
- net: ena: add unmask interrupts statistics to ethtool
  (bsc#1174852).
- net: ena: remove code that does nothing (bsc#1174852).
- net: ena: changes to RSS hash key allocation (bsc#1174852).
- net: ena: change default RSS hash function to Toeplitz
  (bsc#1174852).
- net: ena: allow setting the hash function without changing
  the key (bsc#1174852).
- net: ena: fix error returning in ena_com_get_hash_function()
  (bsc#1174852).
- net: ena: avoid unnecessary admin command when RSS function
  set fails (bsc#1174852).
- net/ena: Fix build warning in ena_xdp_set() (bsc#1174852).
- net: ena: Make some functions static (bsc#1174852).
- net: ena: ethtool: clean up minor indentation issue
  (bsc#1174852).
- net: ena: ethtool: remove redundant non-zero check on rc
  (bsc#1174852).
- net: ena: remove set but not used variable 'hash_key'
  (bsc#1174852).
- net: ena: fix continuous keep-alive resets (bsc#1174852).
- net: ena: avoid memory access violation by validating req_id
  properly (bsc#1174852).
- net: ena: fix request of incorrect number of IRQ vectors
  (bsc#1174852).
- commit c12b7e0</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752007">- blacklist.conf: Append 'drm/i915/gt: Do not schedule normal requests immediately along virtual'
- commit 23a91d5</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752008">- blacklist.conf: Append 'drm/i915/fbc: Fix fence_y_offset handling'
- commit 479361f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752009">- blacklist.conf: Append 'drm/radeon: fix double free'
- commit 280a51f</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752010">- blacklist.conf: Append 'drm/amd/powerplay: fix a crash when overclocking Vega M'
- commit e5e21f4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752011">- blacklist.conf: Append 'drm/i915/gt: Only swap to a random sibling once upon creation'
- commit d52efd4</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752012">- blacklist.conf: Append 'drm/i915: Move cec_notifier to intel_hdmi_connector_unregister, v2.'
- commit a8c7d52</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752013">- drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (bsc#1152489)
  * refreshed for context changes
- commit e3e1287</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752014">- drm/bridge: dw-hdmi: Don't cleanup i2c adapter and ddc ptr in (bsc#1152472)
  * refreshed for context changes
- commit 44aa1b6</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752015">- drm/ingenic: Fix incorrect assumption about plane-&gt;index (bsc#1152489)
  * refreshed for context changes
- commit bc5c9df</changelog>
  <changelog author="tzimmermann@suse.de" date="1597752016">- Revert "drm/amd/display: Expose connector VRR range via debugfs" (bsc#1152489)
  * refreshed for context changes
- commit c657a41</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752017">- fix patch metadata
- fix Patch-mainline and drop Git-repo:
  patches.suse/xfrm-policy-match-with-both-mark-and-mask-on-user-in.patch
- commit 18fa7c9</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752018">- fix patch metadata
- fix Patch-mainline:
  patches.suse/btrfs-Move-free_pages_out-label-in-inline-extent-han.patch
- commit 113168c</changelog>
  <changelog author="mkubecek@suse.cz" date="1597752019">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ALSA-usb-audio-fix-overeager-device-match-for-MacroS.patch
- commit 3e22b20</changelog>
</package>
<package pkgid="5aa6cc63656d4546b309eb076586fd1cf897eb068ad113edc2f241c0cc25822f" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.41.1"/>
  <changelog author="mbenes@suse.cz" date="1598443200">- selftests/livepatch: rework test-klp-shadow-vars (bsc#1071995).
- commit c5a8b83</changelog>
  <changelog author="mbenes@suse.cz" date="1598443201">- selftests/livepatch: more verification in test-klp-shadow-vars
  (bsc#1071995).
- commit fead416</changelog>
  <changelog author="msuchanek@suse.de" date="1598443202">- powerpc/pseries/hotplug-cpu: wait indefinitely for vCPU death
  (fate#322438 bsc#1085030 ltC#165630).
- commit d3a8444</changelog>
  <changelog author="mbenes@suse.cz" date="1598443203">- selftests/livepatch: fix mem leaks in test-klp-shadow-vars
  (bsc#1071995).
- commit 0e9c3d5</changelog>
  <changelog author="msuchanek@suse.de" date="1598443204">- powerpc/perf: Fix missing is_sier_aviable() during build
  (bsc#1065729).
- pseries: Fix 64 bit logical memory block panic (bsc#1065729).
- KVM: PPC: Book3S PR: Remove uninitialized_var() usage
  (bsc#1065729).
- commit 45994c6</changelog>
  <changelog author="msuchanek@suse.de" date="1598443205">- powerpc/fadump: Fix build error with CONFIG_PRESERVE_FA_DUMP=y
  (bsc#1156395).
- commit a889646</changelog>
  <changelog author="msuchanek@suse.de" date="1598443206">- powerpc/iommu: Allow bypass-only for DMA (bsc#1156395).
- commit 70ae27e</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443207">- Refresh
  patches.suse/nvme-multipath-round-robin-fix-single-non-optimized-path-case.patch.
- commit d615e5c</changelog>
  <changelog author="martin.wilck@suse.com" date="1598443208">- Refresh
  patches.suse/nvme-multipath-round-robin-eliminate-fallback-variable.patch.
- commit f3c5d53</changelog>
  <changelog author="firo.yang@suse.com" date="1598529600">- mm, vmstat: reduce zone-&gt;lock holding time by /proc/pagetypeinfo
  (bsc#1175691).
- commit e293f1c</changelog>
  <changelog author="tiwai@suse.de" date="1598529601">- serial: 8250: change lock order in serial8250_do_startup()
  (git-fixes).
- serial: pl011: Fix oops on -EPROBE_DEFER (git-fixes).
- serial: pl011: Don't leak amba_ports entry on driver register
  error (git-fixes).
- kernel/relay.c: fix memleak on destroy relay channel
  (git-fixes).
- drm/amd/display: fix pow() crashing when given base 0
  (git-fixes).
- drm/amd/display: Fix EDID parsing after resume from suspend
  (git-fixes).
- rtc: goldfish: Enable interrupt in set_alarm() when necessary
  (git-fixes).
- Input: psmouse - add a newline when printing 'proto' by sysfs
  (git-fixes).
- media: camss: fix memory leaks on error handling paths in probe
  (git-fixes).
- media: vpss: clean up resources in init (git-fixes).
- media: rockchip: rga: Only set output CSC mode for RGB input
  (git-fixes).
- media: rockchip: rga: Introduce color fmt macros and refactor
  CSC mode logic (git-fixes).
- media: budget-core: Improve exception handling in
  budget_register() (git-fixes).
- commit 0974903</changelog>
  <changelog author="dwagner@suse.de" date="1598529602">- Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe
  during probe" (bsc#1171688 bsc#1174003).
- Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix null pointer access during disconnect from
  subsystem (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check if FW supports MQ before enabling
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Allow ql2xextended_error_logging special value
  1 to be set anytime (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Reduce noisy debug message (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix login timeout (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Indicate correct supported speeds for Mezz card
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Flush I/O on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Flush all sessions on zone disable (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout
  values (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Address a set of sparse warnings (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: SAN congestion management implementation
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Introduce a function for computing the debug
  message prefix (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make qla2x00_restart_isp() easier to read
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits
  of request_t.handle (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove a superfluous cast (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Initialize 'n' before using it (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier
  to read (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove the __packed annotation from struct
  fcp_hdr and fcp_hdr_le (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Check the size of struct fcp_hdr at compile time
  (bsc#1171688 bsc#1174003).
- scsi: Fix trivial spelling (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Keep initiator ports after RSCN (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Remove return value from qla_nvme_ls()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Remove an unused function (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix endianness annotations in source files
  (bsc#1171688 bsc#1174003).
  Refresh patches.suse/scsi-qla2xxx-Set-NVMe-status-code-for-failed-NVMe-FC.patch
- scsi: qla2xxx: Fix endianness annotations in header files
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use make_handle() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from
  upper case into lower case (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix the code that reads from mailbox registers
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use register names instead of register offsets
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Change two hardcoded constants into offsetof()
  / sizeof() expressions (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg
  to FCP_PRIO_CFG_SIZE (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Add more BUILD_BUG_ON() statements (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Simplify the functions for dumping firmware
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix spelling of a variable name (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qlafx00_process_aen() return void
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Use true, false for ha-&gt;fw_dumped (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use true, false for need_mpi_reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Make qla_set_ini_mode() return void (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix issue with adapter's stopping state
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix failure message in qlt_disable_vha()
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Fix warning after FC target reset (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: make 1-bit bit-fields unsigned int (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Fix MPI failure AEN (8200) handling (bsc#1171688
  bsc#1174003).
- scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it
  (bsc#1171688 bsc#1174003).
- scsi: qla2xxx: Split qla2x00_configure_local_loop() (bsc#1171688
  bsc#1174003).
- commit 675dd78</changelog>
  <changelog author="dwagner@suse.de" date="1598529603">- scsi/fc: kABI fixes for new ELS_RPD definition
  (bsc#1171688 bsc#1174003).
- commit 6839081</changelog>
  <changelog author="tonyj@suse.de" date="1598529604">- blacklist.conf:  Update for perf userspace git-fixes
- commit 981209c</changelog>
  <changelog author="ddiss@suse.de" date="1598529605">- scsi: target/iblock: fix WRITE SAME zeroing (bsc#1169790).
- commit 3f94600</changelog>
  <changelog author="dwagner@suse.de" date="1598616000">- kabi/severities: ignore qla2xxx as all symbols are internal
- commit cbc9e8b</changelog>
  <changelog author="msuchanek@suse.de" date="1598616001">- ibmvnic fix NULL tx_pools and rx_tools issue at do_reset
  (bsc#1175873 ltc#187922).
- commit eff0cb0</changelog>
  <changelog author="yousaf.kaukab@suse.com" date="1598616002">- soc/tegra: pmc: Enable PMIC wake event on Tegra194
  (bsc#1175834).
- commit e2e5a5c</changelog>
  <changelog author="mkubecek@suse.cz" date="1598616003">- update upstream reference
- update "net" repository URL:
  patches.suse/ibmvnic-fix-NULL-tx_pools-and-rx_tools-issue-at-do_r.patch
- commit f299d68</changelog>
  <changelog author="mkubecek@suse.cz" date="1599220800">- net/packet: fix overflow in tpacket_rcv (CVE-2020-14386
  bsc#1176069).
- commit b3a3711</changelog>
</package>
<package pkgid="58dbeb7eb43b5f7d0371bdda8cb21c7616ddd6e21d62e884e1770582c323c19f" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.44.1"/>
  <changelog author="fdmanana@suse.com" date="1600948800">- btrfs: remove a BUG_ON() from merge_reloc_roots() (bsc#1176019).
- commit 070656a</changelog>
  <changelog author="tiwai@suse.de" date="1600948801">- Revert "ALSA: usb-audio: Disable Lenovo P620 Rear line-in
  volume control" (git-fixes).
- Revert "ALSA: hda - Fix silent audio output and corrupted
  input on MSI X570-A PRO" (git-fixes).
- ALSA: usb-audio: Add delay quirk for H570e USB headsets
  (git-fixes).
- ALSA: hda/realtek: Enable front panel headset LED on Lenovo
  ThinkStation P520 (git-fixes).
- ALSA: hda/realtek - Couldn't detect Mic if booting with headset
  plugged (git-fixes).
- ALSA: asihpi: fix iounmap in error handler (git-fixes).
- commit 392c032</changelog>
  <changelog author="msuchanek@suse.de" date="1601035200">- scsi: ibmvfc: Avoid link down on FS9100 canister reboot
  (bsc#1176962 ltc#188304).
- scsi: ibmvfc: Use compiler attribute defines instead of
  __attribute__() (bsc#1176962 ltc#188304).
- commit 2f6bf7f</changelog>
  <changelog author="msuchanek@suse.de" date="1601035201">- powerpc/kernel: Enables memory hot-remove after reboot on
  pseries guests (bsc#1177030 ltc#187588).
- powerpc/mm: Limit resize_hpt_for_hotplug() call to hash guests
  only (bsc#1177030 ltc#187588).
- commit 9885202</changelog>
  <changelog author="tiwai@suse.de" date="1601035202">- Update patch reference for NFC security fix (CVE-2020-26088 bsc#1176990)
- commit 7eec5ca</changelog>
  <changelog author="nstange@suse.de" date="1601121600">- s390: Change s390_kernel_write() return type to match memcpy()
  (bsc#1176449).
  Prerequisite for bsc#1176449.
- commit 3f17b43</changelog>
  <changelog author="nstange@suse.de" date="1601121601">- s390/maccess: add no DAT mode to kernel_write (bsc#1176449).
- commit 8fd068b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601294400">- net: sched: initialize with 0 before setting erspan md-&gt;u
  (bsc#1154353).
- debugfs: Fix module state check condition (bsc#1173746).
- RDMA/siw: Suppress uninitialized var warning (jsc#SLE-8381).
- commit 97c7a55</changelog>
  <changelog author="tiwai@suse.de" date="1601294401">- Bluetooth: btrtl: Add support for RTL8761B (bsc#1177021).
- commit 6c51917</changelog>
  <changelog author="ohering@suse.de" date="1601380800">- Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
  (git-fixes).
- Drivers: hv: vmbus: hibernation: do not hang forever in
  vmbus_bus_resume() (git-fixes).
- hv_utils: drain the timesync packets on onchannelcallback
  (bsc#1176877).
- hv_utils: return error if host timesysnc update is stale
  (bsc#1176877).
- Drivers: hv: Specify receive buffer size using Hyper-V page size
  (bsc#1176877).
- commit 5ca04fc</changelog>
  <changelog author="ohering@suse.de" date="1601380801">- irqdomain/treewide: Keep firmware node unconditionally allocated (git-fixes).
- commit 7778bc2</changelog>
  <changelog author="ohering@suse.de" date="1601380802">- irqdomain/treewide: Free firmware node after domain removal (git-fixes).
- commit 2fa0cd5</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1601380803">- RDMA/bnxt_re: Restrict the max_gids to 256 (bsc#1173017).
- RDMA/bnxt_re: Fix the qp table indexing (bsc#1173017).
- RDMA/bnxt_re: Do not report transparent vlan from QP1
  (bsc#1173017).
- commit 279a57c</changelog>
  <changelog author="msuchanek@suse.de" date="1601380804">- Fix patch order in sorted section.
- commit ca43e45</changelog>
  <changelog author="msuchanek@suse.de" date="1601380805">- powerpc: Don't flush caches when adding memory (bsc#1176980
  ltc#187962).
- commit 63612e5</changelog>
  <changelog author="oneukum@suse.com" date="1601380806">- Revert "crypto: chelsio - Inline single pdu only" (git-fixes).
- commit 11462e6</changelog>
  <changelog author="mbenes@suse.cz" date="1601380807">- tracing: fix double free (git-fixes).
- commit dd7027e</changelog>
  <changelog author="tiwai@suse.de" date="1601380808">- Delete a doubly applied batman-adv patch
- commit edcea1c</changelog>
  <changelog author="dwagner@suse.de" date="1601467200">- Drop patches.suse/scsi-qla2xxx-Handle-incorrect-entry_type-entries.patch
  The patch contains a bug which prevents device discovery. Drop it until
  we have a proper fix from upstream.
- commit d02a6d5</changelog>
  <changelog author="ohering@suse.de" date="1601467201">- rpm/constraints.in: recognize also kernel-source-azure (bsc#1176732)
- commit 7214bbe</changelog>
</package>
<package pkgid="8c646a0b6d633aa1b1357bc327cadc45b651afa8f83ada3bae0d6a46e02afb16" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.47.2"/>
  <changelog author="vbabka@suse.cz" date="1602676800">- mm, slub: remove runtime allocation order changes (mm/slub
  bsc#1165692).
- commit d6227f6</changelog>
  <changelog author="vbabka@suse.cz" date="1602676801">- mm, slub: make remaining slub_debug related attributes read-only
  (mm/slub bsc#1165692).
- commit 0a2f646</changelog>
  <changelog author="vbabka@suse.cz" date="1602676802">- mm, slub: make reclaim_account attribute read-only (mm/slub
  bsc#1165692).
- commit 749a7fc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676803">- mm, slub: introduce static key for slub_debug() (mm/slub
  bsc#1165692).
- commit 592afaf</changelog>
  <changelog author="vbabka@suse.cz" date="1602676804">- mm, slub: introduce kmem_cache_debug_flags() (mm/slub
  bsc#1165692).
- commit 4f68bb2</changelog>
  <changelog author="vbabka@suse.cz" date="1602676805">- mm, slub: extend checks guarded by slub_debug static key
  (mm/slub bsc#1165692).
- commit 95cf5cc</changelog>
  <changelog author="vbabka@suse.cz" date="1602676806">- mm, slab/slub: move and improve cache_from_obj() (mm/slub
  bsc#1165692).
  mm, slab/slub: improve error reporting and overhead of
  cache_from_obj() (mm/slub bsc#1165692).
  Squashed to prevent build error after first patch.
- commit ed35ad2</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676807">- series.conf: cleanup
- fix Patch-mainline and move to "almost mainline" section:
  patches.suse/qla2xxx-return-ebusy-on-fcport-deletion.patch
- create Storage / NVMe subsection
- move to Storage / NVMe:
  patches.suse/Revert-nvme-allow-64-bit-results-in-passthru-command.patch
  patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- drop Storage / bsc#1171688 subsection
  No effect on expanded tree.
- commit 1b55020</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676808">- series.conf: cleanup
- rename Other drivers / Intel IOMMU subsection to IOMMU
- whitespace cleanup
- commit 263c1bd</changelog>
  <changelog author="mkubecek@suse.cz" date="1602676809">- fix patches metadata
- fix Patch-mainline:
  patches.suse/NFS-Don-t-move-layouts-to-plh_return_segs-list-while.patch
  patches.suse/NFS-Don-t-return-layout-segments-that-are-in-use.patch
  patches.suse/NFS-Fix-flexfiles-read-failover.patch
  patches.suse/NFSv4.2-fix-client-s-attribute-cache-management-for-.patch
  patches.suse/SUNRPC-Revert-241b1f419f0e-SUNRPC-Remove-xdr_buf_tri.patch
  patches.suse/nfs-ensure-correct-writeback-errors-are-returned-on-.patch
  patches.suse/nfs-nfs_file_write-should-check-for-writeback-errors.patch
  patches.suse/nfsd4-fix-NULL-dereference-in-nfsd-clients-display-c.patch
  patches.suse/pNFS-flexfiles-Ensure-we-initialise-the-mirror-bsize.patch
  patches.suse/svcrdma-Fix-page-leak-in-svc_rdma_recv_read_chunk.patch
  patches.suse/xprtrdma-fix-incorrect-header-size-calculations.patch
- commit 90be310</changelog>
  <changelog author="vbabka@suse.cz" date="1602763200">- mm, slub: restore initial kmem_cache flags (mm/slub
  bsc#1165692).
- commit 8972663</changelog>
  <changelog author="tiwai@suse.de" date="1602763201">- Bluetooth: A2MP: Fix not initializing all members
  (CVE-2020-12352 bsc#1177725).
- commit 099cb6b</changelog>
  <changelog author="tiwai@suse.de" date="1602763202">- Move upstreamed intel-vbtn patch into sorted section
- commit cf1a58d</changelog>
  <changelog author="tiwai@suse.de" date="1602763203">- Update the patch reference for bluetooth security fix (CVE-2020-24490 bsc#1177726)
- commit 2a88ef6</changelog>
  <changelog author="tiwai@suse.de" date="1602763204">- Bluetooth: L2CAP: Fix calling sk_filter on non-socket based
  channel (CVE-2020-12351 bsc#1177724).
- commit f0ba0e3</changelog>
  <changelog author="tiwai@suse.de" date="1602763205">- kABI workaround for bluetooth l2cap_ops filter addition
  (CVE-2020-12351 bsc#1177724).
- commit 7c053a8</changelog>
  <changelog author="jslaby@suse.cz" date="1602763206">- x86/unwind/orc: Fix inactive tasks with stack pointer in %sp
  on GCC 10 compiled kernels (bsc#1176907).
- commit 4f3bd2e</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763207">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/Bluetooth-A2MP-Fix-not-initializing-all-members.patch
  patches.suse/Bluetooth-L2CAP-Fix-calling-sk_filter-on-non-socket-.patch
- commit a607d96</changelog>
  <changelog author="mkubecek@suse.cz" date="1602763208">- series.conf: refresh
- update upstream references and resort:
  patches.suse/scsi-ibmvfc-Avoid-link-down-on-FS9100-canister-reboo.patch
  patches.suse/scsi-ibmvfc-Use-compiler-attribute-defines-instead-o.patch
  patches.suse/scsi-qla2xxx-Add-IOCB-resource-tracking.patch
  patches.suse/scsi-qla2xxx-Add-SLER-and-PI-control-support.patch
  patches.suse/scsi-qla2xxx-Add-rport-fields-in-debugfs.patch
  patches.suse/scsi-qla2xxx-Allow-dev_loss_tmo-setting-for-FC-NVMe-.patch
  patches.suse/scsi-qla2xxx-Correct-the-check-for-sscanf-return-val.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-errors-during-LIP-reset-tests.patch
  patches.suse/scsi-qla2xxx-Fix-I-O-failures-during-remote-port-tog.patch
  patches.suse/scsi-qla2xxx-Fix-MPI-reset-needed-message.patch
  patches.suse/scsi-qla2xxx-Fix-buffer-buffer-credit-extraction-err.patch
  patches.suse/scsi-qla2xxx-Fix-crash-on-session-cleanup-with-unloa.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-250bd009.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i-72e813d9.patch
  patches.suse/scsi-qla2xxx-Fix-inconsistent-format-argument-type-i.patch
  patches.suse/scsi-qla2xxx-Fix-memory-size-truncation.patch
  patches.suse/scsi-qla2xxx-Fix-point-to-point-N2N-device-discovery.patch
  patches.suse/scsi-qla2xxx-Fix-reset-of-MPI-firmware.patch
  patches.suse/scsi-qla2xxx-Fix-the-return-value.patch
  patches.suse/scsi-qla2xxx-Fix-the-size-used-in-a-dma_free_coheren.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qla_nvme_regi.patch
  patches.suse/scsi-qla2xxx-Fix-wrong-return-value-in-qlt_chk_unres.patch
  patches.suse/scsi-qla2xxx-Honor-status-qualifier-in-FCP_RSP-per-s.patch
  patches.suse/scsi-qla2xxx-Log-calling-function-name-in-qla2x00_ge.patch
  patches.suse/scsi-qla2xxx-Make-tgt_port_database-available-in-ini.patch
  patches.suse/scsi-qla2xxx-Performance-tweak.patch
  patches.suse/scsi-qla2xxx-Reduce-duplicate-code-in-reporting-spee.patch
  patches.suse/scsi-qla2xxx-Remove-pci-dma-compat-wrapper-API.patch
  patches.suse/scsi-qla2xxx-Remove-redundant-variable-initializatio.patch
  patches.suse/scsi-qla2xxx-Remove-superfluous-memset.patch
  patches.suse/scsi-qla2xxx-Remove-unneeded-variable-rval.patch
  patches.suse/scsi-qla2xxx-Setup-debugfs-entries-for-remote-ports.patch
  patches.suse/scsi-qla2xxx-Simplify-return-value-logic-in-qla2x00_.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.102-k.patch
  patches.suse/scsi-qla2xxx-Update-version-to-10.02.00.103-k.patch
  patches.suse/scsi-qla2xxx-Warn-if-done-or-free-are-called-on-an-a.patch
  patches.suse/scsi-smartpqi-add-id-support-for-smartraid-3152-8i.patch
  patches.suse/scsi-smartpqi-add-raid-bypass-counter.patch
  patches.suse/scsi-smartpqi-avoid-crashing-kernel-for-controller-issues.patch
  patches.suse/scsi-smartpqi-bump-version-to-1-2-16-010.patch
  patches.suse/scsi-smartpqi-identify-physical-devices-without-issuing-inquiry.patch
  patches.suse/scsi-smartpqi-support-device-deletion-via-sysfs.patch
  patches.suse/scsi-smartpqi-update-logical-volume-size-after-expansion.patch
  No effect on expanded tree.
- commit cd0c079</changelog>
  <changelog author="ddiss@suse.de" date="1602763209">- patches.suse/target-rbd-detect-stripe_unit-SCSI-block-size-misali.patch:
  (bsc#1177090).
- patches.suse/target-rbd-support-COMPARE_AND_WRITE.patch:
  (fate#318836, bsc#1177090).
- patches.suse/target-compare-and-write-backend-driver-sense-handli.patch:
  (bsc#1177719).
- commit 3918814</changelog>
</package>
<package pkgid="824da8e9763c190d46daab506f051f35d323d24ac1e308a1622b62fe73f8a786" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.50.1"/>
  <changelog author="ailiop@suse.com" date="1604491200">- xfs: don't update mtime on COW faults (bsc#1167030).
- commit cbce094</changelog>
  <changelog author="varad.gautam@suse.com" date="1604577600">- net: mscc: ocelot: fix race condition with TX timestamping
  (bsc#1178461).
- commit 9045c8f</changelog>
  <changelog author="mbenes@suse.cz" date="1604577601">- Do not create null.i000.ipa-clones file (bsc#1178330)
  Kbuild cc-option compiles /dev/null file to test for an option
  availability. Filter out -fdump-ipa-clones so that null.i000.ipa-clones
  file is not generated in the process.
- commit 1425d4e</changelog>
  <changelog author="tiwai@suse.de" date="1604664000">- staging: comedi: cb_pcidas: Allow 2-channel commands for AO
  subdevice (git-fixes).
- ath10k: fix VHT NSS calculation when STBC is enabled
  (git-fixes).
- ath10k: start recovery process when payload length exceeds
  max htc length for sdio (git-fixes).
- leds: bcm6328, bcm6358: use devres LED registering function
  (git-fixes).
- ACPI / extlog: Check for RDMSR failure (git-fixes).
- ACPI: video: use ACPI backlight for HP 635 Notebook (git-fixes).
- media: tw5864: check status of tw5864_frameinterval_get
  (git-fixes).
- media: platform: Improve queue set up flow for bug fixing
  (git-fixes).
- commit 12c4dfb</changelog>
  <changelog author="tiwai@suse.de" date="1604664001">- PM: runtime: Drop runtime PM references to supplier on link
  removal (git-fixes).
- staging: octeon: Drop on uncorrectable alignment or FCS error
  (git-fixes).
- staging: octeon: repair "fixed-link" support (git-fixes).
- power: supply: bq27xxx: report "not charging" on all types
  (git-fixes).
- p54: avoid accessing the data mapped to streaming DMA
  (git-fixes).
- PCI/ACPI: Whitelist hotplug ports for D3 if power managed by
  ACPI (git-fixes).
- media: uvcvideo: Fix dereference of out-of-bound list iterator
  (git-fixes).
- media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any
  effect (git-fixes).
- media: imx274: fix frame interval handling (git-fixes).
- commit abe310e</changelog>
  <changelog author="tiwai@suse.de" date="1604664002">- regulator: defer probe when trying to get voltage from
  unresolved supply (git-fixes).
- usb: cdc-acm: fix cooldown mechanism (git-fixes).
- drivers: watchdog: rdc321x_wdt: Fix race condition bugs
  (git-fixes).
- power: supply: test_power: add missing newlines when printing
  parameters by sysfs (git-fixes).
- uio: free uio id after uio file node is freed (git-fixes).
- usb: xhci: omit duplicate actions when suspending a runtime
  suspended host (git-fixes).
- USB: adutux: fix debugging (git-fixes).
- usb: typec: tcpm: During PR_SWAP, source caps should be sent
  only after tSwapSourceStart (git-fixes).
- commit 87c92c0</changelog>
  <changelog author="ohering@suse.de" date="1604664003">- hyperv_fb: Update screen_info after removing old framebuffer
  (bsc#1175306).
- x86/kexec: Use up-to-dated screen_info copy to fill boot params
  (bsc#1175306).
- video: hyperv: hyperv_fb: Use physical memory for fb on HyperV
  Gen 1 VMs (bsc#1175306).
- video: hyperv: hyperv_fb: Support deferred IO for Hyper-V
  frame buffer driver (bsc#1175306).
- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V
  host (bsc#1175306).
- commit 6359015</changelog>
  <changelog author="tiwai@suse.de" date="1604836800">- ASoC: codecs: wcd9335: Set digital gain range correctly
  (git-fixes).
- ASoC: cs42l51: manage mclk shutdown delay (git-fixes).
- ASoC: qcom: sdm845: set driver name correctly (git-fixes).
- ASoC: Intel: kbl_rt5663_max98927: Fix kabylake_ssp_fixup
  function (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Qu-16
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for MODX
  (git-fixes).
- ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas
  devices (git-fixes).
- ALSA: hda/realtek - Enable headphone for ASUS TM420 (git-fixes).
- ALSA: hda: prevent undefined shift in
  snd_hdac_ext_bus_get_link() (git-fixes).
- ALSA: hda/realtek - Fixed HP headset Mic can't be detected
  (git-fixes).
- ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
  (git-fixes).
- ALSA: fix kernel-doc markups (git-fixes).
- commit 91a799a</changelog>
  <changelog author="tiwai@suse.de" date="1604923200">- serial: txx9: add missing platform_driver_unregister() on
  error in serial_txx9_init (git-fixes).
- serial: 8250_mtk: Fix uart_get_baud_rate warning (git-fixes).
- USB: serial: cyberjack: fix write-URB completion race
  (git-fixes).
- usb: mtu3: fix panic in mtu3_gadget_stop() (git-fixes).
- can: flexcan: flexcan_remove(): disable wakeup completely
  (git-fixes).
- can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for
  LS1021A (git-fixes).
- can: peak_canfd: pucan_handle_can_rx(): fix echo management
  when loopback is on (git-fixes).
- can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
  (git-fixes).
- can: peak_usb: add range checking in decode operations
  (git-fixes).
- can: can_create_echo_skb(): fix echo skb generation: always
  use skb_clone() (git-fixes).
- can: dev: __can_get_echo_skb(): fix real payload length return
  value for RTR frames (git-fixes).
- can: dev: can_get_echo_skb(): prevent call to kfree_skb()
  in hard IRQ context (git-fixes).
- can: rx-offload: don't call kfree_skb() from IRQ context
  (git-fixes).
- commit efd4e46</changelog>
  <changelog author="ailiop@suse.com" date="1604923201">- xfs: set xefi_discard when creating a deferred agfl free log
  intent item (git-fixes).
- commit 9130952</changelog>
  <changelog author="ailiop@suse.com" date="1604923202">- xfs: flush new eof page on truncate to avoid post-eof corruption
  (git-fixes).
- commit 8dd6e4b</changelog>
  <changelog author="ailiop@suse.com" date="1604923203">- xfs: fix scrub flagging rtinherit even if there is no rt device
  (git-fixes).
- commit abfd9e4</changelog>
  <changelog author="mbenes@suse.cz" date="1604923204">- Refresh
  patches.suse/x86-unwind-orc-Fix-inactive-tasks-with-stack-pointer.patch.
  "series_sort -u" applied
- commit 3711acc</changelog>
  <changelog author="tonyj@suse.de" date="1604923205">- perf/core: Fix a memory leak in perf_event_parse_addr_filter()
  (bsc#1178393, CVE-2020-25704).
- commit ec449ad</changelog>
  <changelog author="fdmanana@suse.com" date="1604923206">- btrfs: send, orphanize first all conflicting inodes when
  processing references (bsc#1178579).
- commit 972ec4e</changelog>
  <changelog author="fdmanana@suse.com" date="1604923207">- btrfs: send, recompute reference path after orphanization of
  a directory (bsc#1178581).
- commit 1067aa3</changelog>
  <changelog author="fdmanana@suse.com" date="1604923208">- btrfs: cleanup cow block on error (bsc#1178584).
- commit 080ee21</changelog>
  <changelog author="fdmanana@suse.com" date="1604923209">- btrfs: reschedule if necessary when logging directory items
  (bsc#1178585).
- commit 5a09bb7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1604923210">- mm/swapfile.c: fix potential memory leak in sys_swapon
  (git-fixes).
- exfat: fix use of uninitialized spinlock on error path
  (git-fixes).
- exfat: fix name_hash computation on big endian systems
  (git-fixes).
- exfat: fix wrong size update of stream entry by typo
  (git-fixes).
- exfat: fix wrong hint_stat initialization in
  exfat_find_dir_entry()  (git-fixes).
- exfat: fix overflow issue in exfat_cluster_to_sector()
  (git-fixes).
- exfat: fix possible memory leak in exfat_find()  (git-fixes).
- commit 97624cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1605009600">- fix patches metadata
- fix Patch-mainline:
  patches.suse/exfat-fix-name_hash-computation-on-big-endian-systems.patch
  patches.suse/exfat-fix-overflow-issue-in-exfat_cluster_to_sector.patch
  patches.suse/exfat-fix-possible-memory-leak-in-exfat_find.patch
  patches.suse/exfat-fix-use-of-uninitialized-spinlock-on-error-path.patch
  patches.suse/exfat-fix-wrong-hint_stat-initialization-in-exfat_find_dir_entry.patch
  patches.suse/exfat-fix-wrong-size-update-of-stream-entry-by-typo.patch
  patches.suse/mmswapfile.c-fix-potential-memory-leak-in-sys_swapon.patch
- commit 37fd1b5</changelog>
</package>
<package pkgid="0bb051c80e3133cf075532181575256a3bb6b3951fe8992e21881b5e7823d722" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.54.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- blacklist.conf: Supported arches enable SPARSEMEM_VMEMMAP
- commit 928fb30</changelog>
  <changelog author="mgorman@suse.de" date="1606737601">- blacklist.conf: KASAN is not enabled
- commit b3c7026</changelog>
  <changelog author="mgorman@suse.de" date="1606737602">- mm: swap: use smp_mb__after_atomic() to order LRU bit set
  (git fixes (mm/vmscan)).
- mm: swap: make page_evictable() inline (git fixes (mm/vmscan)).
- commit b3e8c49</changelog>
  <changelog author="mgorman@suse.de" date="1606737603">- mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  (git fixes (mm/mempolicy)).
- commit 82f5309</changelog>
  <changelog author="mgorman@suse.de" date="1606737604">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737605">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737606">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737607">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737608">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737609">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737610">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737611">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737612">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737613">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737614">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
</package>
<package pkgid="4d57d637bd92dca63de5193f78a751cd22ddac26767a897d8d54ac7cfbaab543" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.57.1"/>
  <changelog author="mgorman@suse.de" date="1606737600">- mm/ksm: fix NULL pointer dereference when KSM zero page is
  enabled (git fixes (mm/ksm)).
- commit d498a49</changelog>
  <changelog author="ohering@suse.de" date="1606737601">- hv_balloon: disable warning when floor reached (git-fixes).
- commit 09540b9</changelog>
  <changelog author="ohering@suse.de" date="1606737602">- video: hyperv_fb: Fix the cache type when mapping the VRAM (git-fixes).
- commit 1b3b221</changelog>
  <changelog author="ohering@suse.de" date="1606737603">- scripts/lib/SUSE/MyBS.pm: properly close prjconf Macros: section
- commit 965157e</changelog>
  <changelog author="pmladek@suse.com" date="1606737604">- blacklist.conf: printk: just a preparation step for lockless ringbuffer.
- commit 8515274</changelog>
  <changelog author="pmladek@suse.com" date="1606737605">- blacklist.conf: printk: cosmetic; documentation
- commit 609fe64</changelog>
  <changelog author="aaptel@suse.com" date="1606737606">- cifs: remove bogus debug code (bsc#1179427).
- commit 8a0ced9</changelog>
  <changelog author="aaptel@suse.com" date="1606737607">- Convert trailing spaces and periods in path components
  (bsc#1179424).
- commit 88891c3</changelog>
  <changelog author="aaptel@suse.com" date="1606737608">- cifs: Return the error from crypt_message when enc/dec key
  not found (bsc#1179426).
- commit b7a0fce</changelog>
  <changelog author="jack@suse.cz" date="1606737609">- patches.suse/block-Fix-use-after-free-in-blkdev_get.patch: Update tags
  (bsc#1173834 bsc#1179141 CVE-2020-15436).
- commit 6c1fbdb</changelog>
  <changelog author="tiwai@suse.de" date="1606737610">- romfs: fix uninitialized memory leak in romfs_dev_read()
  (CVE-2020-29371 bsc#1179429).
- commit aaf36e7</changelog>
  <changelog author="mhocko@suse.com" date="1606824000">- Update
  patches.suse/mm-mmap-c-close-race-between-munmap-and-expand_upwards-downwards.patch
  (bsc#1174527, bsc#1179432, CVE-2020-29369).
- commit f55babe</changelog>
  <changelog author="mkubecek@suse.cz" date="1606824001">- fix patches metadata
- fix Patch-mainline:
  patches.suse/mm-gup-allow-FOLL_FORCE-for-get_user_pages_fast.patch
  patches.suse/mm-ksm-fix-NULL-pointer-dereference-when-KSM-zero-page-is-enabled.patch
  patches.suse/mm-mempolicy-require-at-least-one-nodeid-for-MPOL_PREFERRED.patch
  patches.suse/mm-swap-make-page_evictable-inline.patch
  patches.suse/mm-swap-use-smp_mb__after_atomic-to-order-LRU-bit-set.patch
- commit 6289c65</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1606824002">- devlink: Make sure devlink instance and port are in same net
  namespace (bsc#1154353).
- net: ena: fix packet's addresses for rx_offset feature
  (bsc#1174852).
- net: ena: handle bad request id in ena_netdev (bsc#1174852).
- RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP
  (jsc#SLE-8449).
- RDMA/hns: Fix wrong field of SRQ number the device supports
  (jsc#SLE-8449).
- commit e8d7cf3</changelog>
  <changelog author="pmladek@suse.com" date="1606824003">- blacklist.conf: Remove duplicate entry (git-fixes)
- commit 9169068</changelog>
  <changelog author="msuchanek@suse.de" date="1606824004">- rpm/kernel-{source,binary}.spec: do not include ghost symlinks
  (boo#1179082).
- commit 76a9256</changelog>
  <changelog author="ailiop@suse.com" date="1606824005">- xfs: prohibit fs freezing when using empty transactions
  (bsc#1179442).
- commit e04335b</changelog>
  <changelog author="mkubecek@suse.cz" date="1606910400">- Update kabi files.
- update to December 2020 maintenance update submission (commit 1069cd144905)
- commit 7054e5b</changelog>
  <changelog author="ailiop@suse.com" date="1606996800">- Revert "xfs: complain if anyone tries to create a too-large buffer"
  This reverts commit 293e483ad8434ee10a65f76743a0a654e34e76c6.
  References: bsc#1179425, bsc#1179550
- commit d88fa75</changelog>
  <changelog author="mkubecek@suse.cz" date="1606996801">- Delete patches.suse/fs-select.c-batch-user-writes-in-do_sys_poll.patch (bsc#1179419)
  This patch causes a regression and while we are not 100% sure it does not
  just trigger a bug somewhere else, as it's only a performance optimization,
  dropping it for now is the safer option.
- commit b48bf35</changelog>
</package>
<package pkgid="ded2abaf79be32c7899632ac25bd30bb12e044388ea7d89b7fd44190ef9d6b90" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.60.1"/>
  <changelog author="mkubecek@suse.cz" date="1610020800">- Update kabi files.
- update from January 2021 maintenance update submission (commit 4ff469b6e1a0)
- commit a9bc2aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1610020801">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit c554179</changelog>
  <changelog author="bp@suse.de" date="1610020802">- x86/mm/numa: Remove uninitialized_var() usage (bsc#1152489).
- commit ec737c3</changelog>
  <changelog author="bp@suse.de" date="1610020803">- blacklist.conf: 44623b2818f4 crypto: x86/crc32c - fix building with clang ias
- commit 4260c52</changelog>
  <changelog author="wqu@suse.com" date="1610107200">- Move "btrfs: qgroup: don't try to wait flushing if we're already holding
  a transaction (bsc#1179575)." to sorted section
- commit 464edf7</changelog>
  <changelog author="dwagner@suse.de" date="1610107201">- nvme-multipath: fix bogus request queue reference put
  (bsc#1175389).
- commit ef51578</changelog>
  <changelog author="tiwai@suse.de" date="1610107202">- drm: bail out of nouveau_channel_new if channel init fails
  (CVE-2020-25639 bsc#1176846).
- commit 1ef70aa</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366400">- blacklist.conf: 2c2b3ad2c4c8 ("spi: spi-fsl-dspi: Use max_native_cs
  instead of num_chipselect to set SPI_MCR")
  Depends on 7d93aecdb58d4 ("spi: Add generic support for unused native cs
  with cs-gpios") which at the moment is not worth back-porting as it'll
  break kABI.
- commit bafcdfd</changelog>
  <changelog author="nsaenzjulienne@suse.de" date="1610366401">- arm64: mm: Fix ARCH_LOW_ADDRESS_LIMIT when !CONFIG_ZONE_DMA
  (git-fixes).
- commit 52bc22f</changelog>
  <changelog author="mgorman@suse.de" date="1610366402">- sched/fair: Check for idle core in wake_affine (git fixes
  (sched)).
- commit 2caffed</changelog>
  <changelog author="tiwai@suse.de" date="1610366403">- USB: serial: iuu_phoenix: fix DMA from stack (git-fixes).
- usb: gadget: configfs: Preserve function ordering after bind
  failure (git-fixes).
- usb: gadget: select CONFIG_CRC32 (git-fixes).
- usb: usbip: vhci_hcd: protect shift size (git-fixes).
- usb: gadget: f_uac2: reset wMaxPacketSize (git-fixes).
- usb: dwc3: ulpi: Use VStsDone to detect PHY regs access
  completion (git-fixes).
- USB: yurex: fix control-URB timeout handling (git-fixes).
- usb: chipidea: ci_hdrc_imx: add missing put_device() call in
  usbmisc_get_init_data() (git-fixes).
- usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
  (git-fixes).
- USB: gadget: legacy: fix return error code in acm_ms_bind()
  (git-fixes).
- USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST
  quirk set (git-fixes).
- staging: mt7621-dma: Fix a resource leak in an error handling
  path (git-fixes).
- dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
  (git-fixes).
- dmaengine: xilinx_dma: fix incompatible param warning in
  _child_probe() (git-fixes).
- dmaengine: xilinx_dma: check dma_async_device_register return
  value (git-fixes).
- dmaengine: dw-edma: Fix use after free in dw_edma_alloc_chunk()
  (git-fixes).
- dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the
  error handling path of the probe function (git-fixes).
- i2c: i801: Fix the i2c-mux gpiod_lookup_table not being properly
  terminated (git-fixes).
- i2c: sprd: use a specific timeout to avoid system hang up issue
  (git-fixes).
- wan: ds26522: select CONFIG_BITREVERSE (git-fixes).
- wil6210: select CONFIG_CRC32 (git-fixes).
- crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
  (git-fixes).
- spi: stm32: FIFO threshold level - fix align packet size
  (git-fixes).
- regmap: debugfs: Fix a memory leak when calling
  regmap_attach_dev (git-fixes).
- dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
  (git-fixes).
- dmaengine: at_hdmac: add missing put_device() call in
  at_dma_xlate() (git-fixes).
- dmaengine: at_hdmac: Substitute kzalloc with kmalloc
  (git-fixes).
- commit da0ba2f</changelog>
  <changelog author="tiwai@suse.de" date="1610366404">- regmap: debugfs: Fix a reversed if statement in
  regmap_debugfs_init() (git-fixes).
- commit 6e1e482</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1610366405">- IB/hfi1: Ensure correct mm is used at all times (bsc#1179878
  CVE-2020-27835).
- IB/hfi1: Remove module parameter for KDETH qpns (bsc#1179878).
- IB/hfi1: Remove kobj from hfi1_devdata (bsc#1179878).
- commit 79bac5c</changelog>
  <changelog author="fdmanana@suse.com" date="1610366406">- btrfs: fix missing delalloc new bit for new delalloc ranges
  (bsc#1180773).
- btrfs: make btrfs_dirty_pages take btrfs_inode (bsc#1180773).
- btrfs: make btrfs_set_extent_delalloc take btrfs_inode
  (bsc#1180773).
- commit fba9b10</changelog>
  <changelog author="bp@suse.de" date="1610366407">- x86/mm: Fix leak of pmd ptlock (bsc#1152489).
- commit cb571f0</changelog>
  <changelog author="bp@suse.de" date="1610366408">- x86/mtrr: Correct the range check before performing MTRR type
  lookups (bsc#1152489).
- commit 41cceca</changelog>
  <changelog author="bp@suse.de" date="1610366409">- x86/resctrl: Use an IPI instead of task_work_add() to update
  PQR_ASSOC MSR (bsc#1152489).
- commit 309f3cb</changelog>
  <changelog author="bp@suse.de" date="1610366410">- x86/resctrl: Don't move a task to the same resource group
  (bsc#1152489).
- commit 8a696c5</changelog>
  <changelog author="bp@suse.de" date="1610452800">- blacklist.conf: 4f8af077a02e docs: Fix reST markup when linking to sections
- commit 28e1ebf</changelog>
  <changelog author="mkubecek@suse.cz" date="1610452801">- fix patch metadata
- fix Patch-mainline:
  patches.suse/sched-fair-Check-for-idle-core-in-wake_affine.patch
- commit b5830a4</changelog>
</package>
<package pkgid="384effbee89038317fcd8fbdd6043898422570cd9fc3baaab29c1ed69809cc3f" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.63.1"/>
  <changelog author="tiwai@suse.de" date="1611835200">- Move upstreamed sound patches into sorted section
- commit 84af2ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1611921600">- series.conf: cleanup
- update upstream references and move into sorted section:
  patches.suse/0001-futex-Ensure-the-correct-return-value-from-futex_loc.patch
  patches.suse/0002-futex-Replace-pointless-printk-in-fixup_owner.patch
  patches.suse/0003-futex-Provide-and-use-pi_state_update_owner.patch
  patches.suse/0004-rtmutex-Remove-unused-argument-from-rt_mutex_proxy_u.patch
  patches.suse/0005-futex-Use-pi_state_update_owner-in-put_pi_state.patch
  patches.suse/0006-futex-Simplify-fixup_pi_state_owner.patch
  patches.suse/0007-futex-Handle-faults-correctly-for-PI-futexes.patch
- commit 16c5d87</changelog>
  <changelog author="tiwai@suse.de" date="1611921601">- can: dev: prevent potential information leak in can_fill_info()
  (git-fixes).
- mt7601u: fix kernel crash unplugging the device (git-fixes).
- mt7601u: fix rx buffer refcounting (git-fixes).
- NFC: fix resource leak when target index is invalid (git-fixes).
- NFC: fix possible resource leak (git-fixes).
- firmware: imx: select SOC_BUS to fix firmware build (git-fixes).
- HID: multitouch: Apply MT_QUIRK_CONFIDENCE quirk for multi-input
  devices (git-fixes).
- media: rc: ensure that uevent can be read directly after rc
  device register (git-fixes).
- HID: multitouch: do not filter mice nodes (git-fixes).
- commit f7694e1</changelog>
  <changelog author="tiwai@suse.de" date="1611921602">- HID: multitouch: Remove MT_CLS_WIN_8_DUAL (git-fixes).
- Refresh
  patches.suse/HID-quirks-Always-poll-three-more-Lenovo-PixArt-mice.patch.
- commit bed41ce</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921603">- vfio iommu: Add dma available capability (bsc#1179572
  LTC#190110).
- commit 6544fbc</changelog>
  <changelog author="jeyu@suse.de" date="1611921604">- module: delay kobject uevent until after module init call (bsc#1178631).
- Refresh patches.suse/supported-flag
- commit 2796828</changelog>
  <changelog author="mkoutny@suse.com" date="1611921605">- ptrace: Set PF_SUPERPRIV when checking capability (bsc#1163930).
- ptrace: reintroduce usage of subjective credentials in
  ptrace_has_cap() (bsc#1163930).
- commit 1d6137d</changelog>
  <changelog author="mkoutny@suse.com" date="1611921606">- blacklist.conf: Add 15ec0fcff6da kernel/sys.c: replace do_brk with do_brk_flags in comment of prctl_set_mm_map()
- commit 7773384</changelog>
  <changelog author="mkoutny@suse.com" date="1611921607">- blacklist.conf: Add 4230e2deaa48 stop_machine, rcu: Mark functions as notrace
- commit 9596511</changelog>
  <changelog author="mkoutny@suse.com" date="1611921608">- mm: memcontrol: fix missing wakeup polling thread (bsc#1181584).
- commit c0272b7</changelog>
  <changelog author="ptesarik@suse.cz" date="1611921609">- net/smc: fix direct access to ib_gid_addr-&gt;ndev in
  smc_ib_determine_gid() (git-fixes).
- net/smc: fix valid DMBE buffer sizes (git-fixes).
- net/smc: fix sock refcounting in case of termination
  (git-fixes).
- net/smc: reset sndbuf_desc if freed (git-fixes).
- net/smc: set rx_off for SMCR explicitly (git-fixes).
- net/smc: fix dmb buffer shortage (git-fixes).
- net/smc: remove freed buffer from list (git-fixes).
- net/smc: switch smcd_dev_list spinlock to mutex (git-fixes).
- net/smc: fix sleep bug in smc_pnet_find_roce_resource()
  (git-fixes).
- net/smc: cancel event worker during device removal (git-fixes).
- net/smc: check for valid ib_client_data (git-fixes).
- net/smc: fix cleanup for linkgroup setup failures (git-fixes).
- net/smc: no peer ID in CLC decline for SMCD (git-fixes).
- net/smc: transfer fasync_list in case of fallback (git-fixes).
- commit a9e7337</changelog>
  <changelog author="ailiop@suse.com" date="1611921610">- iomap: fix WARN_ON_ONCE() from unprivileged users (bsc#1181494).
- commit 2958b80</changelog>
  <changelog author="tiwai@suse.de" date="1612008000">- ACPI/IORT: Do not blindly trust DMA masks from firmware
  (git-fixes).
- PM: hibernate: flush swap writer after marking (git-fixes).
- ACPI: sysfs: Prefer "compatible" modalias (git-fixes).
- drm/i915: Check for all subplatform bits (git-fixes).
- drm/nouveau/svm: fail NOUVEAU_SVM_INIT ioctl on unsupported
  devices (git-fixes).
- commit 274cf96</changelog>
  <changelog author="tiwai@suse.de" date="1612094400">- HID: wacom: Correct NULL dereference on AES pen proximity
  (git-fixes).
- HID: wacom: Fix memory leakage caused by kfifo_alloc
  (git-fixes).
- HID: wacom: Constify attribute_groups (git-fixes).
- HID: wacom: do not call hid_set_drvdata(hdev, NULL) (git-fixes).
- commit c0ccdd7</changelog>
  <changelog author="dbueso@suse.de" date="1612180800">-  Update patch References tags for futex fixes (bsc#1181349 CVE-2021-3347)
- commit b3fac23</changelog>
  <changelog author="tiwai@suse.de" date="1612180801">- leds: trigger: fix potential deadlock with libata (git-fixes).
- commit d410ad0</changelog>
  <changelog author="mkubecek@suse.cz" date="1612180802">- nbd: freeze the queue while we're adding connections
  (CVE-2021-3348 bsc#1181504).
- commit 78453ee</changelog>
  <changelog author="bp@suse.de" date="1612180803">- blacklist.conf: e45122893a98 x86/fpu: Add kernel_fpu_begin_mask() to selectively initialize state
- commit f36235a</changelog>
  <changelog author="ptesarik@suse.cz" date="1612180804">- blacklist.conf: no need to fix code for CONFIG_KEXEC_JUMP
- commit 3abe54d</changelog>
  <changelog author="ematsumiya@suse.de" date="1612180805">- scsi: qla2xxx: Fix description for parameter
  ql2xenforce_iocb_limit (bsc#1179142).
- commit f3ce867</changelog>
</package>
<package pkgid="cd4380aee1a8cf24998de6d3915b70a29b2362f61bd2a194deb3842603e5122c" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.66.2"/>
  <changelog author="denis.kirjanov@suse.com" date="1614600000">- net: hns3: add reset check for VF updating port based VLAN
  (git-fixes).
- commit 9609b2a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600001">- net: hns3: fix for VLAN config when reset failed (git-fixes).
- commit 4209fa0</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600002">- net: nixge: fix potential memory leak in nixge_probe() (git-fixes).
- commit cdc643b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1614600003">- net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (git-fixes).
- commit 401e086</changelog>
  <changelog author="palcantara@suse.de" date="1614600004">- cifs: check all path components in resolved dfs target
  (bsc#1181710).
- commit 91cd435</changelog>
  <changelog author="palcantara@suse.de" date="1614600005">- cifs: introduce helper for finding referral server
  (bsc#1181710).
- commit f74681b</changelog>
  <changelog author="palcantara@suse.de" date="1614600006">- cifs: fix nodfs mount option (bsc#1181710).
- commit 94844a1</changelog>
  <changelog author="msuchanek@suse.de" date="1614600007">- pseries/drmem: don't cache node id in drmem_lmb struct (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- Refresh patches.suse/powerpc-pseries-update-device-tree-before-ejecting-h.patch.
- commit 23f514c</changelog>
  <changelog author="msuchanek@suse.de" date="1614600008">- powerpc/pseries: Don't enforce MSI affinity with kdump
  (bsc#1181655 ltc#190855).
- commit 1c51dbc</changelog>
  <changelog author="msuchanek@suse.de" date="1614600009">- pseries/hotplug-memory: hot-add: skip redundant LMB lookup (bsc#1132477 ltc#175530).
- Refresh patches.suse/powerpc-pseries-group-lmb-operation-and-memblock-s.patch.
- commit 5c9ac54</changelog>
  <changelog author="msuchanek@suse.de" date="1614600010">- powerpc/numa: Fix build when CONFIG_NUMA=n (bsc#1132477
  ltc#175530).
- commit 2b8436c</changelog>
  <changelog author="jgross@suse.com" date="1614686400">- smp: Add source and destination CPUs to __call_single_data
  (bsc#1180846).
- commit 10244d3</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686401">- series.conf: cleanup
- move submitted patches to appropriate section:
  patches.suse/btrfs-free-correct-amount-of-space-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-don-t-flush-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-cleanup-try_flush_qgroup.patch
  patches.suse/btrfs-remove-btrfs_inode-from-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-simplify-code-flow-in-btrfs_delayed_inode_reserve_metadata.patch
  patches.suse/btrfs-unlock-extents-in-btrfs_zero_range-in-case-of-errors.patch
  (no effect on expanded tree)
- commit d631784</changelog>
  <changelog author="jgross@suse.com" date="1614686402">- kABI: Fix kABI after modifying struct __call_single_data
  (bsc#1180846).
- commit 3c0b378</changelog>
  <changelog author="mkubecek@suse.cz" date="1614686403">- series.conf: refresh
- update upstream reference and resort:
  patches.suse/ibmvnic-fix-a-race-between-open-and-reset.patch
- commit 9ab8f38</changelog>
  <changelog author="jgross@suse.com" date="1614686404">- kernel/smp: Provide CSD lock timeout diagnostics (bsc#1180846).
- update config files (CSD_LOCK_WAIT_DEBUG=n)
- commit 59bec34</changelog>
  <changelog author="jgross@suse.com" date="1614686405">- kernel/smp: add boot parameter for controlling CSD lock
  debugging (bsc#1180846).
- commit fb4cf71</changelog>
  <changelog author="jgross@suse.com" date="1614686406">- Update config files: activate CONFIG_CSD_LOCK_WAIT_DEBUG for x86 (bsc#1180846).
- commit f88a325</changelog>
  <changelog author="jgross@suse.com" date="1614686407">- kernel/smp: prepare more CSD lock debugging (bsc#1180846).
- commit d717867</changelog>
  <changelog author="jgross@suse.com" date="1614686408">- kernel/smp: add more data to CSD lock debugging (bsc#1180846).
- commit 08badc9</changelog>
</package>
<package pkgid="b86d7b3ac24b07e560ae57c69c1a1fd3cdd6c137384fbdeb8e0abb0ab2b1aacd" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.69.1"/>
  <changelog author="fdmanana@suse.com" date="1617192000">- btrfs: fix subvolume/snapshot deletion not triggered on mount
  (bsc#1184219).
- btrfs: always pin deleted leaves when there are active tree
  mod log users (bsc#1184224).
- btrfs: fix race when cloning extent buffer during rewind of
  an old root (bsc#1184193).
- btrfs: fix stale data exposure after cloning a hole with
  NO_HOLES enabled (bsc#1184220).
- btrfs: fix extent buffer leak on failure to copy root
  (bsc#1184218).
- btrfs: abort the transaction if we fail to inc ref in
  btrfs_copy_root (bsc#1184217).
- commit ed1e8cf</changelog>
  <changelog author="fdmanana@suse.com" date="1617192001">- btrfs: fix exhaustion of the system chunk array due to
  concurrent allocations (bsc#1183386).
- commit 419a4b8</changelog>
  <changelog author="msuchanek@suse.de" date="1617192002">- blacklist.conf: Add qspinlock commit revert.
- commit fbfdb5d</changelog>
  <changelog author="jgross@suse.com" date="1617192003">- xen-blkback: don't leak persistent grants from xen_blkbk_map()
  (bsc#1183646, CVE-2021-28688, XSA-371).
- commit f0c74da</changelog>
  <changelog author="tonyj@suse.de" date="1617278400">- perf/x86/intel: Fix a crash caused by zero PEBS status
  (CVE-2021-28971 bsc#1184196).
- commit fbc79f5</changelog>
  <changelog author="mkubecek@suse.cz" date="1617278401">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-numa-fix-bad-pmd-by-atomically-check-for-pmd_trans_huge-when-marking-page-tables-prot_numa.patch
- commit e108d2c</changelog>
  <changelog author="tiwai@suse.de" date="1617278402">- pinctrl: rockchip: fix restore error in resume (git-fixes).
- commit 55f3605</changelog>
  <changelog author="glin@suse.com" date="1617278403">- bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
  (bsc#1155518).
- commit 5d2df4e</changelog>
  <changelog author="jdelvare@suse.de" date="1617278404">- Update references of patches.suse/edac-amd64-set-grain-per-dimm.patch
- commit 881829d</changelog>
  <changelog author="fdmanana@suse.com" date="1617278405">- Update
  patches.suse/btrfs-fix-race-when-cloning-extent-buffer-during-rew.patch
  (bsc#1184193 CVE-2021-28964).
- commit 2c0102a</changelog>
  <changelog author="tiwai@suse.de" date="1617451200">- ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
  (git-fixes).
- ALSA: hda/realtek: call alc_update_headset_mode() in
  hp_automute_hook (git-fixes).
- ALSA: hda/realtek: fix a determine_headset_type issue for a
  Dell AIO (git-fixes).
- commit e6c8166</changelog>
  <changelog author="tiwai@suse.de" date="1617451201">- PM: runtime: Fix race getting/putting suppliers at probe
  (git-fixes).
- drm/tegra: sor: Grab runtime PM reference across reset
  (git-fixes).
- commit 064f8f4</changelog>
  <changelog author="jlee@suse.com" date="1617451202">- ACPICA: Enable sleep button on ACPI legacy wake (bsc#1181383).
- commit 0d9d4e6</changelog>
  <changelog author="msuchanek@suse.de" date="1617537600">- powerpc/pseries/mobility: handle premature return from H_JOIN
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- powerpc/pseries/mobility: use struct for shared state
  (bsc#1181674 ltc#189159 git-fixes bsc#1183662 ltc#191922).
- commit e22e432</changelog>
  <changelog author="tiwai@suse.de" date="1617624000">- extcon: Fix error handling in extcon_dev_register (git-fixes).
- extcon: Add stubs for extcon_register_notifier_all() functions
  (git-fixes).
- staging: rtl8192e: Change state information from u16 to u8
  (git-fixes).
- staging: rtl8192e: Fix incorrect source in memcpy() (git-fixes).
- usb: dwc2: Prevent core suspend when port connection flag is 0
  (git-fixes).
- usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board
  (git-fixes).
- usb: musb: Fix suspend with devices connected for a64
  (git-fixes).
- usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
  (git-fixes).
- USB: cdc-acm: fix use-after-free after probe failure
  (git-fixes).
- USB: cdc-acm: fix double free on probe failure (git-fixes).
- cdc-acm: fix BREAK rx code path adding necessary calls
  (git-fixes).
- usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
  (git-fixes).
- commit 7e1215f</changelog>
  <changelog author="dbueso@suse.de" date="1617624001">- include/linux/sched/mm.h: use rcu_dereference in in_vfork()
  (git-fixes).
- stop_machine: mark helpers __always_inline (git-fixes).
- selinux: fix error initialization in inode_doinit_with_dentry()
  (git-fixes).
- completion: Drop init_completion define (git-fixes).
- lib/syscall: fix syscall registers retrieval on 32-bit platforms
  (git-fixes).
- selinux: Fix error return code in sel_ib_pkey_sid_slow()
  (git-fixes).
- commit 3909dc1</changelog>
  <changelog author="dbueso@suse.de" date="1617624002">- selinux: fix inode_doinit_with_dentry() LABEL_INVALID error
  handling (git-fixes).
- commit fa2b85d</changelog>
  <changelog author="ohering@suse.de" date="1617710400">- video: hyperv_fb: Fix a double free in hvfb_probe (git-fixes).
- commit c457d1d</changelog>
  <changelog author="glin@suse.com" date="1617710401">- libbpf: Fix BTF dump of pointer-to-array-of-struct
  (bsc#1155518).
- libbpf: Use SOCK_CLOEXEC when opening the netlink socket
  (bsc#1155518).
- selftests/bpf: Set gopt opt_class to 0 if get tunnel opt failed
  (bsc#1155518).
- libbpf: Clear map_info before each bpf_obj_get_info_by_fd
  (bsc#1155518).
- samples, bpf: Add missing munmap in xdpsock (bsc#1155518).
- selftests/bpf: Mask bpf_csum_diff() return value to 16 bits
  in test_verifier (bsc#1155518).
- selftests/bpf: No need to drop the packet when there is no
  geneve opt (bsc#1155518).
- commit 8d0ef1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1617710402">- fix patch metadata
- fix Patch-mainline:
  patches.suse/completion-Drop-init_completion-define.patch
- commit 33fba8d</changelog>
</package>
<package pkgid="2d409898b822b029e8b2686c76dde0573a9b4c4825aa903a6183b7b74a0261af" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.72.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- qlcnic: fix error return code in qlcnic_83xx_restart_hw() (git-fixes).
- commit 4792038</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- net: ethernet: ti: cpsw: fix error return code in cpsw_probe() (git-fixes).
- commit bbd1c86</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup (git-fixes).
- commit 418a7e1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: b44: fix error return code in b44_init_one() (git-fixes).
- commit 405f041</changelog>
  <changelog author="glin@suse.com" date="1618315204">- bpf, sockmap: Fix sk-&gt;prot unhash op reset (bsc#1155518).
- bpf: Fix verifier jsgt branch analysis on max bound
  (bsc#1155518).
- samples/bpf: Fix possible hang in xdpsock with multiple threads
  (bsc#1155518).
- commit 50946be</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315205">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315206">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315207">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315208">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315209">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="jroedel@suse.de" date="1618315210">- iommu/vt-d: Use device numa domain if RHSA is missing (bsc#1184585).
- Refresh patches.suse/iommu-vt-d-fix-ineffective-devtlb-invalidation-for-subdevices.
- commit 6ad821c</changelog>
  <changelog author="msuchanek@suse.de" date="1618315211">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315212">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315213">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="glin@suse.com" date="1618315214">- libbpf: Only create rx and tx XDP rings when necessary
  (bsc#1155518).
- commit 02ec945</changelog>
  <changelog author="lhenriques@suse.de" date="1618315215">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315216">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
  <changelog author="bp@suse.de" date="1618315217">- blacklist.conf: 66c1b6d74cd7 x86: Move TS_COMPAT back to asm/thread_info.h
- commit 3533f06</changelog>
  <changelog author="martin.wilck@suse.com" date="1618315218">- dm mpath: switch paths in dm_blk_ioctl() code path (bsc#1167574,
  bsc#1175995, bsc#1184485).
- commit 981c2ae</changelog>
  <changelog author="lhenriques@suse.de" date="1618401600">- Update patches.suse/fuse-fix-bad-inode.patch (bsc#1184211
  CVE-2020-36322).
  Updated patch metadata to include CVE number.
- commit 6ecd48e</changelog>
</package>
<package pkgid="92b6b55e2c5db185fb66b816e320379e581d9628a1986df9e9f49a08ce2f62c4" name="kernel-preempt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.75.1"/>
  <changelog author="wqu@suse.com" date="1620043200">- btrfs: track qgroup released data in own variable in
  insert_prealloc_file_extent (bsc#1185549).
- commit 4d34a1c</changelog>
  <changelog author="wqu@suse.com" date="1620043201">- btrfs: fix qgroup data rsv leak caused by falloc failure
  (bsc#1185549).
- commit 210f7a5</changelog>
  <changelog author="ptesarik@suse.cz" date="1620043202">- ima: Free IMA measurement buffer after kexec syscall
  (git-fixes).
- commit 2cf366a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043203">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043204">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043205">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043206">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043207">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043208">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043209">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043210">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="dwagner@suse.de" date="1620129601">- scripts/git_sort/git_sort.py: Update nvme repositories
- commit e849c44</changelog>
  <changelog author="dwagner@suse.de" date="1620129602">- nvme-multipath: reset bdev to ns head when failover (bsc#178378
  bsc#1182999).
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit ee2dc7b</changelog>
  <changelog author="mkoutny@suse.com" date="1620129603">- mm: memcontrol: fix cpuhotplug statistics flushing
  (bsc#1185606).
- commit 3bba386</changelog>
  <changelog author="tiwai@suse.de" date="1620129604">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
  <changelog author="dwagner@suse.de" date="1620129605">- nvme: add 'kato' sysfs attribute (bsc#1179825).
- nvme: sanitize KATO setting (bsc#1179825).
- commit f3a2791</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216000">- rpm: drop /usr/bin/env in interpreter specification
  OBS checks don't like /usr/bin/env in script interpreter lines but upstream
  developers tend to use it. A proper solution would be fixing the depedency
  extraction and drop the OBS check error but that's unlikely to happen so
  that we have to work around the problem on our side and rewrite the
  interpreter lines in scripts before collecting files for packages instead.
- commit 45c5c1a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216001">- Update kabi files.
- update from May 2021 maintenance update submission (commit 0a8fae2b39f2)
- commit 8a0c3f3</changelog>
  <changelog author="mkubecek@suse.cz" date="1620216002">- fix patch metadata
- fix Patch-mainline:
  patches.suse/mm-memcontrol-fix-cpuhotplug-statistics-flushing.patch
- commit fc7f89c</changelog>
</package>
<package pkgid="d577aa9bb68006c783d907bac01451e6eb03e3c1e71cd48c29f591a104ace657" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="f40afa8ba783cf6e4a0d084a386eb80d674374cd6b818b6f59ef3adf280d1bee" name="kernel-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="f97815f0b04cc21743c9d632c59eeee39fe874488cc24afd81e98edb55919e7a" name="kernel-rt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="84531f71ccd509451d01966a06bba46b9b427cfbf1e5924956544949d9ea5dd8" name="kernel-rt-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="8a12ce41869d806afc80c73e75673db8c207f1d8e25de9f538b9a79b3ab95214" name="kernel-rt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="ff34d58aac7fb348aa936a1aae2581faea3253893ece842d8cb1651b88c5837c" name="kernel-rt-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="e48dfd8c1773120829db3fbb0c01c1d322010846c27a14b50c8c66e74823403f" name="kernel-rt-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="e0fa394bc5cbecd9909b680c7a18355e8d246c0d5f2a42dafb2dbf29e614f0f0" name="kernel-rt-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="d30e9923d4b2399b21d968105498371be8db837b6c7fcd04346832d138cb764e" name="kernel-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="b182b253fa62647ea539c1a11e5f4ed5ecf642830aa9cdd23f0054eb4be59aa0" name="kernel-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="16fe1bdcf10d0dff48a45eada57f8ee6b10e551ac7a25671031fd053e0f501c3" name="kernel-rt_debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="c2caaeace0e434e6b29b8699aebe98ed972cba92cb655ecfbb6aa2c702c2821d" name="kernel-rt_debug-debugsource" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="c12393e057f43ce204de6457f1ba559de1efaefeafc69aad4d7eb61fa2ae76a6" name="kernel-rt_debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="b1f2c901b79ec50c071e2855b9e49b5a08634153e07763c59e249e817aa60f04" name="kernel-rt_debug-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="64c549ac63165d5db3884e3af8728d3bfc7141434b53e32f4e34330697837564" name="kernel-rt_debug-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="c9344663ba711910db28cb2ceee704db62278af134a0620ca8452b87dea17c65" name="kernel-rt_debug-extra-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="93ba331353a72bd207d203e7323c566290dd09bff60554f7479e75edc08221dd" name="kexec-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="carnold@suse.com" date="1509451200">- With Xen 4.10 there is a new required library called xentoolcore
  (bsc#1037779)
  kexec-tools-xen-static.patch
- Refreshed kexec-tools-disable-test.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
</package>
<package pkgid="7eb736260da9dba8f9b1ed2cdbf2f085bb1d58f4fc674b2537904eba5fcb86aa" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="carnold@suse.com" date="1509451200">- With Xen 4.10 there is a new required library called xentoolcore
  (bsc#1037779)
  kexec-tools-xen-static.patch
- Refreshed kexec-tools-disable-test.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
</package>
<package pkgid="745146d9875b2eeab6a402e8ff11fa641119abdbab950542eadc73330890b261" name="kexec-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.20" rel="lp152.4.6.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="2a9ad5b689914433df8ed2cdb63cd73355aec0606a827a6ff7ef0b33788d604f" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.6.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="1fe65fbde05e5e0538feb14ec3439f15da42f3742017a2cbeac63c874c32dccc" name="kexec-tools-debugsource" arch="i586">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="carnold@suse.com" date="1509451200">- With Xen 4.10 there is a new required library called xentoolcore
  (bsc#1037779)
  kexec-tools-xen-static.patch
- Refreshed kexec-tools-disable-test.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
</package>
<package pkgid="6554a864889fe74643cbf95fb88a1b5b6eee638c4afaec33f67473e4bab8421b" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.3.1"/>
  <changelog author="carnold@suse.com" date="1509451200">- With Xen 4.10 there is a new required library called xentoolcore
  (bsc#1037779)
  kexec-tools-xen-static.patch
- Refreshed kexec-tools-disable-test.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
</package>
<package pkgid="dcda5bebd8d01b5f9326ba5120e3395b280f461763fefe4e6c5b12d571865b99" name="kexec-tools-debugsource" arch="i586">
  <version epoch="0" ver="2.0.20" rel="lp152.4.6.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="f742247821f78b72c8a19515812edab402e5cda721917e8b6864365e00bf2a2e" name="kexec-tools-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.20" rel="lp152.4.6.1"/>
  <changelog author="msuchanek@suse.com" date="1515412800">- Fix kexec error on ppc64 (bsc#1074947).
  0046-powerpc-fix-command-line-overflow-error.patch
  0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Create compat link for rckexec-loader systemd service
- Convert the asciidoc file to normal man in order to drop asciidoc dep
  * python2 only obsoletion and upstream has only raw manpages too
- Properly state all post/postun dependencies (systemd, suse-module-tools)
- There is no reason for exclusive arch if we state all archs
- Bump to version 2.0.16
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.14..v2.0.16
- Remove support for older products to trivialize spec file
- Make sure to not pull python2 via asciidoc
- Drop merged patch 0001-kexec-tools-2.0.14.git.patch
- Drop all patches from upstream git:
  * 0002-ppc64-Reduce-number-of-ELF-LOAD-segments.patch
  * 0003-kexec-Increase-the-upper-limit-for-RAM-segments.patch
  * 0004-alpha-add-missing-__NR_kexec_load-definition.patch
  * 0005-kexec-implemented-XEN-KEXEC-STATUS-to-determine-if-a.patch
  * 0006-kexec-Remove-redundant-space-from-help-message.patch
  * 0007-purgatory-Add-purgatory.map-and-purgatory.ro.sym-to-.patch
  * 0008-kexec-Add-option-to-get-crash-kernel-region-size.patch
  * 0009-crashdump-arm-Add-get_crash_kernel_load_range-functi.patch
  * 0010-crashdump-arm64-Add-get_crash_kernel_load_range-func.patch
  * 0011-crashdump-cris-Add-get_crash_kernel_load_range-funct.patch
  * 0012-crashdump-ia64-Add-get_crash_kernel_load_range-funct.patch
  * 0013-crashdump-m68k-Add-get_crash_kernel_load_range-funct.patch
  * 0014-crashdump-mips-Add-get_crash_kernel_load_range-funct.patch
  * 0015-crashdump-ppc-Add-get_crash_kernel_load_range-functi.patch
  * 0016-crashdump-ppc64-Add-get_crash_kernel_load_range-func.patch
  * 0017-crashdump-s390-Add-get_crash_kernel_load_range-funct.patch
  * 0018-crashdump-sh-Add-get_crash_kernel_load_range-functio.patch
  * 0019-gitignore-add-two-generated-files-in-purgatory.patch
  * 0020-Only-print-debug-message-when-failed-to-serach-for-k.patch
  * 0021-build_mem_phdrs-check-if-p_paddr-is-invalid.patch
  * 0022-uImage-fix-realloc-pointer-confusion.patch
  * 0023-uImage-Fix-uImage_load-for-little-endian-machines.patch
  * 0024-uImage-Add-new-IH_ARCH_xxx-definitions.patch
  * 0025-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0026-uImage-use-char-instead-of-unsigned-char-for-uImage_.patch
  * 0027-arm64-add-uImage-support.patch
  * 0028-vmcore-dmesg-Define-_GNU_SOURCE.patch
  * 0029-Don-t-use-L-width-specifier-with-integer-values.patch
  * 0030-x86-x86_64-Fix-format-warning-with-die.patch
  * 0031-ppc-Fix-format-warning-with-die.patch
  * 0032-crashdump-Remove-stray-get_crashkernel_region-declar.patch
  * 0033-x86-Support-large-number-of-memory-ranges.patch
  * 0034-Fix-broken-Xen-support-in-configure.ac.patch
  * 0035-kexec-extend-the-semantics-of-kexec_iomem_for_each_l.patch
  * 0036-kexec-generalize-and-rename-get_kernel_stext_sym.patch
  * 0037-arm64-identify-PHYS_OFFSET-correctly.patch
  * 0038-arm64-change-return-values-on-error-to-negative.patch
  * 0039-arm64-kdump-identify-memory-regions.patch
  * 0040-arm64-kdump-add-elf-core-header-segment.patch
  * 0041-arm64-kdump-set-up-kernel-image-segment.patch
  * 0042-arm64-kdump-set-up-other-segments.patch
  * 0043-arm64-kdump-add-DT-properties-to-crash-dump-kernel-s.patch
  * 0044-arm64-kdump-Add-support-for-binary-image-files.patch
  * 0045-Handle-additional-e820-memmap-type-strings.patch
  * 0046-powerpc-fix-command-line-overflow-error.patch
  * 0047-fix-how-RMA-top-is-deduced.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1519387200">- kexec-tools-ppc64-parse-ibm-dynamic-memory.patch: kexec/ppc64:
  add support to parse ibm, dynamic-memory-v2 property
  (bsc#1081789, LTC#164625).
- kexec-tools-add-a-helper-function-to-add-ranges.patch: kexec: add
  a helper function to add ranges (bsc#1081789, LTC#164625).</changelog>
  <changelog author="msuchanek@suse.com" date="1522756800">- kexec: add -a option to fall back to KEXEC_LOAD when KEXEC_FILE_LOAD is not
  supported (bsc#1080916, boo#1076839).
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
- kexec-tools-ppc64-leverage-kexec_file_load-support.patch: kexec/ppc64:
  leverage kexec_file_load support (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929600">- kexec-tools-fix-kexec-p-segfault.patch: Fix a segmentation fault
  when trying to run "kexec -p" (bsc#1080916).</changelog>
  <changelog author="ptesarik@suse.com" date="1522929601">- kexec-tools-vmcoreinfo-in-xen.patch: Revert "kexec-tools: Read
  always one vmcoreinfo file" (bsc#1085626, bsc#951740).</changelog>
  <changelog author="ptesarik@suse.com" date="1524139200">- Bump to version 2.0.17
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.16..v2.0.17
- Drop kexec-tools-xen-static.patch: upstream uses run-time dynamic
  linking to address the same issue.
- Drop all patches from upstream git:
  * kexec-tools-add-a-helper-function-to-add-ranges.patch
  * kexec-tools-ppc64-parse-ibm-dynamic-memory.patch
  * kexec-tools-ppc64-leverage-kexec_file_load-support.patch
  * kexec-tools-Return-ENOSYS-when-kexec-does-not-know.patch
  * kexec-tools-Fix-option-checks-to-take-KEXEC_FILE_LOAD.patch
  * kexec-tools-Do-not-special-case-the-s-option.patch
  * kexec-tools-Add-option-to-revert-s.patch
  * kexec-tools-Add-option-to-fall-back-to-KEXEC_LOAD.patch
  * kexec-tools-Document-s-c-and-a-options-in-the-man-page.patch
  * kexec-tools-fix-kexec-p-segfault.patch</changelog>
  <changelog author="Alberto Planas Dominguez &lt;aplanas@suse.com&gt;" date="1536580800">- kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
  Upstream backport.
  In response to a change in binutils, commit b21ebf2fb4c
  (x86: Treat R_X86_64_PLT32 as R_X86_64_PC32) was applied to
  the linux kernel during the 4.16 development cycle and has
  since been backported to earlier stable kernel series. The
  change results in the failure message in $SUBJECT when
  rebooting via kexec.
  Fix this by replicating the change in kexec.</changelog>
  <changelog author="ptesarik@suse.com" date="1541073600">- Bump to version 2.0.18
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.17..v2.0.18
- Drop patches from upstream git:
  * kexec-tools-fix-for-Unhandled-rela-relocation-R_X86_64_PLT32.patch
- Remove the confusing kdump binary (no longer in upstream).</changelog>
  <changelog author="ptesarik@suse.com" date="1541073601">- Remove bogus Url RPM tag: The project does not have a home page.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="Petr Tesarik &lt;ptesarik@suse.com&gt;" date="1560513600">- Bump to version 2.0.19
  Changelog: http://git.kernel.org/cgit/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.18..v2.0.19</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1576497600">- Bump to version 2.0.20
  Changelog: https://git.kernel.org/pub/scm/utils/kernel/kexec/kexec-tools.git/log/?id=refs/tags/v2.0.19..v2.0.20
- Backport a upstream patch series: [jsc#SLE-9032]
  Subject: [PATCH v2 0/3] arm64: handle "reserved" entries in /proc/iomem
  * kexec-tools-add-variant-helper-functions.patch
  * kexec-tools-arm64-kexec-allocate-memory-space-avoiding-reserved-regions.patch
  * kexec-tools-arm64-kdump-deal-with-resource-entries-in-proc-iomem.patch</changelog>
  <changelog author="Chester Lin &lt;clin@suse.com&gt;" date="1578657600">- Fix compiling errors of multiboot2_x86_* functions for i586
  * kexec-tools-build-multiboot2-for-i386.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1580299200">- Fix build errors on old distributions
  * kexec-tools-video-capability.patch
  * kexec-tools-SYS_getrandom.patch</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100800">- kexec-tools-fix-kexec_file_load-error-handling.patch: Fix the
  error handling if kexec_file_load() fails (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1584100801">- kexec-tools-reset-getopt-before-falling-back-to-legacy.patch:
  Reset getopt before falling back to legacy syscall (bsc#1166105).</changelog>
  <changelog author="Petr Tesa?&#xED;k &lt;ptesarik@suse.com&gt;" date="1585915200">- kexec-tools-s390-Reset-kernel-command-line-on-syscal.patch: s390:
  Reset kernel command line on syscall fallback (bsc#1167868).</changelog>
  <changelog author="Olaf Hering &lt;ohering@suse.com&gt;" date="1605009600">- Remove kexec-tools-xen-balloon-up.patch (bsc#1176606,
  bsc#1174508)
  This patch was introduced to address bsc#694863; it enabled kexec
  for HVM at that time. Meanwhile Xen 4.7 introduced "soft-reset"
  for HVM domUs. This host feature removes the requirement to
  un-ballon the domU prior kexec.
  With Xen 4.13 cpuid faulting became the default, which affects
  the approach used in this patch to detect the domU type. As a
  result, invoking kexec in dom0 failed.</changelog>
  <changelog author="Wolfgang Frisch &lt;wolfgang.frisch@suse.com&gt;" date="1618920000">- Hardening: Link as PIE (bsc#1185020).</changelog>
</package>
<package pkgid="856bcfa6801876ad15ceabc830dc521bca064d29bbaa04b1513dd25729fe0024" name="keyutils-debuginfo" arch="i586">
  <version epoch="0" ver="1.5.10" rel="lp152.6.3.1"/>
  <changelog author="lmuelle@suse.com" date="1371384000">- Remove deprecated -c arg while calling cifs.upcall from request-key.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1375099200">- Use macros bit more and fix noreplace on folder, which is not
  good.</changelog>
  <changelog author="nfbrown@suse.com" date="1400068800">- New upstream release 1.5.9.
  Particularly adds keyctl_invalidate, needed for latest nfs-utils.
  A few minor bugfixes and usability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1401969600">- correct the obsoletes and provides in baselibs.conf to be correct.
  bnc#881533</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- keyutils-nodate.patch: avoid including the timestamp. bsc#916180</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- move binaries from /bin to /usr/bin (bsc#1029969)
- keyutils-usr-move.patch: also adjust the request-key.conf file</changelog>
  <changelog author="meissner@suse.com" date="1493985600">- updated to 1.5.10
  - added "dh_compute" callback
  - manpage improvements</changelog>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
</package>
<package pkgid="10cc8a4538c05d8c7965e18fb93ac2115b86c6a3f3bfab51b388ba8e2ccdf6ff" name="keyutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.10" rel="lp152.6.3.1"/>
  <changelog author="lmuelle@suse.com" date="1371384000">- Remove deprecated -c arg while calling cifs.upcall from request-key.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1375099200">- Use macros bit more and fix noreplace on folder, which is not
  good.</changelog>
  <changelog author="nfbrown@suse.com" date="1400068800">- New upstream release 1.5.9.
  Particularly adds keyctl_invalidate, needed for latest nfs-utils.
  A few minor bugfixes and usability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1401969600">- correct the obsoletes and provides in baselibs.conf to be correct.
  bnc#881533</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- keyutils-nodate.patch: avoid including the timestamp. bsc#916180</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- move binaries from /bin to /usr/bin (bsc#1029969)
- keyutils-usr-move.patch: also adjust the request-key.conf file</changelog>
  <changelog author="meissner@suse.com" date="1493985600">- updated to 1.5.10
  - added "dh_compute" callback
  - manpage improvements</changelog>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
</package>
<package pkgid="5a76061e71f83b054ac9616b65d7c0c7df439a4a52c6792f859820fe48fc12f6" name="keyutils-debugsource" arch="i586">
  <version epoch="0" ver="1.5.10" rel="lp152.6.3.1"/>
  <changelog author="lmuelle@suse.com" date="1371384000">- Remove deprecated -c arg while calling cifs.upcall from request-key.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1375099200">- Use macros bit more and fix noreplace on folder, which is not
  good.</changelog>
  <changelog author="nfbrown@suse.com" date="1400068800">- New upstream release 1.5.9.
  Particularly adds keyctl_invalidate, needed for latest nfs-utils.
  A few minor bugfixes and usability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1401969600">- correct the obsoletes and provides in baselibs.conf to be correct.
  bnc#881533</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- keyutils-nodate.patch: avoid including the timestamp. bsc#916180</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- move binaries from /bin to /usr/bin (bsc#1029969)
- keyutils-usr-move.patch: also adjust the request-key.conf file</changelog>
  <changelog author="meissner@suse.com" date="1493985600">- updated to 1.5.10
  - added "dh_compute" callback
  - manpage improvements</changelog>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
</package>
<package pkgid="a12515048fab47bbebc40beaf205b7a428e49cdeda7a9ff406ef9fa84c469af0" name="keyutils-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.10" rel="lp152.6.3.1"/>
  <changelog author="lmuelle@suse.com" date="1371384000">- Remove deprecated -c arg while calling cifs.upcall from request-key.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1375099200">- Use macros bit more and fix noreplace on folder, which is not
  good.</changelog>
  <changelog author="nfbrown@suse.com" date="1400068800">- New upstream release 1.5.9.
  Particularly adds keyctl_invalidate, needed for latest nfs-utils.
  A few minor bugfixes and usability improvements.</changelog>
  <changelog author="meissner@suse.com" date="1401969600">- correct the obsoletes and provides in baselibs.conf to be correct.
  bnc#881533</changelog>
  <changelog author="meissner@suse.com" date="1423051200">- keyutils-nodate.patch: avoid including the timestamp. bsc#916180</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- move binaries from /bin to /usr/bin (bsc#1029969)
- keyutils-usr-move.patch: also adjust the request-key.conf file</changelog>
  <changelog author="meissner@suse.com" date="1493985600">- updated to 1.5.10
  - added "dh_compute" callback
  - manpage improvements</changelog>
  <changelog author="meissner@suse.com" date="1509969600">- add keyutils-devel for baselibs, to allow biarch LTP builds.
  (bsc#1061591)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="Marcus Meissner &lt;meissner@suse.com&gt;" date="1610020800">- adjust the library license to be LPGL-2.1+ only (the tools are GPL2+,
  the library is just LGPL-2.1+) (bsc#1180603)</changelog>
</package>
<package pkgid="aadbafd93927dc40c41bb5ccab000d8976ad2f20d2f67dfc9853c515cf4f3774" name="kgeography-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- Changes since 19.04.2:
  * Burundi changed its capital</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * qSort is deprecated, use std::sort
  * Follow KDE_APPLICATIONS_VERSION
  * Ignore files
  * Use more https
  * Fix spelling of Nur-Sultan</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Port setMargins</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Russia districts: Fix Kaliningrad not being shown as part of Northwestern (kde#414857)
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release
  * Russia districts: Fix Kaliningrad not being shown as part of Northwestern (kde#414857)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Use official sources (instead of Wikipedia) for the Norwegian flags
  * Updated flag (coat of arms) for Viken county in Norway
  * Updated map, flags and metadata for the new counties of Norway</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * appdata: use canonical cdn screenshot location
  * Use official sources (instead of Wikipedia) for the Norwegian flags
  * Updated flag (coat of arms) for Viken county in Norway
  * Updated map, flags and metadata for the new counties of Norway
  * Fix link: ui.html -&gt; menus.html</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1618488000">- Add patch from upstream to fix a crash when the user disables
  the  "Wait for validation" option (kde#435555):
  * 0001-Fix-crash-when-Wait-for-validation-is-not-enabled.patch</changelog>
</package>
<package pkgid="c38cc4ad3a63e05c116301356a30b47cf98b8c76b48f4f7383305c86fa20deb1" name="kgeography-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- Changes since 19.04.2:
  * Burundi changed its capital</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * qSort is deprecated, use std::sort
  * Follow KDE_APPLICATIONS_VERSION
  * Ignore files
  * Use more https
  * Fix spelling of Nur-Sultan</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Port setMargins</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Russia districts: Fix Kaliningrad not being shown as part of Northwestern (kde#414857)
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release
  * Russia districts: Fix Kaliningrad not being shown as part of Northwestern (kde#414857)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Use official sources (instead of Wikipedia) for the Norwegian flags
  * Updated flag (coat of arms) for Viken county in Norway
  * Updated map, flags and metadata for the new counties of Norway</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * appdata: use canonical cdn screenshot location
  * Use official sources (instead of Wikipedia) for the Norwegian flags
  * Updated flag (coat of arms) for Viken county in Norway
  * Updated map, flags and metadata for the new counties of Norway
  * Fix link: ui.html -&gt; menus.html</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1618488000">- Add patch from upstream to fix a crash when the user disables
  the  "Wait for validation" option (kde#435555):
  * 0001-Fix-crash-when-Wait-for-validation-is-not-enabled.patch</changelog>
</package>
<package pkgid="b179548a32664f2a5e331c011b2626aeef8340741620689e64af6f975eb30c97" name="kget-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- No code changes since 19.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Use the new logging category directory with ECM &gt;= 5.59.0
  * Fix minor typos
  * Add DesktopEntry to notifyrc
  * Port qSort.
  * Port away from KLocale::global()-&gt;languageCodeToName().
  * Move country code generation into CountryModel::setupModelData.
  * Use locale aware sorting for countries and languages.
  * Fix missing include.
  * Port KLocale::global()-&gt;allCountriesList() to QLocale.
  * Reduce dependency on KDELibs4Support.</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * [mirrorsearch] Remove no longer available services from default list (kde#410406)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- No code change since 19.08.3</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Add missing includes
  * We need to use return value here
  * nepomuk is dead from long long time
  * Port some deprecated methods
  * Use Qt::WindowFlags
  * Use new syntax
  * Port deprecated method
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation
  * Fix minor EBN issues, update links
  * Port deprecated methods</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Remove duplicate % sign in progress bar (kde#421471)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1609329600">- Add patches to fix issues reported by valgrind (boo#1180352):
  * 0001-Initialize-Transfer-m_runningSeconds.patch
  * 0002-Don-t-create-dangling-iterators-in-TransferMultiSegK.patch</changelog>
</package>
<package pkgid="bc3319b022bb315b50d250b6a8f62263d025fc20b4610537a607a5f266ec9bf8" name="kget-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- No code changes since 19.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Use the new logging category directory with ECM &gt;= 5.59.0
  * Fix minor typos
  * Add DesktopEntry to notifyrc
  * Port qSort.
  * Port away from KLocale::global()-&gt;languageCodeToName().
  * Move country code generation into CountryModel::setupModelData.
  * Use locale aware sorting for countries and languages.
  * Fix missing include.
  * Port KLocale::global()-&gt;allCountriesList() to QLocale.
  * Reduce dependency on KDELibs4Support.</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * [mirrorsearch] Remove no longer available services from default list (kde#410406)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- No code change since 19.08.3</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Update Appstream for new release</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Add missing includes
  * We need to use return value here
  * nepomuk is dead from long long time
  * Port some deprecated methods
  * Use Qt::WindowFlags
  * Use new syntax
  * Port deprecated method
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation
  * Fix minor EBN issues, update links
  * Port deprecated methods</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Remove duplicate % sign in progress bar (kde#421471)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1609329600">- Add patches to fix issues reported by valgrind (boo#1180352):
  * 0001-Initialize-Transfer-m_runningSeconds.patch
  * 0002-Don-t-create-dangling-iterators-in-TransferMultiSegK.patch</changelog>
</package>
<package pkgid="a94500df4202b1d6e906dd811effe407c730838b31f3410c49fcbde28265b85c" name="kglobalaccel-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="ee15329784f6a2cf375c32d2c0fbb02db9fa183fea82c2ac8fcb2c8c1bb8d462" name="kglobalaccel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="14fee719bb9d55ab55e4a3076d9f2161b338df70d210e381f494d84bb98b3724" name="kglobalaccel-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="5d8816bddccf660bf361d0c283ff41044b3359786996cdd8c1f4e653025c62b5" name="kglobalaccel-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="17374ac92068df7821224eca1014690bc3c80f930d58362778a93ebf641c4fdf" name="kglobalaccel5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="009fe9daae8fcb21a4113510b8caba47ac8f64d7bf554a3654157773cddd3cae" name="kglobalaccel5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="143f831635041063ffb869a8704964b8395ee958bd7ac5aa1c137be4dfd91c62" name="kglobalaccel5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="6e6010c8d1700fc1e111a91d8ad2fab3cab6fe9eff695a43fb9fd5a2a66a0eed" name="kglobalaccel5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="b94143bcd9cb30f4a9d5d796406ec70f8dbaf5becf5b379d57f42ea8e366223d" name="kicad-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.1.8" rel="lp152.2.3.1"/>
  <changelog author="davejplater@gmail.com" date="1537272000">- Fix build against boost-1.68 with kicad-fix-boost168-build.patch.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538222400">- Enable spice simulator support
- Install python bindings in python_sitearch
- Deduplicate pcbnew python binary module
- Adapt libboost_* BuildRequires for current distribution versions
- Remove obsolete CMAKE options
- Set various pathes using using CMAKE options instead of patching
  files.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538395200">- Correct license, KiCad 5.0 no longer is GPL-2.0. Stop distributing
  a wrong license file inside the package.</changelog>
  <changelog author="davejplater@gmail.com" date="1538740800">- Add build option to fix boo#1107776 kicad: 3D models do not work</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539172800">- Correct license to GPL-3.0-or-later AND AGPL-3.0-or-later
  Add LICENSE.AGPLv3 for some included third party code</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539864000">- Update to bugfix release 5.0.1
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2018/10/KiCad-5.0.1-Release/ for details.
- Do proper fix for 3d plugindir, use absolute LIBDIR instead of
  deriving it from BINDIR:
  Add 0001-Use-absolute-path-CMAKE_INSTALL_FULL_LIBDIR-for-3d-v.patch
- Drop upstream kicad-fix-boost168-build.patch.
- Add Recommends: for new kicad-templates package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1540555200">- Add Requires: libngspice0
- Fix name for dlopen'ed libngspice.so.0
  Add 0001-Use-fixed-version-for-libngspice.so.0.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1544097600">- Update to bugfix release 5.0.2
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2018/12/KiCad-5.0.2-Release/ for details.
- Drop upstreamed 0001-Use-fixed-version-for-libngspice.so.0.patch
- Drop COPYRIGHT/LICENSE.AGPLv3, both files are included in the tarball now.</changelog>
  <changelog author="davejplater@gmail.com" date="1544616000">- Allow up to date versions of symbol, footprint, template and 3D
  packages.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1550577600">- Set disk size constraint to avoid build failure seen on aarch64</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1550577601">- Revert broken change for symbol etc. library versions, there is nothing
  disallowing recent packages.
- Exclude PPC, not yet supported</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552305600">- Update to minor release 5.1.0
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2019/03/KiCad-5.1.0-Release/ for details.
- Remove obsolete kicad-library-repos-install.patch
- Remove upstream 0001-Use-absolute-path-CMAKE_INSTALL_FULL_LIBDIR-for-3d-v.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1555070400">- Enable build for PowerPC, supported since KiCad 5.1.0.
  Also fixes a recurrent rebuild of kicad-doc, due to it having
  an unresolvable dependency on kicad.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1555329600">- Update to minor release 5.1.1
  (Withdrawn due to a critical bug in netlist generation)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556193600">- Update to minor release 5.1.2
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2019/04/KiCad-5.1.2-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1565179200">- Update to minor release 5.1.4
  See http://kicad-pcb.org/blog/2019/08/KiCad-5.1.4-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574078400">- Update to version 5.1.5
  See http://kicad-pcb.org/blog/2019/11/KiCad-5.1.5-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1596196800">- Update to version 5.1.6
  See http://kicad-pcb.org/blog/2020/05/KiCad-5.1.6-Release/ for details.
- Switch from OCE to OCC OpenCascade implementation, as recommended
  by upstream (FreeCAD uses OCC now as well).
- Fix compilation with latest wxWidgets:
  0001-Remove-creation-on-the-fly-of-wxPaintEvent-instances.patch
- Drop kicad-user-library.patch, only relevant for KiCad 4.0
  footprint libraries.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1601294400">- Update to version 5.1.7, no changelog provided
- Drop now upstream
  0001-Remove-creation-on-the-fly-of-wxPaintEvent-instances.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1604664000">- Update to version 5.1.8
  See https://kicad.org/blog/2020/11/KiCad-5.1.8-Release/ for details.</changelog>
</package>
<package pkgid="a69698be549db43c4b14e0c5772549f16c84dd53527fcd175e40a2d84aa4f5f3" name="kicad-debugsource" arch="x86_64">
  <version epoch="0" ver="5.1.8" rel="lp152.2.3.1"/>
  <changelog author="davejplater@gmail.com" date="1537272000">- Fix build against boost-1.68 with kicad-fix-boost168-build.patch.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538222400">- Enable spice simulator support
- Install python bindings in python_sitearch
- Deduplicate pcbnew python binary module
- Adapt libboost_* BuildRequires for current distribution versions
- Remove obsolete CMAKE options
- Set various pathes using using CMAKE options instead of patching
  files.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1538395200">- Correct license, KiCad 5.0 no longer is GPL-2.0. Stop distributing
  a wrong license file inside the package.</changelog>
  <changelog author="davejplater@gmail.com" date="1538740800">- Add build option to fix boo#1107776 kicad: 3D models do not work</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539172800">- Correct license to GPL-3.0-or-later AND AGPL-3.0-or-later
  Add LICENSE.AGPLv3 for some included third party code</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1539864000">- Update to bugfix release 5.0.1
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2018/10/KiCad-5.0.1-Release/ for details.
- Do proper fix for 3d plugindir, use absolute LIBDIR instead of
  deriving it from BINDIR:
  Add 0001-Use-absolute-path-CMAKE_INSTALL_FULL_LIBDIR-for-3d-v.patch
- Drop upstream kicad-fix-boost168-build.patch.
- Add Recommends: for new kicad-templates package</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1540555200">- Add Requires: libngspice0
- Fix name for dlopen'ed libngspice.so.0
  Add 0001-Use-fixed-version-for-libngspice.so.0.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1544097600">- Update to bugfix release 5.0.2
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2018/12/KiCad-5.0.2-Release/ for details.
- Drop upstreamed 0001-Use-fixed-version-for-libngspice.so.0.patch
- Drop COPYRIGHT/LICENSE.AGPLv3, both files are included in the tarball now.</changelog>
  <changelog author="davejplater@gmail.com" date="1544616000">- Allow up to date versions of symbol, footprint, template and 3D
  packages.</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1550577600">- Set disk size constraint to avoid build failure seen on aarch64</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1550577601">- Revert broken change for symbol etc. library versions, there is nothing
  disallowing recent packages.
- Exclude PPC, not yet supported</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1552305600">- Update to minor release 5.1.0
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2019/03/KiCad-5.1.0-Release/ for details.
- Remove obsolete kicad-library-repos-install.patch
- Remove upstream 0001-Use-absolute-path-CMAKE_INSTALL_FULL_LIBDIR-for-3d-v.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1555070400">- Enable build for PowerPC, supported since KiCad 5.1.0.
  Also fixes a recurrent rebuild of kicad-doc, due to it having
  an unresolvable dependency on kicad.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1555329600">- Update to minor release 5.1.1
  (Withdrawn due to a critical bug in netlist generation)</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1556193600">- Update to minor release 5.1.2
  This version contains critical bugfixes and minor improvements.
  See http://kicad-pcb.org/blog/2019/04/KiCad-5.1.2-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1565179200">- Update to minor release 5.1.4
  See http://kicad-pcb.org/blog/2019/08/KiCad-5.1.4-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1574078400">- Update to version 5.1.5
  See http://kicad-pcb.org/blog/2019/11/KiCad-5.1.5-Release/ for details.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1596196800">- Update to version 5.1.6
  See http://kicad-pcb.org/blog/2020/05/KiCad-5.1.6-Release/ for details.
- Switch from OCE to OCC OpenCascade implementation, as recommended
  by upstream (FreeCAD uses OCC now as well).
- Fix compilation with latest wxWidgets:
  0001-Remove-creation-on-the-fly-of-wxPaintEvent-instances.patch
- Drop kicad-user-library.patch, only relevant for KiCad 4.0
  footprint libraries.</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1601294400">- Update to version 5.1.7, no changelog provided
- Drop now upstream
  0001-Remove-creation-on-the-fly-of-wxPaintEvent-instances.patch</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1604664000">- Update to version 5.1.8
  See https://kicad.org/blog/2020/11/KiCad-5.1.8-Release/ for details.</changelog>
</package>
<package pkgid="7cccedc3d2191b1fbfe5a80eb8de9f1c61ef703ea3f2bcfdf917bcbfc9412786" name="kiconthemes-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="2ad3fbbf7606bf2f335aa76db1c0e2d6d0a31e75a6ef5d8598854baa5c356986" name="kiconthemes-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="0fb48e9d5f83f8e03799a2d33ea67d64aded318843f163cb25760dea2e75d29f" name="kiconthemes-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="464eb3476eb39ca366106d1482943a80de453b9ace5215216499836d56ed5c7b" name="kiconthemes-devel-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="d09806518106894a257964b49972729e848d0f171d74fd5a69dfa6e367b96e5a" name="kiconthemes-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="e6593be1b7806822b1ce054d49b74090dbc03203ee480f35c9f36e11de3b6796" name="kimageformats-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="df779d44c3e11773c2846e8154d72298b780f0861f7983ff7c4af99bdaa516ba" name="kimageformats-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="9f383e6e9d66acd20492e7802e0fb7cc8cb7130be0e3b49eab7bc361b309a650" name="kimageformats-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="5cbce0ed9807bff95dea6c107eab8dcbde11bf39b7ba085a698c24c7d04a7d17" name="kimageformats-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="506867d2db7fbc82b67d4cde3c641987ba9e2f7c8d6cfa99c37f31dafe2f32d0" name="kimageformats-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="cbc9e188f52b89ba8f0ca4b37a0c01227d6ec51d7826d1d958c6e93f140a6395" name="kimageformats-eps-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="1e8b02cbd93d2ca5d85c18836d673d5abb1178302e627f84c7fff338ddfc6c33" name="kimageformats-eps-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * ras: fix crash on broken files
  * Use auto here too
  * compile without foreach
  * ras: protect the palette QVector too
  * ras: tweak max file check
  * xcf: Fix uninitialized memory use on broken documents
  * add const, helps understand the function better
  * ras: tweak max size that "fits" in a QVector
  * ras: don't assert because we try to allicate a huge vector
  * ras: Protect against divide by zero
  * xcf: Don't divide by 0
  * tga: fail gracefully if readRawData errors
  * ras: fail gracefully on height*width*bpp &gt; length</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * Fix compilation
  * ora:kra: qstrcmp -&gt; memcmp
  * autotests: Also exercise canRead
  * Fix RGBHandler::canRead
  * xcf: Don't crash with files with unsupported layer modes</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * tga: don't try to read more than max_palette_size into palette
  * tga: memset dst if read fails
  * tga: memset the whole palette array, not only the palette_size
  * Initialize the unread bits of _starttab
  * xcf: Fix uninitialized memory use on broken documents
  * ras: Don't overread input on malformed files
  * xcf: layer is const in copy and merge, mark it as such
  * No &amp; is a bit faster here
  * const &amp; is a bit faster here
  * QStringLiteral is a bit faster here</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * QImage::byteCount -&gt; QImage::sizeInByes</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove unused pnm.desktop file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Fix uninitialized memory read</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Add files for testing bug411327
  * xcf: Fix regression when reading files with "unsupported" properties (kde#411327)
  * xcf: Properly read image resolution
  * Port HDR (Radiance RGBE) image loader to Qt5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Workaround crash in Qt due to -DQT_DISABLE_DEPRECATED_BEFORE=0x050d00</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL
  * pic: Fix Invalid-enum-value undefined behaviour</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- No code change since 5.67.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Changes since 5.68.0:
  * Port the HDR plugin from sscanf() to QRegularExpression. Fixes FreeBSD.
  * autotests: print QImageReader::supportedImageFormats, to debug CI failures</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Fix build on Windows.
  * Add support for modern Gimp images/XCF files</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Add some sanity and bounds checking</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1619956800">- Add patch to fix OOB write (oss-fuzz#33742):
  * 0001-xcf-Fix-Stack-buffer-overflow-WRITE-on-broken-files.patch</changelog>
</package>
<package pkgid="ea92b84954becea5c9b38905eaf96042344acb36d5cec4b09bdc3102a454d2a7" name="kio-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="18e387015042d52057c22a362c62a732d515385356c4e53e2e6ef0adc82d1696" name="kio-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="22df87614f9d3b4a3eba1cf9566604dfa417128397b12914ba7465dd7fc4389d" name="kio-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="18199a9e078a15af875a3ed1d5587a44aee851889bbc56c5512dc0d43b1c4fb9" name="kio-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="0081f2026ae5f6e32365520e6bf38b0c81a6a7c281a2317e41b8f155a661784f" name="kio-core-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="44ea382a52cb269f117de64865e95150aef781e9c619d50daf07a9a5586cea22" name="kio-core-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="7c59c25f16b6ade2afd4b23bf54da0e798f27c37fea09961c3d7c03a26155bb1" name="kio-core-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="4eaad08e1697979306d4c88071adfbee9f87609bfb9115f6969b546680143737" name="kio-core-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="34f84b4606349b870fe659ad9f451d5a2ce633b69f616d8d8220a67c8d4a2dc1" name="kio-core-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="8f626aef0a9399c518550b4464c06cdc8e813e101cc891375850084bde06dfc3" name="kio-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="d094b8edcb144cf031043d5a9af31d47dddb44126ecc457483258476338fabf6" name="kio-core-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="145751c82ab0036f7ed81500ba2eb11639b85e03d4b55deb9eec6e0cc610f13c" name="kio-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="29635ad06ba7ad9aa9534e1389baa9655901a2d4a0b8fd258e9fbf31e8f6f1a5" name="kio-core-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="109f1629d6425e14052b5cd881c50965468865059d009e8ee49c3fb5a4779e55" name="kio-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="84226fb8e87af5a44a8b2cf701b2c8240c2e6f08a860325c2294e6d59bc46351" name="kio-core-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="2c3cf68b80f1a52b087545d1b3aea14492c3910fb7e53476170e3b260ebd58ed" name="kio-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="d52b8a1fb9ebcd07f06f6be787352423a001d76890af6aa13dc8f1228c3e8fa7" name="kio-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="a6d3addc945e5045cee41ab81b8ca86a60d049ffec0786779d89d8a0d423a966" name="kio-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="3c5c6ef074d2fc08f9c264bdf38741faed8f911f37cfd6f931d431b4d6e7dc4f" name="kio-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="5155f3c62d7fcd823b956bbf9c33cd562a85ba62e90b49640231f6cade65d02e" name="kio-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="c93374297c264a8c7540004e68aa78f40901d8320e64217c51a34f30924f820d" name="kio-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="0ed38045de97b24911a6ac291399fc171a6da53d3f1b5b2df02c104dea4fb13a" name="kio-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="db6a1da3fd0bedba6bd90b6cb0604b4e3ad9934781a9e03715292dd5197de28f" name="kio-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="2106287a03aac626dc155fccbae2513fc1bcd21cfa902b7cff0c3965f757b518" name="kio-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="8d12d298a18ff0385dbadab3fedfd112a2a92f08d531c62319545a117c94055a" name="kio-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="e380e28bbcd8c9f2ce27a6565d1ab5794ddb67f73eb4f6476d8e2e7074f48106" name="kio-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="03e6c030ffe1c39018bfabae7808ac1a79169b318af6ff61ebe993236eca57b0" name="kio-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="76ab6c4973355457a5b293800aae1499f85d5e4954b80aee9f760f30761bcf72" name="kio-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="1369b300b93e82429704a7ad1740f309ab65275f473cc5f2c7c92fadd04e73f5" name="kio-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="8e82701711d1de7c7fc10578a9daad311153cee90883c560b310d1e25461dde1" name="kio-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="7efa90b37b3d6f4d7371c5df3c12a4a6bc16d5442c490712e1642aa3779c0f07" name="kio-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="c6116335717e14fc2a3044cf5a7babc638fb45d81f552138bb64c3932b611284" name="kio-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="be3d9defd8449911c3c0cab7e7b8342aab1a1d339f81bcaebccc3452f08891b3" name="kio-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="0d68322ca16c118e2c48434c09ff3361097313690a73e9e4b8a88164d86c3ec7" name="kio-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="c179c30c3dea2d215d972c1d103b2685383bdf8c11a891c1907cdd243413a921" name="kio-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="9e5f25c13a8d992c135b40277bd9cd9da88596aae3108f3c1475f2d0afd38954" name="kio-devel-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="94e8a2cd2d7788893c96c00c54e245a3af987bcaa411b0817cdf7d78cc9ad172" name="kio-devel-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="20f4b07c7eaaa95f47c63c6b58010dcdf84fd57a686767fac211897a908f81c4" name="kio-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.12.1"/>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1617710400">- Add patches to avoid breaking text codec inintialization
  (boo#1134688, kde#432406):
  * 0001-Fix-default-codec-being-set-to-US-ASCII-in-KIO-apps.patch
  * 0002-Use-Q_LOGGING_CATEGORY-macro-instead-of-explicit-QLo.patch
  * 0003-Remove-extra-after-Q_LOGGING_MACRO-usage.patch</changelog>
</package>
<package pkgid="21a23129d75d9a7a3498c5ff3581c9fa99372d7f49f2bfdafffedf850cef7120" name="kio-devel-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="e29766858bfc7bfdcfa9c8eae62fc5900598000eef7055b8297a6c4aefd43453" name="kio-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1561550400">- Add upstream patch to fix downloaded files (via http) getting an
  "invalid" modification time (boo#1104595, kde#374420)
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
</package>
<package pkgid="656d896799d1b8712a655437b3a7772c17984a0dc12bd37fd41f845ccdf90252" name="kio-devel-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="0bb0e7df0c636bf8916af38efbf20f5b4c0359ab0d4e4d94a8b99908e24ae7c5" name="kio-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Fix KFileItemTest::testIconNameForUrl test to reflect different icon name
  * Fix i18n number-of-arguments error in knewfilemenu warning message
  * [ftp] Fix wrong access time in Ftp::ftpCopyGet()
  * [CopyJob] Batch reporting processed amount
  * [CopyJob] Report results after finishing copy (kde#407656)
  * Move redundant logic in KIO::iconNameForUrl() into KFileItem::iconName() (kde#356045)
  * Install KFileCustomDialog
  * [Places panel] Don't show Root by default
  * Downgrade "Could not change permissions" dialog box to a qWarning
  * O_PATH is only available on linux. To prevent the compiler from throwing an error due to it's absence fallback to O_RDONLY.
  * Show feedback inline when creating new files or folders
  * Auth Support: Drop privileges if target is not owned by root
  * [copyjob] Only set modification time if the kio-slave provided it (kde#374420)
  * Cancel privilege operation for read-only target with the current user as owner
  * Install in new logging directory when we use kf5 5.59.0
  * Add KProtocolInfo::defaultMimetype
  * Always save view settings when switching from one view mode to another
  * Restore exclusive group for sorting menu items
  * Dolphin-style view modes in the file dialog (kde#86838)
  * kio_ftp: improve error handling when copying to FTP fails
  * kioexec: change the scary debug messages for delayed deletion
- Dropped patches, now upstream:
  * copyjob-Only-set-modification-time-if-the-kio-slave-provided-it.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
</package>
<package pkgid="aa15e34fbce7d8c4c4d4d56dbf4606645159798371b22e072a6311dd15f187e1" name="kio-devel-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="ecd52a7771f91e3130f3e25aa1be0201621af819171d583a7a96e19cec5aea45" name="kio-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.9.1"/>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now
- Drop conditionals for no longer supported openSUSE versions</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH
  * Use identical internet-services icon.
  * Stabilize test KFileWidgetTest::testDropFile
  * Add missing KIOWIDGETS_NO_DEPRECTAED check
  * Deprecate suggestName
  * Replace implementation of suggestName with KFileUtils::suggestName
  * Port internal usage of KIO::suggestName
  * Fix can't enter directory error on some FTP servers with Turkish locale (kde#409740)
  * Port from KRun::runService to KRun::runApplication
  * Fix compiler warnings about initialization order.
  * Look for protocols in the bin dir too, to fix the autotests</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * [CopyJob] Use resolved URL in copyingDone so undo can rename back using local file (kde#391606)
  * FileUndoManager: improve debugging facilities
  * kio_trash: split up copyOrMove, for a better error than "should never happen"
  * FileUndoManager: clearer assert when forgetting to record
  * Fix exit and crash in kio_file when put() fails in readData.
  * autotests: use QVERIFY2 to print the job error if exec() fails
  * [CopyJob] Fix crash when copying an already existing dir and pressing "Skip" (kde#408350)
  * [KUrlNavigator] Add MIME types supported by krarc to isCompressedPath (kde#386448)
  * Added dialog to set execute permission for executable file when trying to run it.
  * [KPropertiesDialog] Always check mount point being null (kde#411517)
  * [KRun] Check mime type for isExecutableFile first
  * Add an icon for the trash root and a proper label
  * Add support for handling QNAM SSL errors to KSslErrorUiData
  * Making FileJob behave consistently.
  * assert slave command finality
  * [KFilePlacesView] Use asynchronous KIO::FileSystemFreeSpaceJob
  * rename internal 'kioslave' helper executable to 'kioslave5' (kde#386859)
  * [KDirOperator] Middle-elide labels that are too long to fit
  * [KDirOperator] Add follow new directories options
  * KDirOperator: Only enable "Create New" menu if the selected item is a directory
  * KIO FTP: Fix file copy hanging when copying to existing file
  * KIO: port to non-deprecated KWindowSystem::setMainWindow
  * KRun: fix runtime warning when widget is null
  * KRun: remove KProcessRunner dependency on QtWidgets
  * Port KIO::Job documentation to Qt5-style connect syntax
  * Make file bookmark names consistent
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
  * [KDirOperator] Use more human-readable sort order descriptions
  * Fix build by removing obsolete qrc file for newly-removed images
  * [Permissions editor] Port icons to use QIcon::fromTheme() (kde#407662)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1568721600">- Update to 5.62.1
  * Fixed interaction with DOS/Windows executables in KRun::runUrl</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Too many changes since 5.62.1, only listing bugfixes:
  * Fix crash on exit in kio_file (kde#408797)
  * [KUrlNavigatorPlacesSelector] Properly identify teardown action (kde#403454)
  * KCoreDirLister: fix crash when creating new folders from kfilewidget (kde#401916)
  * [Advanced Permissions] Fix icon names (kde#411915)</changelog>
  <changelog author="Matthias Fehring &lt;buschmann23@opensuse.org&gt;" date="1571832000">- Fix nextcloud calendar content not visible (kde#413316)
  * kio-5.63.0-fix-depth-with-kdav.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Too many changes since 5.63.0, only listing bugfixes:
  * Treat "application/x-ms-dos-executable" as executable on all platforms (kde#412694)
- Drop kio-5.63.0-fix-depth-with-kdav.patch. Merged upstream.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Too many changes since 5.64.0, only listing bugfixes:
  * [KFileWidget] Avoid calling slotOk right after the url changed (kde#412737)
  * KRun: don't override user preferred app when opening local *.*html and co. files (kde#399020)
  * [KPropertiesDialog] provide a way of showing the target of a symlink (kde#413002)
  * [Remote ioslave] Add Display Name to remote:/ (kde#414345)
  * Fix HTTP proxy settings (kde#414346)
  * [DeleteJob] Use a separate worker thread to run actual IO operation (kde#390748)
  * [KPropertiesDialog] Make creation date string mouse-selectable too (kde#413902)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Too many changes since 5.65.0, only listing bugfixes:
  * Adding support for mounting KIOFuse URLs for applications that don't use KIO (kde#398216)
  * [KUrlNavigator] Add RPM support to krarc: (kde#408082)
  * KFilePlaceEditDialog: fix crash when editing the Trash place (kde#415676)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Too many changes since 5.66.0, only listing bugfixes:
  * Allow to handle apps with Terminal=True in their desktop
    file, handle their associated mimetype properly (kde#410506)
  * Add KIO::DropJobFlag to allow manually showing the menu (kde#415917)
  * [KOpenWithDialog] Hide collapsible group box when all
    options inside are hidden (kde#415510)
  * SlaveBase::dispatchLoop: Fix timeout calculation (kde#392768)
  * [KDirOperator] Allow renaming files from the context menu (kde#189482)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Too many changes since 5.67.0, only listing bugfixes:
  * [KFileFilterCombo] Don't add invalid QMimeType to mimes filter (kde#417355)
  * Fix running konsole on Wayland (kde#408497)
  * KIO::iconNameForUrl: fix searching for kde protocol icons (kde#417922)
  * Change "AutoSkip" to "Skip All" (kde#416964)
  * [KOpenWithDialog] Automatically select the result if the model filter has only one match (kde#400725)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- Too many changes since 5.68.0, only listing bugfixes:
  * FileWidgets: Ignore Return events from KDirOperator (kde#412737)
  * [KNewFileMenu] Add extension to proposed filename (kde#61669)
  * [DesktopExecParser] Open {ssh,telnet,rlogin}:// urls with ktelnetservice (kde#418258)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Too many changes since 5.69.0, only listing bugfixes:
  * [RenameDialog] Add an arrow indicating direction from src to dest (kde#268600)
  * Make the HTML file template more useful (kde#419935)
  * kio_trash: Add size, modification, access and create date for trash:/ (kde#413091)
  * Show previews on encrypted filesystems (kde#411919)
  * [KPropertiesDialog] Disable changing remote dir icons (kde#205954)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1589544000">- Add Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  to fix starting services that use "Run in terminal" (kde#421374)
- Add CopyJob-Check-if-destination-dir-is-a-symlink.patch to fix
  copying files to symlinked folders (kde#421213)</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1589803200">- Add kded as a required package since kio calls org.kde.kded5 via dbus</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Too many changes to list here.
- Drop upstream patches:
  * Fix-service-file-specifying-Run-in-terminal-giving-error.patch
  * CopyJob-Check-if-destination-dir-is-a-symlink.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594814400">- Add patch to fix copying to protocols which don't always report
  available space (boo#1174169):
  * 0001-FileSystemFreeSpaceJob-emit-error-if-the-kioslave-di.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594900800">- Add patch to fix running files with spaces in the path
  (boo#1174141, kde#423412, kde#423645):
  * 0001-OpenUrlJob-fix-support-for-shell-scripts-with-a-spac.patch</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1599480000">- Add patch to fix reading the "Accept For Session" cookie setting
  in the kcookiejar daemon (boo#1167985)
  * kcookiejar-Fix-reading-Accept-For-Session-cookie-setting.patch</changelog>
</package>
<package pkgid="91a5e9cff96e910c81290cbf62c29645195c46502835a85c51439a6633dcee89" name="kitty-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="lp152.2.3.1"/>
  <changelog author="mvetter@suse.com" date="1536580800">- Update to 0.12.1:
  * Add a new kitty --start-in-fullscreen command line flag to start kitty in full screen mode (#856)
  * Linux: Do not enable IME input via ibus unless the GLFW_IM_MODULE=ibus environment variable is set. IME causes key processing latency and even missed keystrokes for many people, so it is now off by default.
  * Fix backspacing of wide characters in wide-character unaware programs not working (#875)
  * Linux: Fix number pad arrow keys not working when Numlock is off (#857)
  * Wayland: Implement support for clipboard copy/paste (#855)
  * Allow mapping shortcuts using the raw key code from the OS (#848)
  * Allow mapping of individual key-presses without modifiers as shortcuts
  * Fix legacy invocation of icat as kitty icat not working (#850)
  * Improve rendering of wavy underline at small font sizes (#853)
  * Fix a regression in 0.12.0 that broke dynamic resizing of layouts (#860)
  * Wayland: Allow using the kitty --class command line flag to set the app id (#862)
  * Add completion of the kitty command for the fish shell (#829)
  * Linux: Fix XCompose rules with no defined symbol not working (#880)
  * Linux: Fix crash with some Nvidia drivers when creating tabs in the first top level-window after creating a second top-level window. (#873)</changelog>
  <changelog author="mvetter@suse.com" date="1537790400">- Update to 0.12.2:
  * A new last_used_layout function that can be mapped to a shortcut to switch to the previously used window layout (#870)
  * New neighboring_window and move_window functions to switch to neighboring windows in the current layout, and move them around, similar to window movement in vim (#916)
  * A new pipe function that can be used to pipe the contents of the screen and scrollback buffer to any desired program running in a new window, tab or overlay window. (#933)
  * Add a new kitty --start-as command line flag to start kitty full-screen/maximized/minimized. This replaces the --start-in-fullscreen flag introduced in the previous release (#935)
  * When mapping the new_tab action allow specifying that the tab should open next to the current tab instead of at the end of the tabs list (#979)
  * Fix a bug causing incorrect line ordering when viewing the scrollback buffer if the scrollback buffer is full (#960)
  * Fix drag-scrolling not working when the mouse leaves the window confines (#917)
  * Workaround for broken editors like nano that cannot handle newlines in pasted text (#994)
  * Linux: Ensure that the python embedded in the kitty binary build uses UTF-8 mode to process command-line arguments (#924)
  * Linux: Handle fonts that contain monochrome bitmaps (such as the Terminus TTF font) (#934)
  * Have the kitty --title flag apply to all windows created using kitty --session (#921)
  * Revert change for backspacing of wide characters in the previous release, as it breaks backspacing in some wide character aware programs (#875)
  * Fix kitty @set-colors not working for tab backgrounds when using the fade tabbar style (#937)
  * Linux: Fix window icon not set on X11 for the first OS window (#961)
  * Remote control: Fix the focus_window command not focusing the top-level OS window of the specified kitty window (#1003)
  * Fix using focus_follows_mouse causing text selection with the mouse to malfunction when using multiple kitty windows (#1002)</changelog>
  <changelog author="mvetter@suse.com" date="1538481600">- Update to 0.12.3:
  * Unicode input: Fix an error when searching for the string 'fir' (#1035)</changelog>
  <changelog author="mvetter@suse.com" date="1540296000">- Add sphinx version requirements</changelog>
  <changelog author="mvetter@suse.com" date="1543320000">- Add: kitty-no-docs.patch: Fix build for Leap 15.0
  There is no python-sphincs &gt;= 1.7 for Leap 15.0.
  After receiving many requests for a package for this version,
  I decided to ship one without docs for it.</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1544875200">- Update to 0.13.1:
  * Fix passing input via the pipe action to a program without a window not working.
  * Linux: Fix a regression in the previous release that caused automatic selection of bold/italic fonts when using aliases such as "monospace" to not work (#1209)
  * Fix resizing window smaller and then restoring causing some wrapped lines to not be properly unwrapped (#1206)
  Changelog from 0.13.0:
  * Add an option scrollback_pager_history_size to tell kitty to store extended scrollback to use when viewing the scrollback buffer in a pager (#970)
  * Modify the kittens sub-system to allow creating custom kittens without any user interface. This is useful for creating more complex actions that can be bound to key presses in kitty.conf. See doc:kittens/custom. (#870)
  * Add a new nth_window action that can be used to go to the nth window and also previously active windows, using negative numbers. Similarly, goto_tab now accepts negative numbers to go to previously active tabs (#1040)
  * Allow hiding the tab bar completely, by setting tab_bar_style to hidden. (#1014)
  * Allow private use unicode characters to stretch over more than a single neighboring space (#1036)
  * Add a new touch_scroll_multiplier option to modify the amount scrolled by high precision scrolling devices such as touchpads (#1129)
  * icat kitten: Implement reading image data from STDIN, if STDIN is not connected to a terminal (#1130)
  * hints kitten: Insert trailing spaces after matches when using the --multiple option. Also add a separate --add-trailing-space option to control this behavior (#1132)
  * Fix the *_with_cwd actions using the cwd of the overlay window rather than the underlying window's cwd (#1045)
  * Fix incorrect key repeat rate on wayland (#1055)
  * Linux: Fix incorrect rendering of some fonts when hinting is disabled at small sizes (#1173)
  * Linux: Fix match rules used as aliases in Fontconfig configuration not being respected (#1085)
  * Linux: Fix a crash when using the GNU Unifont as a fallback font (#1087)
  * Wayland: Fix copying from hidden kitty windows hanging (#1051)
  * Wayland: Add support for the primary selection protocol implemented by some compositors (#1095)
  * Fix expansion of env vars not working in the env directive (#1075)
  * Fix mouse_hide_wait only taking effect after an event such as cursor blink or key press (#1073)
  * Fix the set_background_opacity action not working correctly (#1147)
  * Fix second cell of emoji created using variation selectors not having the same attributes as the first cell (#1109)
  * Fix focusing neighboring windows in the grid layout with less than 4 windows not working (#1115)
  * Fix ctrl+shift+special key not working in normal and application keyboard modes (#1114)
  * Add a terminfo entry for full keyboard mode.
  * Fix incorrect text-antialiasing when using very low background opacity (#1005)
  * When double or triple clicking ignore clicks if they are "far" from each other (#1093)
  * Follow xterm's behavior for the menu key (#597)
  * Fix hover detection of URLs not working when hovering over the first colon and slash characters in short URLs (#1201)</changelog>
  <changelog author="mvetter@suse.com" date="1546948800">- Update to 0.13.2:
  * Add a new option tab_title_template to control how tab titles are formatted. In particular the template can be used to display the tab number next to the title (#1223)
  * Report the current foreground processes as well as the original child process, when using kitty @ ls
  * Use the current working directory of the foreground process for the *_with_cwd actions that open a new window with the current working directory.
  * Add a new copy_or_interrupt action that can be mapped to kbd:ctrl+c. It will copy if there is a selection and interrupt otherwise (#1286)
  * Fix setting background_opacity causing window margins/padding to be slightly different shade from background (#1221)
  * Handle keyboards with a "+" key (#1224)
  * Fix Private use Unicode area characters followed by spaces at the end of text not being rendered correctly (#1210)
  * Fix changing cursor_text_color via remote control not working (#1229)
  * Add an action to resize windows that can be mapped to shortcuts in kitty.conf (#1245)
  * Fix using the new_tab !neighbor action changing the order of the non-neighboring tabs (#1256)</changelog>
  <changelog author="mvetter@suse.com" date="1548158400">- Update to 0.13.3:
  * icat kitten: Add a --stdin option to control if image data is read from STDIN (#1308)
  * hints kitten: Start hints numbering at one instead of zero by default. Added an option --hints-offset to control it. (#1289)
  * Fix a regression in the previous release that broke using background for cursor_text_color (#1288)
  * Add a list of user-created kittens to the docs
  * Fix a regression that broke changing mouse wheel scroll direction with negative wheel_scroll_multiplier values in full-screen applications like vim (#1299)
  * Fix background_opacity not working with pure white backgrounds (#1285)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1555761600">- Trim metadata redundancies and bias from descriptions.</changelog>
  <changelog author="mvetter@suse.com" date="1558699200">- Update to 0.14.0:
  * Support for an arbitrary number of internal clipboard buffers to copy/paste from, see (Multiple copy/paste buffers)
  * Allow using the new private internal clipboard buffers with the copy_on_select option (#1390)
  * Add an option disable_ligatures to disable multi-character ligatures under the cursor to make editing easier or disable them completely (#461)
  * Allow creating new OS windows in session files (#1514)
  * Allow setting OS window size in session files
  * Add an option tab_switch_strategy to control which tab becomes active when the current tab is closed (#1524)
  * Allow specifying a value of none for the selection_foreground which will cause kitty to not change text color in selections (#1358)
  * Make live resizing of OS windows smoother and add an option resize_draw_strategy to control what is drawn while a resize is in progress.
  * When a window is closed, switch focus to the previously active window (if any) instead of picking the previous window in the layout (#1450)
  * icat kitten: Add support for displaying images at http(s) URLs (#1340)
  * A new option strip_trailing_spaces to optionally remove trailing spaces from lines when copying to clipboard.
  * A new option tab_bar_min_tabs to control how many tabs must be present before the tab-bar is shown (#1382)
  * Automatically check for new releases and notify when an update is available, via the system notification facilities. Can be controlled by update_check_interval (#1342)
  * Fix using remote control to set cursor text color causing errors when creating new windows (#1326)
  * Fix window title for minimized windows not being updated (#1332)
  * Fix scrollback pager history not being cleared when clearing the main scrollback buffer (#1387)
  * Wayland: Use the kitty Wayland backend by default. Can be switched back to using XWayland by setting the environment variable: KITTY_DISABLE_WAYLAND=1
  * Add a no-append setting to clipboard_control to disable the kitty copy concatenation protocol extension for OSC 52.
  * Update to using the Unicode 12 standard
  * Unicode input kitten: Allow using the arrow keys in code mode to go to next and previous unicode symbol.
  * Fix a regression in version 0.13.0 that caused background colors of space characters after private use unicode characters to not be respected (#1455)
  * Only update the selected text to clipboard when the selection is finished, not continuously as it is updated. (#1460)
  * Allow setting active_border_color to none to not draw a border around the active window (#805)
  * Use negative values for mouse_hide_wait to hide the mouse cursor immediately when pressing a key (#1534)
  * When encountering errors in kitty.conf report them to the user instead of failing to start.
  * Allow the user to control the resize debounce time via resize_debounce_time.
  * Remote control: Make the kitty @ set-font-size command more capable. It can now increment font size and reset it. It also only acts on the active top-level window, by default (#1581)
  * When launching child processes set the PWD environment variable (#1595)
  * X11: use the window manager's native full-screen implementation when making windows full-screen (#1605)
  * Mouse selection: When extending by word, fix extending selection to non-word characters not working well (#1616)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1559217600">- Update to 0.14.1:
  * Add an option command_on_bell to run an arbitrary command when a bell occurs (#1660)
  * Add a shortcut to toggle maximized window state ctrl+shift+f10
  * Add support for the underscore key found in some keyboard layouts (#1639)
  * Fix a missing newline when using the pipe command between the scrollback and screen contents (#1642)
  * Fix colors not being preserved when using the pipe command with the pager history buffer (#1657)
  * When resizing and only a single window is present in the current layout, use that window's background color to fill in the blank areas.
  * Linux: Automatically increase cell height if the font being used is broken and draws the underscore outside the bounding box (#690)
  * Wayland: Fix maximizing the window on a compositor that does not provide server side window decorations, such a GNOME or Weston not working (#1662)
- Update kitty-no-docs.patch</changelog>
  <changelog author="mvetter@suse.com" date="1560254400">- Update to 0.14.2:
  * Add an option placement_strategy to control how the cell area is aligned inside the window when the window size is not an exact multiple of the cell size (#1670)
  * hints kitten: Add a kitty +kitten hints --multiple-joiner option to control how multiple selections are serialized when copying to clipboard or inserting into the terminal. You can have them on separate lines, separated by arbitrary characters, or even serialized as JSON (#1665)
  * panel kitten: Fix the contents of the panel kitten not being positioned correctly on the vertical axis
  * icat kitten: Fix a regression that broke passing directories to icat (#1683)
  * clipboard kitten: Add a kitty +kitten clipboard --wait-for-completion option to have the kitten wait till copying to clipboard is complete (#1693)
  * Allow using the pipe command to send screen and scrollback contents directly to the clipboard (#1693)
  * Linux: Disable the Wayland backend on GNOME by default as GNOME has no support for server side decorations. Can be controlled by linux_display_server.
  * Add an option to control the default update_check_interval when building kitty packages
  * Wayland: Fix resizing the window on a compositor that does not provide server side window decorations, such a GNOME or Weston not working correctly (#1659)
  * Wayland: Fix crash when enabling disabling monitors on sway (#1696)</changelog>
  <changelog author="Ond?ej S&#xFA;kup &lt;mimi.vx@gmail.com&gt;" date="1561550400">- enable build of doc for Leap 15.1+</changelog>
  <changelog author="mvetter@suse.com" date="1564401600">- Update to 0.14.3:
  * Remote control: Add a command kitty @ scroll-window to scroll windows
  * Allow passing a !neighbor argument to the new_window mapping to open
    a new window next to the active window (#1746)
  * Document the kitty remote control protocol (#1646)
  * Add a new option pointer_shape_when_grabbed that allows you to control
    the mouse pointer shape when the terminal programs grabs the pointer (#1808)
  * Add an option terminal_select_modifiers to control which modifiers are
    used to override mouse selection even when a terminal application has
    grabbed the mouse (#1774)
  * When piping data to a child in the pipe command do it in a thread so as
    not to block the UI (#1708)
  * unicode_input kitten: Fix a regression that broke using indices to select
    recently used symbols.
  * Fix a regression that caused closing an overlay window to focus the previously
    focused window rather than the underlying window (#1720)
  * Linux: Fix incorrect scaling for fallback fonts when the font has an underscore
    that renders out of bounds (#1713)
  * Fix an out of bounds read causing a crash when selecting text with the mouse
    in the alternate screen mode (#1578)
  * Linux: Use the system "bell" sound for the terminal bell. Adds libcanberra as a
    new dependency to play the system sound.
  * Linux: Fix a regression in 0.14.0 that caused the event loop to tick continuously,
    wasting CPU even when idle (#1782)
  * ssh kitten: Make argument parsing more like ssh (#1787)
  * When using strip_trailing_spaces do not remove empty lines (#1802)
  * Fix a crash when displaying very large number of images (#1825)</changelog>
  <changelog author="mvetter@suse.com" date="1567425600">- Update to 0.14.4:
  * hints kitten: Add a kitty +kitten hints --alphabet option to
    control what alphabets are used for hints (#1879)
  * hints kitten: Allow specifying kitty +kitten hints --program
    multiple times to run multiple programs (#1879)
  * Add a kitten_alias option that can be used to alias kitten
    invocation for brevity and to change kitten option defaults globally (#1879)
  * When running kittens, use the colorscheme of the current window
    rather than the configured colorscheme (#1906)
  * Don't fail to start if running the shell to read the EDITOR
    env var fails (#1869)
  * Disable the liga and dlig OpenType features for broken
    fonts such as Nimbus Mono.
  * Fix a regression that broke setting background_opacity
    via remote control (#1895)
  * Fix piping PNG images into the icat kitten not working (#1920)
  * When the OS returns a fallback font that does not actually
    contain glyphs for the text, do not exhaust the list of fallback fonts (#1918)
  * Fix formatting attributes not reset across line boundaries
    when passing buffer as ANSI (#1924)</changelog>
  <changelog author="mvetter@suse.com" date="1569844800">- Update to 0.14.6:
  * Fix a regression in the previous release that caused kitty to
    not always respond to DPI changes (#1999)
- Changes from 0.14.5:
  * Implement a hack to (mostly) preserve tabs when cat-ting a
    file with them and then copying the text or passing screen
    contents to another program (#1829)
  * When all visible windows have the same background color, use
    that as the color for the global padding, instead of the
    configured background color (#1957)
  * When resetting the terminal, also reset parser state, this
    allows easy recovery from incomplete escape codes (#1961)
  * Allow mapping keys commonly found on European keyboards (#1928)
  * Fix incorrect rendering of some symbols when followed by a
    space while using the PowerLine font which does not have a
    space glyph (#1225)
  * Linux: Allow using fonts with spacing=90 in addition to
    fonts with spacing=100 (#1968)
  * Use selection foreground color for underlines as well (#1982)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1574856000">- Update to 0.15.0:
  * Add a new action detach_window that can be used to move the current window
    into a different tab (#1310)
  * Add a new action launch that unifies launching of processes in new kitty
    windows/tabs.
  * Add a new style powerline for tab bar rendering, see tab_bar_style (#2021)
  * Allow changing colors by mapping a keyboard shortcut to read a kitty config
    file with color definitions. See the FAQ for details (#2083)
  * hints kitten: Allow completely customizing the matching and actions
    performed by the kitten using your own script (#2124)
  * Wayland: Fix key repeat not being stopped when focus leaves window. This is
    expected behavior on Wayland, apparently (#2014)
  * When drawing unicode symbols that are followed by spaces, use multiple
    cells to avoid resized or cut-off glyphs (#1452)
  * diff kitten: Allow diffing remote files easily via ssh (#727)
  * unicode input kitten: Add an option kitty +kitten unicode_input
  - -emoji-variation to control the presentation variant of selected emojis
    (#2139)
  * Add specialised rendering for a few more box powerline and unicode symbols
    (#2074 and #2021)
  * Add a new socket only mode for allow_remote_control. This makes it possible
    for programs running on the local machine to control kitty but not programs
    running over ssh.
  * hints kitten: Allow using named groups in the regular expression. The named
    groups are passed to the invoked program for further processing.
  * Fix a regression in 0.14.5 that caused rendering of private use glyphs with
    and without spaces to be identical (#2117)
  * Wayland: Fix incorrect scale used when first creating an OS window (#2133)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1577448000">- Update to 0.15.1:
  * Fix a crash/incorrect rendering when detaching a window in
    some circumstances (#2173)
  * hints kitten: Add an option kitty +kitten hints --ascending
    to control if the hints numbers increase or decrease from
    top to bottom
  * Fix background_opacity incorrectly applying to selected
    text and reverse video text (#2177)
  * Add a new option tab_bar_background to specify a different
    color for the tab bar (#2198)
  * Add a new option active_tab_title_template to specify a
    different template for active tab titles (#2198)
  * Fix lines at the edge of the window at certain windows sizes
    when drawing images on a transparent window (#2079)
  * Fix window not being rendered for the first time until some
    input has been received from child process (#2216)</changelog>
  <changelog author="Martin Rey &lt;mrey@suse.com&gt;" date="1580212800">- Update to 0.16.0:
  * A new Marks feature that allows highlighting and scrolling to
    arbitrary text in the terminal window.
  * hints kitten: Allow pressing ctrl+shift+p&gt;n to quickly open the
    selected file at the selected line in vim or a configurable
    editor (#2268)
  * Allow having more than one full height window in the tall
    layout (#2276)
  * Allow choosing OpenType features for individual fonts via the
    font_features option. (#2248)
  * Wayland: Fix a freeze in rare circumstances when having
    multiple OS Windows (#2307 and #1722)
  * Wayland: Fix window titles being set to very long strings on
    the order of 8KB causing a crash (#1526)
  * Add an option force_ltr to turn off the display of text in RTL
    scripts in right-to-left order (#2293)
  * Allow opening new tabs/windows before the current tab/window as
    well as after it with the launch --location option.
  * Add a resize_in_steps option that can be used to resize the OS
    window in steps as large as character cells (#2131)
  * When triple-click+dragging to select multiple lines, extend the
    selection of the first line to match the rest on the left
    (#2284)
  * Fix a segfault when using kitty --debug-config with maps
    (#2270)
  * goto_tab now maps numbers larger than the last tab to the last
    tab (#2291)
  * Fix URL detection not working for urls of the form
    scheme:///url (#2292)
  * When windows are semi-transparent and all contain graphics,
    correctly render them. (#2310)</changelog>
  <changelog author="Michael Vetter &lt;mvetter@suse.com&gt;" date="1609761600">- Fix bsc#1180298 (CVE-2020-35605): Fix RCE with special filename
  * Add kitty-CVE-2020-35605.patch</changelog>
</package>
<package pkgid="1d957f4df507d25f4e29c4821ff973d5ddd42dee7a8d8e3719f2b0cea01b4ad8" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="7f4bd9f1b9d06d60d0730e0afe33adde4d858798f093b6690f9e8b716878039e" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.3.1"/>
  <changelog author="dcassany@suse.com" date="1565006400">- Do not create a new machine-id file
  This commit ensures KIWI is not creating a new machine-id empty file
  in case it was not provided during the system installation.
  Fixes bsc#1141168
  (cherry picked from commit afd9b3019ae37980524554452e113d544e9676aa)</changelog>
  <changelog author="dcassany@suse.com" date="1565006401">- Bump version: 9.17.15 ? 9.17.16</changelog>
  <changelog author="dcassany@suse.de" date="1567771200">- Bump version up to 9.18.16
  This version upgrade includes several fixes:
  * Add --add-bootstrap-packages option (bsc#1149686)
    The prepare and build commands now allows to specify additional packages to
    be installed as part of the early bootstrap phase This Fixes #1151
  * Avoid default installation of dracut kiwi modules
    With this commit dracut modules won't be installed by default in the initrd
    unless they are requested by the commandline calling dracut or by a dracut
    configuration file.
    Fixes bsc#1142899 bsc#1136444 Fixes #1103
  * Add support for custom fstab script extension
    In addition to fstab append and patch features we also allow an
    fstab.script file that is called chrooted. The change is needed to support
    overlay mounting of filesystems as part of the initrd. If system
    filesystems needs to be changed in a way that they can be used in an
    overlay mount, the standard mount entry has to take the x-initrd.mount
    capability which requires a modification of the fstab which is cumbersome
    to handle as a patch file. This concept is currently used as part of the
    MicroOS project in SUSE and is applied in the integration test build
    maintained for this target. This Fixes bsc#1129566
  * Add crypt dependency to kiwi-lib dracut module
    This commit fixes the dependencies of the kiwi-lib dracut module to include
    crypt module required by kiwi-luks-lib.sh.
    In addition it also updates the check() section to return 255 instead of 0.
    In check section a return code of 0 means install it, 255 install only if
    required by another module, anything else, do not install.
    Related with bsc#1142899
  * 99-kiwi-lib requires rmdir, install it
    Fixes bsc#1143033
  * Do not crash on missing HOME
    Fixes bsc#1149686
  * Extend spare partition setup
    The spare partition could be used to introduce one additional partition
    table entry. With this patch the following new type attributes will be
    added:
  * spare_part_fs="fsname"
  * spare_part_mountpoint="/location"
  * spare_part_is_last="true|false"
    Along with the setup of the partition size the filesystem and its
    mountpoint can be specified. If set the contents of the rootfs at the
    specified spare location will be synced to that partition. The
    spare_part_is_last attribute will place the spare partition at the end of
    the disk. Note this attribute is only available for the simple vmx disk
    type. This is related to bsc#1129566
  * Preserve licenses/other txt files by baseStripFirmware (bsc#1132455) (Fixes #1063)
    LICENSES are usually not large and should be kept alongside of the
    binaries. Also some firmware files sideload additional txt files (like for
    example brcmfmac43430 needs the sdio description txt files). We should just
    always include them because they're not listed as needed files.
    Co-Authored-By: Dan ?ermák &lt;dcermak@suse.com&gt;
  * Delete check_grub_efi_installed_for_efi_firmware
    The motivation is nice to check if the required grub module package is part
    of the package list if the efi firmware is requested, but as long as there
    is no distribution wide standard for packaging grub this check will cause
    more trouble than it is of help. Currently it failed for the arm
    architecture and the grub2-arm64-efi package. We decided to prevent
    checking against static lists and dropped this runtime check. Missing grub
    modules will be recognized at the grub stage when we search for them.
    Fixes bsc#1149686
  * Support optional fstab.patch file
    In addition to the support for fstab.append, users can now also provide a
    patch file to change the contents of the fstab file as it got written by
    kiwi. The feature is probably rarely used but needed in the area of suse's
    transactional update mechanism. This Fixes bsc#1129566 and Fixes #945
  * Write sha256sum --check compatible shasum format
    Change the output format of the bundler shasum file to be compatible with a
    'sha256sum --check' call. This fixes bsc#1127173
  * Fixed import of signing keys
    In reference to bsc#1112357 it was required to add the compat symlink
    /var/lib/rpm such that zypper can read the signing keys. Unfortunately
    zypper does not use the configured rpmdb from the rpm macro setup.
  * Fix location of grub unicode font
    This is a follow up patch for #f5bac4495d34. The change of the location of
    the font file was not applied if an iso target, live or install image is
    being built. This patch completes the change and Fixes bsc#1124885
  * Handle location of the rpm DB on the macro level
    The location of the rpm database is no longer a standard path one can
    trust. Some distributions put it to /var/lib others to /usr/lib. This
    introduces the problem of dealing with different locations between the
    bootstrapping (host rpm) phase and the image installation (image rpm)
    phase.
    This commit implements a solution based on an intermediate rpm database
    configuration. KIWI creates the macros.kiwi file inside of the image root
    which is read by any call of rpm in the inner and outer system. During
    bootstrap phase the rpm dbpath from the host system is used and later in
    the install phase the dbpath from the rpm package as it was installed by
    the target image distribution is used. In case of a dbpath difference the
    database is automatically moved to the new location by setting the
    _dbpath_rebuild macro to the correct location. At the end the custom KIWI
    macro is deleted.
    As this process allows custom macro defintions during the KIWI run it also
    serves as the base for a solution to Issue #771 which will be done in a
    follow up request to this commit.
    Also the workaround for bsc#1112357 which uses a static dbpath to store an
    optionally given signing key will be addressed with this commit. The macro
    setup happens before the import_trusted_keys method which makes any
    specification for a strict dbpath obsolete.
    Last the implementation deletes the obsolete dump_reload_package_database
    code. rpm is able to automatically do the conversion of different db
    versions such that the code in kiwi is obsolete. In addition that code only
    worked for rather old db versions. The public API has not changed though,
    but the method is marked obsolete and does nothing anymore.
    In addition to the deletion of obsolete code a new API method
    post_process_install_requests_bootstrap has been introduced to handle
    actions required after bootstrap and before installing of packages from
    inside the new image</changelog>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
</package>
<package pkgid="2c727b48898f837d6b191f1b03acf565e5d090501f54c0397aa498d4ec12a594" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="6aeff7d838a13a5929bbce98b15f7e472cdb593752fc723809795a9a9da17b5a" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.20.5" rel="lp152.5.4.1"/>
  <changelog author="ms@suse.de" date="1570017600">- Fixed rpmdb compat link setup
  On older versions of zypper the path /var/lib/rpm was hardcoded
  and not used from the rpm macro definition. For such systems and
  to support them properly on hosts that have the rpm database
  already moved a compat link was created. However if the host has
  the rpm database at /var/lib/rpm the link doesn't make sense.
  This patch fixes this and therefore bsc#1150190</changelog>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
</package>
<package pkgid="0d8322538190c9529df7680b219ea12568eb35fa33d722db3bdf0b7594ebdab1" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="1e24782b982e7e0c6ae887df7624db7491f67601463fcd2e0a52278286e09727" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.10.1"/>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="79e95bbb4f93c8f5737cdf056970e71f449727da55d2ff90b2c4672878cdaaa4" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="7a492749813a1767f88123a7cdec33ba9df7d890fea6b22d1feac4413f21e6f8" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.21.23" rel="lp152.5.13.1"/>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
</package>
<package pkgid="9eb12367976b794a961146597b89067a12400b376eeb3cbdd8aa28ba12146489" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="c4ce2b1215097b8c73ba9de31f1a021e7f7fd077fdc56c74295b32273c57ffac" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.21.7" rel="lp152.5.7.1"/>
  <changelog author="dcassany@suse.com" date="1575547200">- Bump version: 9.18.16 ? 9.19.6
  This version includes several fixes:
  * Fixed setup of default grub config
    In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT also contained
    the root= information. If grub2-mkconfig runs with that information
    it places the root device information twice because grub2-mkconfig
    resolves this information itself. This commit prevents the root=
    information to be placed in the default grub config and
    Fixes bsc#1156908
  * Include grub.cfg inside the efi partition
    This commit ensures the grub.cfg file is included within the vfat efi
    partition.
    This fixes #1271 and bsc#1157354
  * Reference commit for SUSE maintenance
    This commit adds a reference to Issue #1261 and the
    report in bugzilla bsc#1157104
  * Fixed zipl bootloader setup for s390 images
    The preparation to call zipl and the call itself were wrong.
    For whatever reason the kernel image the initrd are moved
    to another location prior to calling zipl. That move broke
    the system because no kernel/initrd existed at the expected
    place anymore. In addition the zipl call itself was issued
    from a the wrong directory. Also no config file was written
    as an after effect of the refactoring in Issue #1194. This
    Fixes #1173 and bsc#1156694
  * Ensure grub.cfg is copied in EFI/BOOT folder
    This commit fixes the live images in efi mode. Grub configuration file
    is copied to the correct location in &lt;boot_dir&gt;/EFI/BOOT.
    Fixes bsc#1155815
  * Fix the sha256 generated file content
    This commit makes sure the generated sha256 file in a 'kiwi result
    bundle' call includes the filename with the correct extension. For
    compressed files it was omiting the suffix that included during the
    compression.
    Fixes #1223 and related to bsc#1139915</changelog>
  <changelog author="ms@suse.de" date="1575806400">- Fixed swap setup if btrfs is used
  In case of a volume manager the simplified variant of the
  device name is used in the fstab file to reference the
  swap device. However this is only correct for the lvm
  volume management but not for btrfs. In case of btrfs
  the swap space is not a subvolume but a real partition
  and thus the simplified device spec in fstab puts in the
  loop mapped device which is wrong. This patch fixes it
  and is related to bsc#1156908</changelog>
  <changelog author="ms@suse.de" date="1575806401">- Bump version: 9.19.6 ? 9.19.7</changelog>
  <changelog author="ms@suse.de" date="1576152000">- Fixed installation chapter in the documentation
  The chapter still outlines multipython support but we
  dropped support for python2 some time ago</changelog>
  <changelog author="dcassany@suse.com" date="1576584000">- Ensure no swap volume is added on btrfs
  When the selected filesystem is btrfs the volume manager is not LVM.
  In that case the swap partition is not volume, it is a completely
  independent partition. So that we cannot add and additional volume
  for swap when swap is specified in the description file.
  This patch fixes #1301 and fulfills #1297</changelog>
  <changelog author="dcassany@suse.com" date="1576670400">- Fix grub2 configuration for shim fallback setup
  If shim fallback setup is enabled the grub.cfg is copied to the EFI
  partition. This commit makes sure that the grub.cfg is copied to the EFI
  partition according to the efi mount point.
  Fixes bsc#1159235</changelog>
  <changelog author="dcassany@suse.com" date="1576756800">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue #1301 and the report in bugzilla
  bsc#1159538. The issue was fixed in commit 7d96d19c</changelog>
  <changelog author="dcassany@suse.com" date="1576756801">- Update libyui-ncurses-pkg10 to libyui-ncurses-pkg11
  In Tumbleweed there is no longer the libyui-ncurses-pkg10 its been
  superseded by libyui-ncurses-pkg11.
  This fixes the test-image-qcow-openstack integration test</changelog>
  <changelog author="dcassany@suse.com" date="1576756802">- Bump version: 9.19.7 ? 9.19.8</changelog>
  <changelog author="dcassany@suse.com" date="1585569600">- Bump version up to 9.20.5
  This version upgrade includes several fixes:
  * Fixed result map for OEM pxe install
    Fixes bsc#1165578
  * Add SECURE_BOOT parameter for grub2 in efi mode
    This commit adds the SECURE_BOOT parameter on bootloader sysconfig
    for grub2.
    Fixes bsc#1167746
  * Fix order in fstab
    Any mount point directly under / should be just right after the root
    mountpoint and before the custom mountpoints based on user's subvolume
    configuration.
    Fixes #1349 and bsc#1164310
  * Fixed handling of fillup templates
    Systems using a template tool to generate config files
    might not be effective when they see the intermediate
    config files we need from the host to let certain package
    managers work correctly. Therefore the cleanup code in
    kiwi takes care to restore from an optionally existing
    template file if no other custom variant is present.
    This Fixes bsc#1163978
  * Start using tftp system user package
    With this commit we start requiring tftp system user package. This
    user was created and managed by multiple packages before, with the
    risk of having inconsistent criteria on its defaults. Now there there
    a system user package so whatever package that requries this user should
    just require this package and do not create or modify the tftp user.
    Related with bsc#1143454</changelog>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
</package>
<package pkgid="917915febcf77a228f86a9d5d8c0dd2f9d098e13fe8bf2e141854d02b6faf56e" name="kiwi-tools-debuginfo" arch="i586">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="07ccadc8185821e46218b03da4f37e03a6c84f7f7ae489550dba42b31d0ab25a" name="kiwi-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="lp152.5.16.1"/>
  <changelog author="ms@suse.de" date="1586952000">- Validate use of GRUB_USE_LINUXEFI
  On systems that uses GRUB_USE_LINUXEFI with grub2 version
  less than 2.04 there is no support for dynamic EFI
  environment checking. In this condition we extend the grub
  setup to add this support. The change kiwi does is as
  follows:
  * Apply only on grub &lt; 2.04
    1. Modify 10_linux to set linux/initrd as variables
    2. Write hybrid setup as 01_efihybrid
    This Fixes bsc#1165960 and bsc#1168480</changelog>
  <changelog author="ms@suse.de" date="1586952001">- Fixed check for grub mkconfig capabilities
  The check for the capabilities of the tool were applied to
  the tool installed on the host but the later call of the
  tool will be done with the tool inside the image root</changelog>
  <changelog author="dcassany@suse.com" date="1586952002">- Make CommandCapabilities.check_version take the longest match
  This commit ensures that when trying to parse the version of a tool
  the comparison is done with the longest match for the given regular
  expression. This solves cases such in `grub2` where the tool name
  already provides some digit that could be seen as a version.</changelog>
  <changelog author="ms@suse.de" date="1587038400">- Fixed return value from _get_grub2_mkconfig_tool
  The method returned the basename of the tool if it could
  be found by Path.which(). But the method's scope has been
  changed in a way that the return value of the method must
  be the result from Path.which() to allow working on the
  full path name.</changelog>
  <changelog author="ms@suse.de" date="1587038401">- Increase spare space on disk repart
  The sizing of the virtual cylinders in parted seems to be unfavorable,
  as with some disks and SD cards here the device size is not a multiple
  of the cylinder size, so the last incomplete cylinder is wasted.
  If this wasted space is more than 5MiB, kiwi tries to resize indefinitely.
  Therefore min_additional_mbytes gets increased to prevent running
  into this situation. This Fixes bsc#1165823</changelog>
  <changelog author="ms@suse.de" date="1587124800">- Fixed _get_grub2_mkconfig_tool
  Last patch on this method breaks the search for alternative
  mkconfig names. It returns always on the first lookup which
  could be none. This breaks on systems that uses a different
  name than grub2-mkconfig, like on Ubuntu.</changelog>
  <changelog author="dcassany@suse.com" date="1589284800">- Fix string formatting
  After a flake8 upgrade to v3.8.0 these changes were required to pass
  the `tox -e check` validation.
  (cherry picked from commit 7e43b86cd9e56de48a63943f671cd047dede7521)</changelog>
  <changelog author="ms@suse.de" date="1589457600">- Fixed spec file
  This patch is two fold. First the py2 version of kiwi was
  dropped since py2 is EOL. To indicate that correctly on the
  package level python3-kiwi has to obsolete python2-kiwi.
  The other part of the change is a file conflict of the
  files:
  etc/bash_completion.d/kiwi-ng.sh
  /usr/share/doc/packages/python-kiwi/README
  which were provided by the kiwi-man-pages sub-package but
  were moved to be provided by the main python3-kiwi package
  now. On update of the package with an older version of
  kiwi that maintains this files to belong to kiwi-man-pages
  a file conflict at install time appears. To solve this
  python3-kiwi now conflicts with kiwi-man-pages &lt; %{version}
  This Fixes #1413 and Fixes bsc#1168973 and bsc#1156677
  (cherry picked from commit aba2505524850557e03a3f315b05fe58b28bc07d)</changelog>
  <changelog author="ms@suse.de" date="1591963200">- Fixed check for root device in grub config
  There is a code path that fixes the grub2-mkconfig used root device
  when building in an environment that does not allow to resolve the
  by-X path names, e.g an obs build worker without udev. For images
  that explicitly defines a root=... value in the kernelcmdline
  attribute the root device check was not called because the
  _get_root_cmdline_parameter method returns None. This commit fixes
  the method to return the expected root device in any case such that
  the grub2-mkconfig root device check has a chance to fix what
  grub2-mkconfig has created. This fixes bsc#1172928
  (cherry picked from commit 0ae7bbe74e2d2dddccddda40db6c2f8a04b53543)</changelog>
  <changelog author="dcassany@suse.com" date="1595592000">- Bump version up to 9.21.23
  This version upgrade includes several fixes:
  * Do not exclude filesystem folders in OCI images
    This commit does not exclude filesystem folders during the rsync call
    in OCI images. It has been noted that including an empty /dev folder does
    not hurt and it can eventually help to work around some limitations of
    container related tools such as buildah.
    Fixes bsc#1176129
    (cherry picked from commit 44c0029ce5893bd4c68b21df14bda5bf32a5c869)
  * Fix/Refactor s390 support
    This changes the s390 support on several stages:
    1) On s390 the boot process is based on zipl which boots into an
    initrd from which a userspace grub process is started to support
    the grub capabilities. The implementation of this concept is
    provided via the grub2-s390x-emu package. Once installed the
    setup of the bootloader is done via the grub2-mkconfig and
    grub2-install commands and therefore from a caller perspective
    the same as with any other grub2 setup process. For kiwi this
    means no extra zipl bootloader target code is needed. Therefore
    this commit deletes the zipl setup from kiwi and puts on
    the standard grub2 process. This Fixes bsc#1170863
    2) To support different targettypes the grub2-s390x-emu provided
    zipl template must be adapted. Parts of the former zipl bootloader
    setup therefore now applies to an update of the zipl2grub
    template file
    3) Support for CDL/LDL DASD targets has been disabled in the schema
    When testing 4k devices and a respective zipl2grub template
    setup for CDL/LDL targettype it has turned out that grub2-install
    is not able to run on such a device. My assumption is that
    the device code in grub2-install does not work for 4k devices
    with an fdasd created partition table. As this needs further
    investigations and most probably adaptions on the grub toolchain
    for s390, we disabled the setup of these modes for now.
    emulated DASD (FBA) and SCSI targets stays supported.
    (cherry picked from commit 836633c7b2b9b4aa31c1501c2e9817dc00af290d)
  * Fix compat link for rpmdb location
    This commit fixes the symlink creation for `/var/lib/rpm`. More specific
    for derived container images in which the base root tree already
    included the `/var/lib/rpm` the link, the `ln` command was creating a
    symlink inside the `/var/lib/rpm` folder givent that it was following
    the already existing symlink. Adding the `--no-target-directory` force
    `ln` command to treat `/var/lib/rpm` path as the fully qualified symlink name.
    Fixes bsc#1176977
    (cherry picked from commit a6f56179b7879d160f0aab985ebda20bc49a83be)
  * Fixed s390/sle15 Virtual disk integration test
    The integration test used FBA mode as target. As the target
    is expected to be KVM this is the wrong setting. SCSI should
    be used instead. This Fixes bsc#1170863
    (cherry picked from commit 33c5780d5a8f4e6b41d51bce6bb3e838ac7ded4b)
  * Support dynamic linux/linuxefi in any case
    Instead of restricting the dynamic linux vs. linuxefi setup
    to a specific grub version, support this setup for any version
    of grub. This Fixes bsc#1175729 and bsc#1176134
    (cherry picked from commit 988404ff9f04384c3efb53644e69d520c022c03c)</changelog>
  <changelog author="ms@suse.de" date="1597233600">- Bump version up to 9.21.7
  This version upgrade includes several fixes:
  * Skip filesystem check for XFS prior xfs_grow
    running xfs_repair check isn't strictly necessary before resizing,
    and in some cases it may even prevent resizing by giving an error
    that would be cleared through mounting the fs (e.g. when the fs
    wasn't cleanly umounted, and thus letting xfs recover and replay
    its journal). Given that xfs can only grow online (while being mounted),
    this is sufficient to ensure that the fs is in a state where it
    can be resized. This is related to bsc#1174009
  * Fixed grub setup in EFI/BOOT directory
    kiwi copied the same grub.cfg file as it exists in boot/grub2
    to the efi path. This is wrong as the setup in the efi boot
    directory is used to enable normal grub loading and not providing
    the user grub configuration. In addition the changes here makes
    sure that the early grub boot code is placed into the system
    in any EFI case except for secure boot when shim-install is
    present. If shim-install is present it also creates the early
    grub boot setup such that kiwi doesn't have to do it.
    This Fixes #1491 and Fixes bsc#1172908
  * Use rsync in inplace transfer mode
    Using the --inplace option in rsync helps to save space on
    syncing the rootfs data and prevents e.g OBS workers from
    running out of VM space when transfering root filesystem
    data. Also using --inplace allows to keep hardlinks intact.
    This is related to bsc#1096738
  * Don't keep copy of grub2-install in the system
    To prevent shim-install from calling grub2-install in uefi mode
    kiwi temporary replaces the tool by a noop. This acts as a
    workaround for an issue in shim-install. However the workaround
    left a file copy of grub2-install in the system which should
    not happen. This commit Fixes bsc#1173226 and Fixes #1490
  * Fixes live ISOs
    This commit fixes iso images. Due to a change introduced in c7ed1cf
    live ISOs were no longer booting as the rootfs.img filesystem was
    copied to the squashfs container while being still mounted. Because of
    that, at boot time, it refused to mount.
    This commit adds umount method for the filesystem base class, so it
    can be umounted before deleting the instance.
    Fixes #1489 and bsc#1173356
  * Support grub timeout_style parameter
    Grub supports a style setting that influences the display of
    the menu depending on the configured timeout value. With this
    patch kiwi allows to specify the style via a new bootloader
    parameter named timeout_style="hidden|countdown". If not set
    the grub default applies which shows the menu in any case.
    This Fixes bsc#1165730 and Fixes #1404
  * Use auto video mode as default for grub
    An explicit video mode 800x600 was used for grub if no
    video mode setup exists in the XML description. For grub
    this should better result in the auto mode. Related to
    bsc#1165730</changelog>
  <changelog author="ms@suse.de" date="1606910400">- Fixed multipath disk device assignment in kiwi lib
  The former lookup of the multipath mapped disk device contained
  a race condition. If the lookup of the device mapper files happened
  before multipathd has finished the initialization, kiwi continues
  with the unix node name and fails when the device mapper keeps
  a busy state on it. This commit changes the code such that in case
  of an explicit request to use multipath the lookup of the mapped
  device becomes a mandatory process that runs until the
  DEVICE_TIMEOUT is reached. Default timeout is set to 60 sec.
  This references Issue SUSE-Enceladus/azure-li-services#255</changelog>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
</package>
<package pkgid="87a213a8f023876ce0426373ba1cd61e794c21a8b09bb6c50bf201d14f41f014" name="kmail-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Cleanup now unused DBUS/Mailer code
  * Check if KMail is running before calling it, to avoid autostarting it at kontact startup
  * Provide DBus activation file for kmail
  * Remove wrong use of DBUS/Mailer servicetype
  * summaryview_part.h - fix build by including QMap
  * Fix apps name</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Adapt to KCalendarCore namespace change</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 409662 - Missing "Save Attachments..." from Multiple Emails (kde#409662)
  * Fix using correct parent widget.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix Bug 412122 - Crash when closing the composer (kde#412122)
  * Fix hidpi support
  * FIX Bug 411836 - Folder settings for expired message stores bad values (maildir) (kde#411836)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Fix Bug 412895 - Attachment detector should not trigger while saving as draft (kde#412895)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix improve notification message (kde#411992)
  * Fix Bug 412904 - Provide option to hide menu bar in message view windows (kde#412904)
- Remove obsolete version requirements</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Show invalid fcc folder widget
  * When we use "send again" make sure to assign FCC to current folder.
  * honour notification inhibition by delaying reminders
  * Add missing Q_REQUIRED_RESULT</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Don't use nullptr as flag
  * Fix invalid fcc warning when we restore mail</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::
  * Update Appstream for new release
  * Fix Bug 415160 - KMail build fails if messagelib is built without Qca-qt5 (kde#415160)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Fix option 'h' is already defined for help (now we can see this option)
  * Fix create mail from command line with body as utf8
  * Make sure that we show active windows
  * Fix show configure kmail
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Remove temporary directory
  * Remove temporary file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix export to pdf filename
  * Do not ask users if they want to overwrite saved file twice
  * Fix clazy warning
  * Fix cppcheck warning</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Fix Bug 419948 - Changing an individual folder to "Prefer HTML"
    or to "Prefer Plain Text" is not remembered after restarting
    KMail (kde#419948)
  * Refresh message when we change display format
  * Remove extra margin
  * Fix assert when removing the selected folder from the local subscription
  * Use QLatin1Char('/') here
  * Show message info about restarting apps when we change a settings
  * comment not implement userfeedback plugin
  * Disable send again when we open directly an mbox
  * Fix generate pdf file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix Bug 420327 reload email after changing html preference for contact (kde#420327)
  * Fix compile
  * Fix Bug 420327 - reload email after changing html preference for contact (kde#420327)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Add obviously missing assignment (of mimeype name)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1600344000">- Add Fix-Bug-426596.patch to fix a possible crash of the
  archivemail agent after changing its settings (boo#1176666,
  kde#426596, kde#425786, kde#424232)</changelog>
</package>
<package pkgid="4da763fb90369571fbe1b18683f3cd237b15dfb94e7d21643d456a6661e0edf3" name="kmail-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Cleanup now unused DBUS/Mailer code
  * Check if KMail is running before calling it, to avoid autostarting it at kontact startup
  * Provide DBus activation file for kmail
  * Remove wrong use of DBUS/Mailer servicetype
  * summaryview_part.h - fix build by including QMap
  * Fix apps name</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Adapt to KCalendarCore namespace change</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 409662 - Missing "Save Attachments..." from Multiple Emails (kde#409662)
  * Fix using correct parent widget.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix Bug 412122 - Crash when closing the composer (kde#412122)
  * Fix hidpi support
  * FIX Bug 411836 - Folder settings for expired message stores bad values (maildir) (kde#411836)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Fix Bug 412895 - Attachment detector should not trigger while saving as draft (kde#412895)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix improve notification message (kde#411992)
  * Fix Bug 412904 - Provide option to hide menu bar in message view windows (kde#412904)
- Remove obsolete version requirements</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Show invalid fcc folder widget
  * When we use "send again" make sure to assign FCC to current folder.
  * honour notification inhibition by delaying reminders
  * Add missing Q_REQUIRED_RESULT</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Don't use nullptr as flag
  * Fix invalid fcc warning when we restore mail</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::
  * Update Appstream for new release
  * Fix Bug 415160 - KMail build fails if messagelib is built without Qca-qt5 (kde#415160)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Fix option 'h' is already defined for help (now we can see this option)
  * Fix create mail from command line with body as utf8
  * Make sure that we show active windows
  * Fix show configure kmail
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Remove temporary directory
  * Remove temporary file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix export to pdf filename
  * Do not ask users if they want to overwrite saved file twice
  * Fix clazy warning
  * Fix cppcheck warning</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Fix Bug 419948 - Changing an individual folder to "Prefer HTML"
    or to "Prefer Plain Text" is not remembered after restarting
    KMail (kde#419948)
  * Refresh message when we change display format
  * Remove extra margin
  * Fix assert when removing the selected folder from the local subscription
  * Use QLatin1Char('/') here
  * Show message info about restarting apps when we change a settings
  * comment not implement userfeedback plugin
  * Disable send again when we open directly an mbox
  * Fix generate pdf file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix Bug 420327 reload email after changing html preference for contact (kde#420327)
  * Fix compile
  * Fix Bug 420327 - reload email after changing html preference for contact (kde#420327)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Add obviously missing assignment (of mimeype name)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1600344000">- Add Fix-Bug-426596.patch to fix a possible crash of the
  archivemail agent after changing its settings (boo#1176666,
  kde#426596, kde#425786, kde#424232)</changelog>
</package>
<package pkgid="6b03249105bc91a1f497c7bdb5e484beb82269f15fa0389e0bdd76a3b76411f4" name="kmix-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- Changes since 19.04.2:
  * No code changes since 19.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * This include directory doesn't exist
  * screenshot
  * Show PulseAudio "Capture Devices" in the system tray popup
  * Show the current device/destination for a moveable channel
  * Further simplify PulseAudio backend using checkOpResult()
  * Treat PulseAudio capture devices/streams as capture instead of playback
  * MixDevice/Volume: Tidy up and const'ify
  * Eliminate the "Hardware Information" action, it was never used</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Add DesktopEntry to notifyrc</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Port deprecated enum
  * Port deprecated methods
  * Port setMargins
  * Get rid of dependency on KIconThemes
  * Fix shrinking of group boxes' titles
  * Time to increase version
  * Fix the 0613aa4 commit.
  * Add support for High DPI
  * Make dependency on Plasma optional</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Link to Qt5::Xml explicitly, don't rely on kconfiggui to do it for us</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Fix minor EBN issues
  * Remove unused include
  * const'ify + remove extra ;
  * Remove extra ; use nullptr use override
  * Port some deprecated method. Remove extra ;</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1598529600">- Add Drop-no-longer-available-kcm_phonon-Audio-Setup.patch to
  remove the not-working "Audio Setup" menu entry, its purpose was
  to open kcm_phonon which no longer exists (boo#1175698)</changelog>
</package>
<package pkgid="34692525ac90552901cf281bed24b89800a06ba2a03c57d972b6592b51a0f2d9" name="kmix-debugsource" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563019200">- Update to 19.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.04.3.php
- Changes since 19.04.2:
  * No code changes since 19.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * This include directory doesn't exist
  * screenshot
  * Show PulseAudio "Capture Devices" in the system tray popup
  * Show the current device/destination for a moveable channel
  * Further simplify PulseAudio backend using checkOpResult()
  * Treat PulseAudio capture devices/streams as capture instead of playback
  * MixDevice/Volume: Tidy up and const'ify
  * Eliminate the "Hardware Information" action, it was never used</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- No code changes since 19.07.80</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- No code change since 19.08.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Add DesktopEntry to notifyrc</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Port deprecated enum
  * Port deprecated methods
  * Port setMargins
  * Get rid of dependency on KIconThemes
  * Fix shrinking of group boxes' titles
  * Time to increase version
  * Fix the 0613aa4 commit.
  * Add support for High DPI
  * Make dependency on Plasma optional</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Link to Qt5::Xml explicitly, don't rely on kconfiggui to do it for us</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Fix minor EBN issues
  * Remove unused include
  * const'ify + remove extra ;
  * Remove extra ; use nullptr use override
  * Port some deprecated method. Remove extra ;</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1598529600">- Add Drop-no-longer-available-kcm_phonon-Audio-Setup.patch to
  remove the not-working "Audio Setup" menu entry, its purpose was
  to open kcm_phonon which no longer exists (boo#1175698)</changelog>
</package>
<package pkgid="b2dc990ac54112f3c2e4c1590df9397f411227ff41ca72b39315efad7bf6ae72" name="knot-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp152.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416312000">- Updated to 1.6.0
  Bugfixes:
  - Fix zone expiration when AXFR/IXFR is being refused by master
  - Fix forced zone refresh on slave (knotc refresh -f)
  - Persistent timers database opening after privileges has been dropped
  - DNSSEC: RFC compliant processing of letter case in RDATA domain names
  - EDNS: Return minimal error response for queries with unsupported version
  - EDNS: Fix interpretation of Extended RCODE
  Improvements:
  - Maximal size of persistent timers database increased from 10 MB to 100 MB
  - Added logging of persistent timers database errors
  Features:
  - Persistent timers for slave zones (expire, refresh, and flush)</changelog>
  <changelog author="ondrej@sury.org" date="1420027200">- Updated to 1.6.1
  Bugfixes:
  - Journal file would sometimes outgrow its set limit
  - Fixed incompatibility with OpenSSL 0.9.8
  - Proper handling when machine hostname cannot be retreived
  Features:
  - Support for DNSSEC Single Type Signing Scheme
- Compile with lmdb-devel to add support for persistent timers</changelog>
  <changelog author="ondrej@sury.org" date="1420027201">- Only require lmdb-devel on (Open)SUSE 13.2 and higher</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Add deps on the docu packages to regen documentation
- Enable systemd integration fully
- Add dep on libidn
- Cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1425988800">- update to 1.6.2
  - Limiting number of parallel TCP clients (max-tcp-clients config
    option)
  - Ignore refresh and transfer events on non-slave zones
  - Compilation with Dnstap support on FreeBSD
  - Possible file descriptor leak when terminating inactive TCP
    clients
- refreshed patches to apply cleanly again:
  0002-make-configure.ac-compatible-with-old-tools.patch
- moved autoreconf -fi to %build so it wont be tried in quilt setup
  or similar tools
- move up the %if case for systemd in for the preun scriptlet to
  avoid warning about empty scripts on non systemd distributions.
- used xz tarball: new buildrequires xz</changelog>
  <changelog author="mrueckert@suse.de" date="1428580800">- update to 1.6.3
  - Performance drop for NSEC-signed zones
  - Proper handling of TCP short-writes
  - Out-of-bound read in zone parser for long domain names in
    origin (AFL fuzzer)
  - Out-of-bound read in packet parser for TSIG RR without RDATA
    (AFL fuzzer)
  - Out-of-bound read in packet parser for malformed NAPTR RR (AFL
    fuzzer)
  - CDS and CDNSKEY support in zone parser
  - Add defaults for TCP config options into documentation
  - Detailed error message if zone reload fails
- refreshed patches to apply cleanly again:
  0002-make-configure.ac-compatible-with-old-tools.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1428580801">- enable dnstap support for factory and newer:
  - new BR: protobuf-c and libfstrm-devel
- prepared lto support but not enabled yet, still need to find out
  which distros support it</changelog>
  <changelog author="mrueckert@suse.de" date="1430308800">- local state dir should be just /var</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- update to 1.6.5
  - Bugfixes:
  - Do not reload expired zones on 'knotc reload' and server
    startup
  - Fix rare race-condition in event scheduling causing delayed
    event execution
  - Fix skipping of non-authoritative nodes in NSEC proofs
  - Fix TC flag setting in RRL slipped answers
  - Disable domain name compression for root label for better
    compatibility
  - Log via journald only when running under systemd
  - Improve lookup of libsystemd build dependencies
  - Fix compilation warnings in endian conversion functions on
    OpenBSD
  - Features:
  - Update persistent timers only on shutdown for better
    performance
  - Add 'request-edns-option' config option to add custom EDNS0
    option into server initiated queries
  - Allow specification of time units in 'max-conn-idle',
    'max-conn-handshake', 'max-conn-reply', and 'notify-timeout'
    config options
- changes in 1.6.4
  - Bugfixes:
  - Fix lost NOTIFY message if received during zone transfer
  - Fix compilation error with LibreSSL
  - Disable fast zone parser when compiled in Clang (workaround
    for Clang bug)
  - kdig: Record correct dnstap SocketProtocol when retrying
    over TCP
  - kdig: Hide TSIG section with +noall
  - Do not set AA flag for AXFR/IXFR queries
  - Features:
  - Zone parser: Split long TXT/SPF strings into multiple
    strings
  - kdig: Add generic dump style option (+generic)
  - Try all master servers in multi-master environment
  - Improvements:
  - Zone dump: Do not write class for SOA record (unified with
    other RR types)
  - Zone dump: Do not write master server address into the zone
    file
- refresh patches to apply cleanly again
- sync spec file with knot2 spec file
  - use bcond_with for the systemd conditional
  - replace all occurences of %{name} with %{pkg_name}
  - removed duplicated libexecdir
  - also pass disable static and includedir</changelog>
  <changelog author="mrueckert@suse.de" date="1441281601">- skip silent rule in configure.ac to fix the SLE 11 build</changelog>
  <changelog author="mrueckert@suse.de" date="1448366400">- update to 1.6.6
  - Fix daemon startup systemd notification
  - Out-of-bound read in packet parser for malformed NAPTR records
    (LibFuzzer)
  - Add rosedb module
- enable rosedb
- refresh patches to apply cleanly again
  0001-loosen-openssl-dependency.patch
  0002-make-configure.ac-compatible-with-old-tools.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1455192000">- update to 1.6.7
  - Improvements:
  - IXFR: Log change of the zone serial number after the
    transfer.
  - RRL: Document operational impact of various settings.
  - RRL: Add support for zero slip (dropping of all limited
    responses).</changelog>
  <changelog author="mrueckert@suse.de" date="1462881600">- fix the sphinx buildrequires so we can build on sle12</changelog>
  <changelog author="mrueckert@suse.de" date="1486987200">- update to 1.6.8
  - Zone size limit restriction for DDNS, AXFR, and IXFR
    (CVE-2016-6171)</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- refreshed 0002-make-configure.ac-compatible-with-old-tools.patch
  to fix build</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- add knot-openssl-1.1+.patch
  * fix build with openssl 1.1+</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595505600">- CVE-2017-11104: Fixed an improper implementation of TSIG protocol
  which could have allowed an attacker with a valid key name and
  algorithm to bypass TSIG authentication (bsc#1047841).
  Added knot-CVE-2017-11104.patch</changelog>
</package>
<package pkgid="c09098c29d18ce25277b8ef69fbe048f42168e50d934d689094923e31e023ec1" name="knot-debugsource" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="lp152.5.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416312000">- Updated to 1.6.0
  Bugfixes:
  - Fix zone expiration when AXFR/IXFR is being refused by master
  - Fix forced zone refresh on slave (knotc refresh -f)
  - Persistent timers database opening after privileges has been dropped
  - DNSSEC: RFC compliant processing of letter case in RDATA domain names
  - EDNS: Return minimal error response for queries with unsupported version
  - EDNS: Fix interpretation of Extended RCODE
  Improvements:
  - Maximal size of persistent timers database increased from 10 MB to 100 MB
  - Added logging of persistent timers database errors
  Features:
  - Persistent timers for slave zones (expire, refresh, and flush)</changelog>
  <changelog author="ondrej@sury.org" date="1420027200">- Updated to 1.6.1
  Bugfixes:
  - Journal file would sometimes outgrow its set limit
  - Fixed incompatibility with OpenSSL 0.9.8
  - Proper handling when machine hostname cannot be retreived
  Features:
  - Support for DNSSEC Single Type Signing Scheme
- Compile with lmdb-devel to add support for persistent timers</changelog>
  <changelog author="ondrej@sury.org" date="1420027201">- Only require lmdb-devel on (Open)SUSE 13.2 and higher</changelog>
  <changelog author="tchvatal@suse.com" date="1420718400">- Add deps on the docu packages to regen documentation
- Enable systemd integration fully
- Add dep on libidn
- Cleanup with spec-cleaner</changelog>
  <changelog author="mrueckert@suse.de" date="1425988800">- update to 1.6.2
  - Limiting number of parallel TCP clients (max-tcp-clients config
    option)
  - Ignore refresh and transfer events on non-slave zones
  - Compilation with Dnstap support on FreeBSD
  - Possible file descriptor leak when terminating inactive TCP
    clients
- refreshed patches to apply cleanly again:
  0002-make-configure.ac-compatible-with-old-tools.patch
- moved autoreconf -fi to %build so it wont be tried in quilt setup
  or similar tools
- move up the %if case for systemd in for the preun scriptlet to
  avoid warning about empty scripts on non systemd distributions.
- used xz tarball: new buildrequires xz</changelog>
  <changelog author="mrueckert@suse.de" date="1428580800">- update to 1.6.3
  - Performance drop for NSEC-signed zones
  - Proper handling of TCP short-writes
  - Out-of-bound read in zone parser for long domain names in
    origin (AFL fuzzer)
  - Out-of-bound read in packet parser for TSIG RR without RDATA
    (AFL fuzzer)
  - Out-of-bound read in packet parser for malformed NAPTR RR (AFL
    fuzzer)
  - CDS and CDNSKEY support in zone parser
  - Add defaults for TCP config options into documentation
  - Detailed error message if zone reload fails
- refreshed patches to apply cleanly again:
  0002-make-configure.ac-compatible-with-old-tools.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1428580801">- enable dnstap support for factory and newer:
  - new BR: protobuf-c and libfstrm-devel
- prepared lto support but not enabled yet, still need to find out
  which distros support it</changelog>
  <changelog author="mrueckert@suse.de" date="1430308800">- local state dir should be just /var</changelog>
  <changelog author="mrueckert@suse.de" date="1441281600">- update to 1.6.5
  - Bugfixes:
  - Do not reload expired zones on 'knotc reload' and server
    startup
  - Fix rare race-condition in event scheduling causing delayed
    event execution
  - Fix skipping of non-authoritative nodes in NSEC proofs
  - Fix TC flag setting in RRL slipped answers
  - Disable domain name compression for root label for better
    compatibility
  - Log via journald only when running under systemd
  - Improve lookup of libsystemd build dependencies
  - Fix compilation warnings in endian conversion functions on
    OpenBSD
  - Features:
  - Update persistent timers only on shutdown for better
    performance
  - Add 'request-edns-option' config option to add custom EDNS0
    option into server initiated queries
  - Allow specification of time units in 'max-conn-idle',
    'max-conn-handshake', 'max-conn-reply', and 'notify-timeout'
    config options
- changes in 1.6.4
  - Bugfixes:
  - Fix lost NOTIFY message if received during zone transfer
  - Fix compilation error with LibreSSL
  - Disable fast zone parser when compiled in Clang (workaround
    for Clang bug)
  - kdig: Record correct dnstap SocketProtocol when retrying
    over TCP
  - kdig: Hide TSIG section with +noall
  - Do not set AA flag for AXFR/IXFR queries
  - Features:
  - Zone parser: Split long TXT/SPF strings into multiple
    strings
  - kdig: Add generic dump style option (+generic)
  - Try all master servers in multi-master environment
  - Improvements:
  - Zone dump: Do not write class for SOA record (unified with
    other RR types)
  - Zone dump: Do not write master server address into the zone
    file
- refresh patches to apply cleanly again
- sync spec file with knot2 spec file
  - use bcond_with for the systemd conditional
  - replace all occurences of %{name} with %{pkg_name}
  - removed duplicated libexecdir
  - also pass disable static and includedir</changelog>
  <changelog author="mrueckert@suse.de" date="1441281601">- skip silent rule in configure.ac to fix the SLE 11 build</changelog>
  <changelog author="mrueckert@suse.de" date="1448366400">- update to 1.6.6
  - Fix daemon startup systemd notification
  - Out-of-bound read in packet parser for malformed NAPTR records
    (LibFuzzer)
  - Add rosedb module
- enable rosedb
- refresh patches to apply cleanly again
  0001-loosen-openssl-dependency.patch
  0002-make-configure.ac-compatible-with-old-tools.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1455192000">- update to 1.6.7
  - Improvements:
  - IXFR: Log change of the zone serial number after the
    transfer.
  - RRL: Document operational impact of various settings.
  - RRL: Add support for zero slip (dropping of all limited
    responses).</changelog>
  <changelog author="mrueckert@suse.de" date="1462881600">- fix the sphinx buildrequires so we can build on sle12</changelog>
  <changelog author="mrueckert@suse.de" date="1486987200">- update to 1.6.8
  - Zone size limit restriction for DDNS, AXFR, and IXFR
    (CVE-2016-6171)</changelog>
  <changelog author="pgajdos@suse.com" date="1496664000">- refreshed 0002-make-configure.ac-compatible-with-old-tools.patch
  to fix build</changelog>
  <changelog author="i@marguerite.su" date="1515412800">- add knot-openssl-1.1+.patch
  * fix build with openssl 1.1+</changelog>
  <changelog author="Alexandros Toptsoglou &lt;atoptsoglou@suse.com&gt;" date="1595505600">- CVE-2017-11104: Fixed an improper implementation of TSIG protocol
  which could have allowed an attacker with a valid key name and
  algorithm to bypass TSIG authentication (bsc#1047841).
  Added knot-CVE-2017-11104.patch</changelog>
</package>
<package pkgid="e49b429aee56908421677df9f8ff905fe416f6691311b24efb7baa0d10859f45" name="kpartx-debuginfo" arch="i586">
  <version epoch="0" ver="0.8.2+140.5146cae" rel="lp152.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
</package>
<package pkgid="bb7d51c609addfc799a1fd3d550f8323a21f23ba258ccf7841dcd53bba30c314" name="kpartx-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2+140.5146cae" rel="lp152.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1544788800">- Update to version 0.7.9+90+suse.f81e290:
  * libmultipath: Increase SERIAL_SIZE to 128 bytes
  (bsc#1107179)</changelog>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
</package>
<package pkgid="1eeae94af6eda802d383e8c04d62c8a910141582e0db404e2f7c9e021f114fd3" name="kpartx-debuginfo" arch="i586">
  <version epoch="0" ver="0.8.2+140.5146cae" rel="lp152.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
</package>
<package pkgid="e69acdf5228c732704c25bbaf200eb57ea4680562cedcb37ca27998a5732bd3a" name="kpartx-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.2+140.5146cae" rel="lp152.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1546948800">- Update to version 0.7.9+109+suse.203c1cf:
  * multipathd: avoid crash in cli_list_path (bsc#1121134)
  * libmultipath: fix compilation with older kernel headers
  (bsc#1121066)
- merged upstream fb824725
  * Improved NVMe support in both native and dm-mpath mode
  added basic NVMe ANA support (bsc#1119898, bsc#1118495)
  * Fix prio output in "multipathd show topology" (bsc#1119897)
  * multipathd: fix daemon not really shutdown
  (bsc##1110060, bsc#1110439)
  * setup_map: wait for pending path checkers to finish
  (bsc#1118224)</changelog>
  <changelog author="mwilck@suse.com" date="1547035200">- Update to version 0.7.9+111+suse.b4232b7:
- merged upstream cb4a979a (SUSE bug fixes merged upstream,
  code-identical to previous release).</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1547208000">- Add BuildRequires on suse-module-tools
  * we need it for regenerate_initrd_posttrans</changelog>
  <changelog author="mwilck@suse.com" date="1551787200">- Update to version 0.7.9+128+suse.ae29865:
- Bug fixes:
  * multipathd: Fix miscounting active paths (bsc#1125043)
  * multipathd: avoid null pointer dereference in LOG_MSG
  (bsc#1127873)
  * minor fixes suggested by coverity (bsc#1127879)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551787201">- Add kmod(xyz) style dependencies for SLE15-SP1
  (jsc#SLE-3853, fate#326579, bsc#1119414)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1551960000">- Fix module name in multipath.conf (bsc#1119414)
  * The modules-load.d entry must match the filename exactly</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1552564800">- Disable kmod()-style dependencies for now (bsc#1119414)</changelog>
  <changelog author="mwilck@suse.com" date="1556625600">- Update to version 0.7.9+147+suse.689dcaf:
  * Avoid deadlock situation during udev settle
  (bsc#1131789, bsc#1125145)
  - multipath -u: test socket connection in non-blocking mode
  * Avoid device IO in "multipath -u" (bsc#1125145)
  * Fix priority handling for offline paths
  (bsc#1118495)
  * Fix daemon shutdown issues (bsc#1110060, bsc#1110439)
  - multipathd: protect all access to running_state
  - multipathd: allow shutdown during configure()</changelog>
  <changelog author="mwilck@suse.com" date="1556798400">- Update to version 0.7.9+148+suse.5179c8d:
  * fix compilation of external programs with -lmultipath
  (bsc#1133957)</changelog>
  <changelog author="mwilck@suse.com" date="1561464000">- Update to version 0.7.9+163+suse.7993fed:
  * mpathpersist: optimize for setups with many LUNs (bsc#1134648)
  * mpathpersist: add option -f/--batch-file (bsc#1134648)
  * libmultipath: get_prio(): really don't reset prio for
    inaccessible paths (bsc#1118495)
- Upstream bug fixes from dm-devel (bsc#1139369):
  * multipath: call store_pathinfo with DI_BLACKLIST
  * multipathd: fix REALLOC_REPLY with max length reply
  * libmultipath: make vector_foreach_slot_backwards work as expected
  * multipathd: fix client response for socket activation (bsc#1133861)
- hwtable: add Lenovo DE series (bsc#1125507)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1562068800">- Spec file: backported some modernizations from Factory
  * Remove unused /var/cache/multipath directory
  * Remove check for multipath maps in %pre and %post
  * Remove SLE11-specific multipathd service stop / start from
    %pre / %post
  * Remove obsolete tools from package description (bsc#1129827)
  * Add -n to %service_del_{pre,post}un for multipathd.socket</changelog>
  <changelog author="mwilck@suse.com" date="1562068801">- Update to version 0.7.9+164+suse.e41fbd9:
  * libmultipath: trigger uevents for partitions, too (bsc#1140146)</changelog>
  <changelog author="mwilck@suse.com" date="1565870400">- Update to version 0.7.9+166+suse.1693c88:
  * multipath.conf.5: document foreign library support
  * multipath.conf: add "enable_foreign" parameter (bsc#1139837)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="Martin Wilck &lt;mwilck@suse.com&gt;" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
</package>
<package pkgid="580f3373fc50a9881af9c8a5a8d6d5cd5cbd4101e45fb3bda378f8b351dcda95" name="krb5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="ee5ff1df02a6837271832d027cd963da4bc07ffdc079fc1ff74c71fa39ecf2f9" name="krb5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="e777649e8d97d8b0bef216702a8830d836536e23cca060233b484ae6ab511da2" name="krb5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="9c80ce43591a512480141d318d5926376ec755392d1f1d3dc614940f7d55acc0" name="krb5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="980e28757cfeac5b2f71e57ecf6d2c0f177ca56482b5338cc1f992c80f3dc3b9" name="krb5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="38cde456020f4c49a1847a9ccf6b0367b088d9cd816f097d861ce6412ca66cea" name="krb5-client-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="db31ce0fe4a6556bea39aa6fc916fa29c3ed06e3ab28fcaec4d9a84a5b9950e7" name="krb5-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="a51ddb7938a73c9078ca7753e227f2896c8690edb675b5d2042d37bace71f5e8" name="krb5-client-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="fa650653685413b2c0b5e8e4c87a5ef0778e6f593dc1e9eb2cdc9683386176d3" name="krb5-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="1d3e5974c3b55330aabb8b0f0760ecc08f3d8beefd5f8b8468aa588bf6ffb193" name="krb5-client-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="20ac7f71239cd874fa5fa6f39b928d65c85029ddb84529feb8a8c7e66874d54f" name="krb5-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="39570ab4322e3ce5932775aeaf92b376520edbd602897363c6ea5f386a908629" name="krb5-client-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="1c39baba5e2fe16f2b9f425e6390a86fe9880c0287049a581173d059cca79b08" name="krb5-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="ed2281c90a2cc480b06dcf9b1ce6405fc7b7ea9dcc66913e91c70195085ae60d" name="krb5-client-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="515c44dbb79f4fb24b3b94a8b5076052c3a21c5469849e0ba11cac3cbb2f6c84" name="krb5-client-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="524be3f6deae51396d536d3de47d8280476baa02b4e9b7b9bba9c199987fdc8d" name="krb5-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="d0da8f34db13a9914a6c3e2a98eb3af43617d77b8436c2757dc291a59c9ee640" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="a3f9e8530d7afbfbf99489fe3dbcab7bb5401c07bc757e21941d5ed5214e6360" name="krb5-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="8066613422bba34d92da944ec3f3b70792c7068bc68e26c3cd1267ec9daff35f" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="ce318587abbc3cd7fee10a0764e7b6acbd5ddba7d67ed3dfb95d6b003ac68659" name="krb5-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="3e0d4f886e89fee562eda74578f759fc04c2c53e7c43874269289b11a1c5ef83" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="95cfd567d99c7c3015b279262eaffb2d1554eb80c375a30e6d84e79a51c7804b" name="krb5-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="20805bdd4c1ffea33edc473f4e5a142900c7fe7d0dfbf3cf8e016f60b725d0b7" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="5d94731a204b9635ee34b63460155aca48d55605a32f82902d4b67e3c84c505b" name="krb5-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="b1b3ed62878193abf2e4b3ec6770e0a894d65efce9b4ee57033fa46bd87c49ed" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="e8d80f5070ec78795e6c96bcb1db5765f6df7f522274e24717a33de80090feba" name="krb5-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="5f930b72b233b4722367228afc8b5cc8795f9e2f3e341c166c81d02ce00e328a" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="e455a115d702761c24578f712486f34c9a23f0ffb2373f90d59de84b07e137be" name="krb5-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="4c49f24ae139c807a8377a359ae01470b38bfca69c04a97b79db901585990d23" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="04483cb86c2a747c73a236b213b10a69664c14980f1caf95ec6d6631b8e1b39b" name="krb5-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="a73cd9b72f7139048847d94267b94b4c94b33e0e6092bc3272bbdd861ce192be" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="ad2df5957dd2715c002c3596ebb1400c5b01ee63ae465bd9d9f39421b4227190" name="krb5-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="9cb8a6a856172a7d34d9e8c7abb91b344d6145acc6fefa67aea377db6f89a343" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="32ef45dcd0831d7bde50620641ff2360703f58aaafa87e74291588e282181f89" name="krb5-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="76a1cb447d4b359be3c70979923bc8d8901f3c35e8d2af65d2be712120fc4c77" name="krb5-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="9fce6208a6ddafe3c793474215ccf9b722ef19d11346a96b007683d9482ba625" name="krb5-mini-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="e549de6f5a5074822a3d4f9223c273073498d948136b0c594ad90825b2e5a6b8" name="krb5-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="691ed593298828eaf5bb30a5e09f89a3d1dfdea10f9c369d2b95f513994d71ad" name="krb5-mini-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="54d7e17c66f4f5f27699d51a25a76303f0f241fbf7e7f58cc66c333c09b77b96" name="krb5-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="c6357c723d9ae37a6a6535a3d8970595cc4eb0c9a7178f32c73ed4562246dc5a" name="krb5-mini-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="3d9e1cdda003dc64876c73af4e338919f6ecc4276016e1a5f6d7cf62e9967f52" name="krb5-mini-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="e9ded47140da69686e8a5c89fb451ee960f23744d0bc9bc76159ccb233ad10e2" name="krb5-mini-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="2bd5c8ac787923fdc4ef362b61cf278023f818e1ef11e8522dca48d66a498b47" name="krb5-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="d5997f837363f6fee5e3533f37340eca5f2402b497c19c4aca07c446a9299211" name="krb5-mini-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="4fce11808039354528ceb4ab91d0f5bd9964eb1b7af237071829844a97c5a665" name="krb5-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="92d3410c101ffcf34bf7a2ed94c1bf9f869173fb1a2be3dac8dab522b04adbbc" name="krb5-mini-debugsource" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="345324363380c20cc9da5293b6c47fe0f6f5ccf7088f502244b7400ca40c602d" name="krb5-mini-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="michael@stroeder.com" date="1461844800">- removed obsolete patches:
  * 0107-Fix-LDAP-null-deref-on-empty-arg-CVE-2016-3119.patch
  * krb5-mechglue_inqure_attrs.patch
- Upgrade from 1.14.1 to 1.14.2:
  * Fix a moderate-severity vulnerability in the LDAP KDC back end that
    could be exploited by a privileged kadmin user [CVE-2016-3119]
  * Improve documentation
  * Fix some interactions with GSSAPI interposer mechanisms</changelog>
  <changelog author="hguo@suse.com" date="1462881600">- Remove source file ccapi/common/win/OldCC/autolock.hxx
  that is not needed and does not carry an acceptable license.
  (bsc#968111)</changelog>
  <changelog author="michael@stroeder.com" date="1469188800">- Upgrade from 1.14.2 to 1.14.3:
  * Improve some error messages
  * Improve documentation
  * Allow a principal with nonexistent policy to bypass the minimum
    password lifetime check, consistent with other aspects of
    nonexistent policies
  * Fix a rare KDC denial of service vulnerability when anonymous client
    principals are restricted to obtaining TGTs only [CVE-2016-3120]</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- Upgrade to 1.15
- obsoleted Patch7 (krb5-1.7-doublelog.patch) fixed in 1.12.2
- obsoleted patch to src/util/gss-kernel-lib/Makefile.in since
  file is not available in upstream source anymore
- obsoleted Patch15 (krb5-fix_interposer.patch) fixed in 1.15
- doc/CHANGES not available in 1.15 source anymore
- Upgrade from 1.14.4 to 1.15 - major changes:
  Administrator experience:
  * Add support to kadmin for remote extraction of current keys without
    changing them (requires a special kadmin permission that is excluded
    from the wildcard permission), with the exception of highly
    protected keys.
  * Add a lockdown_keys principal attribute to prevent retrieval of the
    principal's keys (old or new) via the kadmin protocol.  In newly
    created databases, this attribute is set on the krbtgt and kadmin
    principals.
  * Restore recursive dump capability for DB2 back end, so sites can
    more easily recover from database corruption resulting from power
    failure events.
  * Add DNS auto-discovery of KDC and kpasswd servers from URI records,
  in addition to SRV records.  URI records can convey TCP and UDP
  servers and master KDC status in a single DNS lookup, and can also
  point to HTTPS proxy servers.
  * Add support for password history to the LDAP back end.
  * Add support for principal renaming to the LDAP back end.
  * Use the getrandom system call on supported Linux kernels to avoid
    blocking problems when getting entropy from the operating system.
  * In the PKINIT client, use the correct DigestInfo encoding for PKCS
    [#1] signatures, so that some especially strict smart cards will work.
  Code quality:
  * Clean up numerous compilation warnings.
  * Remove various infrequently built modules, including some preauth
    modules that were not built by default.
  Developer experience:
  * Add support for building with OpenSSL 1.1.
  * Use SHA-256 instead of MD5 for (non-cryptographic) hashing of
    authenticators in the replay cache.  This helps sites that must
    build with FIPS 140 conformant libraries that lack MD5.
  Protocol evolution:
  * Add support for the AES-SHA2 enctypes, which allows sites to conform
    to Suite B crypto requirements.
- Upgrade from 1.14.3 to 1.14.4 - major changes:
  * Fix some rare btree data corruption bugs
  * Fix numerous minor memory leaks
  * Improve portability (Linux-ppc64el, FreeBSD)
  * Improve some error messages
  * Improve documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1484827200">- Introduce patch
  krb5-1.15-fix_kdb_free_principal_e_data.patch
  to fix freeing of e_data in the kdb principal</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="54e0e3ff85737078c877a7c3be42a18b90cf869cadb0e8e4270f0dd2776df112" name="krb5-plugin-kdb-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="90cab1fefa780074d54e2e3c8dd84f2855196a0d1be436a8dcf4c144bc210025" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="5cd81ddff83fbbe98cb538c64d18531dbf158feded12d14be0a6e6151901bff6" name="krb5-plugin-kdb-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="77419883fae25a0866fbac9ca0c6233a210e1ce8a28f2d6aadf26c0b1f1d1cd1" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="4c9f6992b34a4f627034e13c11200c2cac64281966c991f045f18dce4a7826a0" name="krb5-plugin-kdb-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="a7da69014c0482fe26bb69e9186f2f94192ce1fb0c2c72edd25ecaff10e105d0" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="7e7d34faf6b8c7a40a77176a1472b41b57cb2736bbc3bdb828e769c2ba2df426" name="krb5-plugin-kdb-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="f2540e9fc2e09ed55d460bf98184afdbd498a6c11765232c43280cfd2fbaf112" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="e4540c66ba159ae3f18fa9df9f252d5909c0c168c8d473bba9bebfd3e0f95f35" name="krb5-plugin-kdb-ldap-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="e25e1054079b5b4bbe196a7f10c9123c831aa76aefe6daf1733e01eb751ded30" name="krb5-plugin-kdb-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="f84f703dca8737a61b45c084b18c9fc2947b7cd38f14e15f723bd3af72fe3d32" name="krb5-plugin-preauth-otp-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="18bf5678d244c73cb9df0b66027c39a4e2abb03a66d77e3d6819cee9b682c0cf" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="dc1317ba0ee1b1d0d3dc40349a5b2ae18d5ec63da22a6776a7c99cc81bd303f1" name="krb5-plugin-preauth-otp-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="b24856ca010f6e4283aad63235870659625fec55695ca76e1e1465f63bd1d755" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="45dfc0e0d246253556c1cc923de68cb5d330c63135f1fbff061a1101ba3e26a2" name="krb5-plugin-preauth-otp-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="3be64d6f04c69109b4cc7832884e62f1658852003d3cf138e4bafd2af36181cf" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="48306844046e15ba1dbc068168e2d49639cc546cdcc3ef4380c866d5da6aaade" name="krb5-plugin-preauth-otp-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="751a0c167909ad647504b07ee9e2d46ea2529d9bc4f82ff8592bccf32beae65c" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="1ea479fc67995d7d2872c5ad85e6c9ca5041894a1205b73780e4d4abb0131090" name="krb5-plugin-preauth-otp-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="cb685ee6ae44e9feb384dc4272602ebd5c7384d699f63c69f0e8759b36803157" name="krb5-plugin-preauth-otp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="41878bae2fa531c5a4befa8794310b33d8fb47843b7ae4011ee2b7568dfb6172" name="krb5-plugin-preauth-pkinit-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="507586d92ef1711bf51c456338207447e8b5b0e961e3bb9f71b8cb7f32731c82" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="bf7b8e9ddd11950397238fa492682c5c5e2d3c5ed6d5a967544545dde5df2400" name="krb5-plugin-preauth-pkinit-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="141d722512465a2efd7990be014fac3f83aa38a418e06ee706badd038bac60a9" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="26265e4be617b3e3928f01defb60b08a88c2a2ca40fecae9379aca1b9fc349b0" name="krb5-plugin-preauth-pkinit-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="897ad5da7a0fa1a8bee73a9b016a90d05dcd0b8a7b03b243f716e943b33a2b5d" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="057623efc70516ea4973343d8fdf9b58789d14949d36a6754b3118dec3872910" name="krb5-plugin-preauth-pkinit-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="6f975f17255e921532c9c65c26d77f0b2108ef7752339d4085dc0e5d770c9e45" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="c78358fc32b5bdde6bc5132bbb59c03d5eeb705fcfd4fe4d252e82e3d45ac75a" name="krb5-plugin-preauth-pkinit-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="82b6438c33ddaec1fea1069f171c76c39a331f1b6e031d7e5b9920dac2d8ec57" name="krb5-plugin-preauth-pkinit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="14df26afd8b4df7c298550e13cfb26d710f8bd1d9708555246b8ba51881b3bf4" name="krb5-server-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="3716c6caf212ba36b092ed83125161a99e193da27682f65521f487f1abbb9cad" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.10.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="9df94e2cadd62bd704f029538776962b5544f2ca78c5d0308fe7c12c0cb6d95a" name="krb5-server-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="d6a98d2013ce3497799a591761476c81f2d897023133b7b3c1d4173cac56038d" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.13.1"/>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
</package>
<package pkgid="65d85baf3c6778c2214f9bda6045e45d6de648d483d07f8f3047859832a26078" name="krb5-server-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="9e9b757a9732caf7baf26da3818d22236c5963e7b3dbb8d52ba2dfcbe7587281" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.3.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="1da53222bf6fafb5eee9d4f7564f93872218b108135a8b6fe28beeb4a1494b5f" name="krb5-server-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="d175a1102391190c72b36a2f9403a5604be3691660ff5f74d5ef8e9cc8ebe2fe" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.4.1"/>
  <changelog author="bwiedemann@suse.com" date="1485518400">- remove useless environment.pickle to make build-compare happy</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
</package>
<package pkgid="5071aefdc51ffe5681a10371b41e3543cee5ad4e3e2be9c2e5caeae36c4b04da" name="krb5-server-debuginfo" arch="i586">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="9351daf7bc034d499a1b40bae4c7f3300881f5450a719c65e5be59a0d9f263a8" name="krb5-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="lp152.5.6.1"/>
  <changelog author="michael@stroeder.com" date="1488628800">- removed obsolete krb5-1.15-fix_kdb_free_principal_e_data.patch
- Upgrade to 1.15.1
  * Allow KDB modules to determine how the e_data field of principal
    fields is freed
  * Fix udp_preference_limit when the KDC location is configured with
    SRV records
  * Fix KDC and kadmind startup on some IPv4-only systems
  * Fix the processing of PKINIT certificate matching rules which have
    two components and no explicit relation
  * Improve documentation</changelog>
  <changelog author="meissner@suse.com" date="1489060800">- use source urls.
- krb5.keyring: Added Greg Hudson</changelog>
  <changelog author="michael@stroeder.com" date="1489060801">- use HTTPS project and source URLs</changelog>
  <changelog author="kukuk@suse.de" date="1491480000">- Remove wrong PreRequires from krb5</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#918595 owned by varkoly@suse.com: VUL-0: CVE-2014-5355
  krb5: denial of service in krb5_read_message
- bug#912002 owned by varkoly@suse.com: VUL-0
  CVE-2014-5352, CVE-2014-9421, CVE-2014-9422, CVE-2014-9423:
  krb5: Vulnerabilities in kadmind, libgssrpc, gss_process_context_token
- bug#910458 owned by varkoly@suse.com: VUL-1
  CVE-2014-5354: krb5: NULL pointer dereference when using keyless entries
- bug#928978 owned by varkoly@suse.com: VUL-0
  CVE-2015-2694: krb5: issues in OTP and PKINIT kdcpreauth modules leading
  to requires_preauth bypass
- bug#910457 owned by varkoly@suse.com: VUL-1
  CVE-2014-5353: krb5: NULL pointer dereference when using a ticket policy
  name as a password policy name
- bug#991088 owned by hguo@suse.com: VUL-1
  CVE-2016-3120: krb5: S4U2Self KDC crash when anon is restricted
- bug#992853 owned by hguo@suse.com: krb5: bogus prerequires
- [fate#320326](https://fate.suse.com/320326)
- bug#982313 owned by pgajdos@suse.com: Doxygen unable to resolve reference
  from \cite</changelog>
  <changelog author="hguo@suse.com" date="1502452800">- Prevent kadmind.service startup failure caused by absence of
  LDAP service. (bsc#903543)</changelog>
  <changelog author="hguo@suse.com" date="1503057600">- Set "rdns" and "dns_canonicalize_hostname" to false in krb5.conf
  in order to improve client security in handling service principle
  names. (bsc#1054028)</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
</package>
<package pkgid="2cbaf553774c726b4eae16ccb9e120b57417d6ae043a7cd0db8561250037e94c" name="krename-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1336392000">- Fix taglib requires for older distros</changelog>
  <changelog author="alinm.elena@gmail.com" date="1353758400">- added freetype2 dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1394366400">- Add patch fix-freetype2-includes.patch to ensure that the right
  freetype2 includes are found</changelog>
  <changelog author="wbauer@tmo.at" date="1466164800">- Add gcc6-fix.patch to fix build with gcc6 (boo#985366)</changelog>
  <changelog author="wbauer@tmo.at" date="1518696000">- Update to 5.0.0:
  * Ported to Qt5 and KDE Frameworks 5
- Drop no longer necessary patches:
  * gcc6-fix.patch
  * fix-freetype2-includes.patch
  * krename-4.0.7_add_common_names_to_FindLIBPODOFO.patch
  * desktop-files.diff
- Let %suse_update_desktop_file add a GenericName instead of using
  a patch for that</changelog>
  <changelog author="wbauer@tmo.at" date="1546430400">- Add upstream patches to add support for exiv2-0.27:
  * 0001-Use-cmakedefine01-instead-of-macro_bool_to_01.patch
  * 0002-Fix-building-against-exiv2-0.27.patch
  * 0003-Fix-the-previous-commits-and-the-build-with-exiv2-0..patch
- Add lower-minimum-cmake-version.patch for Leap 42.3 to make it
  build with the older cmake version (3.5.2)
- Update servicemenus-files.patch and remove-gplv2-code.diff to
  conform to -p1 and use "%autopatch -p1" to apply all patches
- Add missing Qt5Test build requirement
- Change URL to userbase.kde.org, krename.net is a bit outdated
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Trim filler words from description. Fix bumpy grammar in the
  sentence with filename composition.</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1594468800">- Add use-local-cmake-modules-first.patch to fix build with KDE
  Frameworks 5.72.0
- Remove no longer necessary workaround for podofo 0.9.5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1601640000">- Add Close-the-app-if-the-progress-dialog-is-closed.patch to fix
  krename not terminating after renaming (boo#1177221, kde#395084)</changelog>
</package>
<package pkgid="9523c038ccf85a1822d86901fe72c561545b3c8c01aa3126535c42c50e10654c" name="krename-debugsource" arch="x86_64">
  <version epoch="0" ver="5.0.0" rel="lp152.4.3.1"/>
  <changelog author="idonmez@suse.com" date="1336392000">- Fix taglib requires for older distros</changelog>
  <changelog author="alinm.elena@gmail.com" date="1353758400">- added freetype2 dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1394366400">- Add patch fix-freetype2-includes.patch to ensure that the right
  freetype2 includes are found</changelog>
  <changelog author="wbauer@tmo.at" date="1466164800">- Add gcc6-fix.patch to fix build with gcc6 (boo#985366)</changelog>
  <changelog author="wbauer@tmo.at" date="1518696000">- Update to 5.0.0:
  * Ported to Qt5 and KDE Frameworks 5
- Drop no longer necessary patches:
  * gcc6-fix.patch
  * fix-freetype2-includes.patch
  * krename-4.0.7_add_common_names_to_FindLIBPODOFO.patch
  * desktop-files.diff
- Let %suse_update_desktop_file add a GenericName instead of using
  a patch for that</changelog>
  <changelog author="wbauer@tmo.at" date="1546430400">- Add upstream patches to add support for exiv2-0.27:
  * 0001-Use-cmakedefine01-instead-of-macro_bool_to_01.patch
  * 0002-Fix-building-against-exiv2-0.27.patch
  * 0003-Fix-the-previous-commits-and-the-build-with-exiv2-0..patch
- Add lower-minimum-cmake-version.patch for Leap 42.3 to make it
  build with the older cmake version (3.5.2)
- Update servicemenus-files.patch and remove-gplv2-code.diff to
  conform to -p1 and use "%autopatch -p1" to apply all patches
- Add missing Qt5Test build requirement
- Change URL to userbase.kde.org, krename.net is a bit outdated
- Run spec-cleaner</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1547035200">- Trim filler words from description. Fix bumpy grammar in the
  sentence with filename composition.</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1594468800">- Add use-local-cmake-modules-first.patch to fix build with KDE
  Frameworks 5.72.0
- Remove no longer necessary workaround for podofo 0.9.5</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1598529600">- Spec cleanup</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1601640000">- Add Close-the-app-if-the-progress-dialog-is-closed.patch to fix
  krename not terminating after renaming (boo#1177221, kde#395084)</changelog>
</package>
<package pkgid="ba1cdf5b570ce03986e51cc3157534b83351a15eb45ba1dc9e575877e174d879" name="krunner-debugsource" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [krunners] compile without foreach</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Don't delay emission of matchesChanged indefinitely
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Make sure we're checking whether tearing down is due after finishing a job
  * Port runnertest to QGuiApplication
  * Fix runnertest exiting early
  * Add a done signal to FindMatchesJob instead of using QObjectDecorator wrongly
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Consider UNC paths as NetworkShare context</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- No code change since 5.63.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Include KDE CMake settings macros as first
  * KRunner: port away from deprecated KF5 API
  * Remove unused variable "package"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Port QRegExp to QRegularExpression</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * templates: Convert license statements to SPDX headers
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * DBus Runner: Add service property to request actions once
  * Print a warning if runner is incompatible with KRunner
  * KRunner: Improve code snippet
  * Use ecm_setup_qtplugin_macro_names</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix and expand unit test
  * Do not persist runner whitelist to config
  * KRunner fix prepare/teardown signals (kde#420311)
  * Improve docstring for Type::InformationalMatch
  * Detect local files and folders starting with ~
  * Deprecate defunct functions</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594728000">- Add patch to fix ABI mismatch (kde#423003, boo#1175563):
  * 0001-Do-not-remove-virtual-method-from-build.patch</changelog>
</package>
<package pkgid="80153405a97ab98ebf6896d0689e08ae9f42f14fbdd02b889c32b03e452eff98" name="krunner-debugsource" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [krunners] compile without foreach</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Don't delay emission of matchesChanged indefinitely
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Make sure we're checking whether tearing down is due after finishing a job
  * Port runnertest to QGuiApplication
  * Fix runnertest exiting early
  * Add a done signal to FindMatchesJob instead of using QObjectDecorator wrongly
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Consider UNC paths as NetworkShare context</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- No code change since 5.63.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Include KDE CMake settings macros as first
  * KRunner: port away from deprecated KF5 API
  * Remove unused variable "package"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Port QRegExp to QRegularExpression</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * templates: Convert license statements to SPDX headers
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * DBus Runner: Add service property to request actions once
  * Print a warning if runner is incompatible with KRunner
  * KRunner: Improve code snippet
  * Use ecm_setup_qtplugin_macro_names</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix and expand unit test
  * Do not persist runner whitelist to config
  * KRunner fix prepare/teardown signals (kde#420311)
  * Improve docstring for Type::InformationalMatch
  * Detect local files and folders starting with ~
  * Deprecate defunct functions</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594728000">- Add patch to fix ABI mismatch (kde#423003, boo#1175563):
  * 0001-Do-not-remove-virtual-method-from-build.patch</changelog>
</package>
<package pkgid="8ca8a56e4f85c330e6ab0b288a40c2759ffca02da5570f6633f71dfe8ef0755f" name="kselftests-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="e7270395c0fca53ffff04ac76a037499f51e8a3ff471fa348b36d76d3e3acfc4" name="kselftests-kmp-rt-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="c561d19e50ae55826b4c7a2f62055ff60c89aaa633f2843b19d06f29ebfaba9e" name="kselftests-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.2.1"/>
  <changelog author="bp@suse.de" date="1588680000">- x86/devicetable: Move x86 specific macro out of generic code
  (bsc#1152489).
- commit 9581d95</changelog>
  <changelog author="bp@suse.de" date="1588680001">- x86/cpu: Add consistent CPU match macros (bsc#1152489).
- commit a70979e</changelog>
  <changelog author="dwagner@suse.de" date="1588766400">- Kbuild: Handle PREEMPT_RT for version string and magic
  (bsc#1162702).
  Refresh patches.suse/mkcompile_h-git-rid-of-UTS_TRUNCATE-from-LINUX_COMPI.patch
- commit ca184cb</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766401">- fix patches metadata
- fix Patch-mainline tags:
  patches.suse/NFS-Directory-page-cache-pages-need-to-be-locked-whe.patch
  patches.suse/NFS-Fix-a-page-leak-in-nfs_destroy_unlinked_subreque.patch
  patches.suse/NFS-Fix-fix-of-show_nfs_errors.patch
  patches.suse/NFS-Fix-memory-leaks-and-corruption-in-readdir.patch
  patches.suse/NFS-Fix-races-nfs_page_group_destroy-vs-nfs_destroy_.patch
  patches.suse/NFS-Fix-use-after-free-issues-in-nfs_pageio_add_requ.patch
  patches.suse/NFS-Revalidate-the-file-mapping-on-all-fatal-writeba.patch
  patches.suse/NFS-Revalidate-the-file-size-on-a-fatal-write-error.patch
  patches.suse/NFS-alloc_nfs_open_context-must-use-the-file-cred-wh.patch
  patches.suse/NFS-pnfs-Fix-pnfs_generic_prepare_to_resend_writes.patch
  patches.suse/NFSD-fixing-possible-null-pointer-derefering-in-copy.patch
  patches.suse/NFSv2-Fix-a-typo-in-encode_sattr.patch
  patches.suse/NFSv4-pnfs-Return-valid-stateids-in-nfs_layout_find_.patch
  patches.suse/NFSv4-pnfs_roc-must-use-cred_fscmp-to-compare-creds.patch
  patches.suse/NFSv4-try-lease-recovery-on-NFS4ERR_EXPIRED.patch
  patches.suse/NFSv4.0-nfs4_do_fsinfo-should-not-do-implicit-lease-.patch
  patches.suse/NFSv4.1-fix-handling-of-backchannel-binding-in-BIND_.patch
  patches.suse/NFSv4.1-make-cachethis-no-for-writes.patch
  patches.suse/NFSv4.x-Drop-the-slot-if-nfs4_delegreturn_prepare-wa.patch
  patches.suse/NFSv4.x-Handle-bad-dead-sessions-correctly-in-nfs41_.patch
  patches.suse/SUNRPC-Fix-a-potential-buffer-overflow-in-svc_print_.patch
  patches.suse/SUNRPC-Fix-backchannel-RPC-soft-lockups.patch
  patches.suse/SUNRPC-Remove-unreachable-error-condition.patch
  patches.suse/nfs-Fix-potential-posix_acl-refcnt-leak-in-nfs3_set_.patch
  patches.suse/nfsd-Don-t-add-locks-to-closed-or-closing-open-state.patch
  patches.suse/nfsd-Fix-NFSv4-READ-on-RDMA-when-using-readv.patch
  patches.suse/nfsd-Return-the-correct-number-of-bytes-written-to-t.patch
  patches.suse/nfsd-depend-on-CRYPTO_MD5-for-legacy-client-tracking.patch
  patches.suse/nfsd-fix-delay-timer-on-32-bit-architectures.patch
  patches.suse/nfsd-fix-jiffies-time_t-mixup-in-LRU-list.patch
  patches.suse/nfsd-fsnotify-on-rmdir-under-nfsd-clients.patch
  patches.suse/nfsd-memory-corruption-in-nfsd4_lock.patch
  patches.suse/nfsd-remove-nfs4_reset_lease-declarations.patch
  patches.suse/nfsd4-fix-up-replay_matches_cache.patch
  patches.suse/sunrpc-expiry_time-should-be-seconds-not-timeval.patch
  patches.suse/svcrdma-Fix-double-svc_rdma_send_ctxt_put-in-an-erro.patch
  patches.suse/svcrdma-Fix-leak-of-transport-addresses.patch
- commit 913c3fc</changelog>
  <changelog author="mbrugger@suse.com" date="1588766402">- arm64: smp: Treat unknown boot failures as being 'stuck in
  kernel' (bsc#1170680).
- arm64: kexec_file: add rng-seed support (bsc#1170680).
- arm64/kexec: Use consistent convention of initializing
  'kxec_buf.mem' with KEXEC_BUF_MEM_UNKNOWN (bsc#1170680).
- commit b8854a2</changelog>
  <changelog author="mbrugger@suse.com" date="1588766403">- arm64: Use pr_warn instead of pr_warning (bsc#1170680).
- Refresh
  patches.suse/arm64-smp-fix-smp_send_stop-behaviour.patch.
- commit deabe43</changelog>
  <changelog author="mbrugger@suse.com" date="1588766404">- arm64: kexec_file: Fixed code style (bsc#1170680).
- arm64: kexec_file: add crash dump support (bsc#1170680).
- libfdt: include fdt_addresses.c (bsc#1170680).
- arm64: kexec: remove unnecessary debug prints (bsc#1170680).
- libfdt: define INT32_MAX and UINT32_MAX in libfdt_env.h
  (bsc#1170680).
- commit 3e603a5</changelog>
  <changelog author="mbrugger@suse.com" date="1588766405">- arm64: Update config files. (bsc#1170680)
  Enable CONFIG_KEXEC_SIG and CONFIG_KEXEC_IMAGE_VERIFY_SIG
- commit 83dffa3</changelog>
  <changelog author="mbrugger@suse.com" date="1588766406">- arm64: blacklist.conf: ignore commit that got reveted later
- commit ea9a578</changelog>
  <changelog author="tiwai@suse.de" date="1588766407">- PM: hibernate: Freeze kernel threads in software_resume()
  (git-fixes).
- PM: ACPI: Output correct message on target power state
  (git-fixes).
- dmaengine: dmatest: Fix iteration non-stop logic (git-fixes).
- drm/amd/display: Fix green screen issue after suspend
  (git-fixes).
- drm/edid: Fix off-by-one in DispID DTD pixel clock (git-fixes).
- mmc: sdhci-msm: Enable host capabilities pertains to R1b
  response (git-fixes).
- commit 2128020</changelog>
  <changelog author="bp@suse.de" date="1588766408">- x86/cpu: Add a steppings field to struct x86_cpu_id
  (bsc#1152489).
- commit 0e87eea</changelog>
  <changelog author="mbrugger@suse.com" date="1588766409">- supported.conf: mark cuse as supported (bsc#1171279)
- commit 57d34e1</changelog>
  <changelog author="mkubecek@suse.cz" date="1588766410">- add kabi reference files
- import from Public RC2 submission (commit b8c70f8e938e)
- enable kabi checking for -default and -preempt flavors
- commit 297cfce</changelog>
  <changelog author="mkubecek@suse.cz" date="1588852800">- series.conf: cleanup
- update upstream references and resort:
  patches.suse/bnxt_en-Fix-VF-anti-spoof-filter-setup.patch
  patches.suse/bnxt_en-Fix-VLAN-acceleration-handling-in-bnxt_fix_f.patch
  patches.suse/bnxt_en-Improve-AER-slot-reset.patch
  patches.suse/bnxt_en-Reduce-BNXT_MSIX_VEC_MAX-value-to-supported-.patch
  patches.suse/bnxt_en-Return-error-when-allocating-zero-size-conte.patch
  patches.suse/ibmvnic-Skip-fatal-error-reset-after-passive-init.patch
- commit 7b08e5b</changelog>
  <changelog author="jkosina@suse.cz" date="1588852801">- patches.rt/drmi915_Use_local_lockunlock_irq()_in_intel_pipe_update_startend().patch
- patches.rt/drmradeoni915_Use_preempt_disableenable_rt()_where_recommended.patch
  Remove brackets from patch names.
- commit 06d182c</changelog>
  <changelog author="mkubecek@suse.cz" date="1589198400">- update metadata of nvme patches
  The nvme-5.8 branch in nvme repository got rebased again, update Git-commit
  tags:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit e573e56</changelog>
  <changelog author="mkubecek@suse.cz" date="1589371200">- update metadata of nvme patches and move them out from sorted section
  The nvme-5.8 branch in nvme repository got rebased fourth time in three
  weeks. Update Git-commit tags again and move the patches out of sorted
  section as keeping them there makes more harm than good.
- update upstream reference and move to "almost mainline" section:
  patches.suse/lpfc-Commonize-lpfc_async_xchg_ctx-state-and-flag-de.patch
  patches.suse/lpfc-Refactor-NVME-LS-receive-handling.patch
  patches.suse/lpfc-Refactor-Send-LS-Abort-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Request-support.patch
  patches.suse/lpfc-Refactor-Send-LS-Response-support.patch
  patches.suse/lpfc-Refactor-lpfc-nvme-headers.patch
  patches.suse/lpfc-Refactor-nvmet_rcv_ctx-to-create-lpfc_async_xch.patch
  patches.suse/lpfc-nvme-Add-Receive-LS-Request-and-Send-LS-Respons.patch
  patches.suse/lpfc-nvmet-Add-Send-LS-Request-and-Abort-LS-Request-.patch
  patches.suse/lpfc-nvmet-Add-support-for-NVME-LS-request-hosthandl.patch
  patches.suse/nvme-fc-Add-Disconnect-Association-Rcv-support.patch
  patches.suse/nvme-fc-Ensure-private-pointers-are-NULL-if-no-data.patch
  patches.suse/nvme-fc-Sync-header-to-FC-NVME-2-rev-1.08.patch
  patches.suse/nvme-fc-Update-header-and-host-for-common-definition.patch
  patches.suse/nvme-fc-and-nvmet-fc-revise-LLDD-api-for-LS-receptio.patch
  patches.suse/nvme-fc-convert-assoc_active-flag-to-bit-op.patch
  patches.suse/nvme-fc-nvmet-fc-refactor-for-common-LS-definitions.patch
  patches.suse/nvme-fcloop-add-target-to-host-LS-request-support.patch
  patches.suse/nvme-fcloop-refactor-to-enable-target-to-host-LS.patch
  patches.suse/nvmet-fc-Add-Disconnect-Association-Xmt-support.patch
  patches.suse/nvmet-fc-Better-size-LS-buffers.patch
  patches.suse/nvmet-fc-Update-target-for-common-definitions-for-LS.patch
  patches.suse/nvmet-fc-add-LS-failure-messages.patch
  patches.suse/nvmet-fc-perform-small-cleanups-on-unneeded-checks.patch
  patches.suse/nvmet-fc-rename-ls_list-to-ls_rcv_list.patch
  patches.suse/nvmet-fc-track-hostport-handle-for-associations.patch
- commit 07e41b7</changelog>
  <changelog author="dwagner@suse.de" date="1589457600">- sched: Provide cant_migrate() (bsc#1162702).
- commit ea3e50e</changelog>
  <changelog author="dwagner@suse.de" date="1589544000">- bpf/stackmap: Dont trylock mmap_sem with PREEMPT_RT and
  interrupts disabled (bsc#1162702).
- bpf, lpm: Make locking RT friendly (bsc#1162702).
- bpf: Prepare hashtab locking for PREEMPT_RT (bsc#1162702).
- bpf: Factor out hashtab bucket lock operations (bsc#1162702).
- bpf: Replace open coded recursion prevention in sys_bpf()
  (bsc#1162702).
- bpf: Use recursion prevention helpers in hashtab code
  (bsc#1162702).
- bpf: Provide recursion prevention helpers (bsc#1162702).
- bpf: Use migrate_disable/enable in array macros and cgroup/lirc
  code (bsc#1162702).
- bpf: Use migrate_disable/enabe() in trampoline code
  (bsc#1162702).
- bpf/tests: Use migrate disable instead of preempt disable
  (bsc#1162702).
- bpf: Use bpf_prog_run_pin_on_cpu() at simple call sites
  (bsc#1162702).
- bpf: Replace cant_sleep() with cant_migrate() (bsc#1162702).
- bpf: Provide bpf_prog_run_pin_on_cpu() helper (bsc#1162702).
- bpf: Dont iterate over possible CPUs with interrupts disabled
  (bsc#1162702).
- bpf: Remove recursion prevention from rcu free callback
  (bsc#1162702).
- perf/bpf: Remove preempt disable around BPF invocation
  (bsc#1162702).
- bpf/trace: Remove redundant preempt_disable from
  trace_call_bpf() (bsc#1162702).
- bpf: disable preemption for bpf progs attached to uprobe
  (bsc#1162702).
- bpf/trace: Remove EXPORT from trace_call_bpf() (bsc#1162702).
- bpf/tracing: Remove redundant preempt_disable() in
  __bpf_trace_run() (bsc#1162702).
- bpf: Update locking comment in hashtab code (bsc#1162702).
- bpf: Enforce preallocation for instrumentation programs on RT
  (bsc#1162702).
- bpf: Tighten the requirements for preallocated hash maps
  (bsc#1162702).
- sched/rt: Provide migrate_disable/enable() inlines
  (bsc#1162702).
  The mainline implementation for migrate_enable/disable() is
  needed for the BPF rework for RT. Revert this patch later
  to allow the RT patchset to add the full featured implementation.
- bpf, xdp: Start using the BPF dispatcher for XDP (bsc#1162702).
- bpf: Introduce BPF dispatcher (bsc#1162702).
- bpf: Move trampoline JIT image allocation to a function
  (bsc#1162702).
- commit 3a885bd</changelog>
  <changelog author="dwagner@suse.de" date="1589803200">- Remove empty bpf-Use-recursion-prevention-helpers-in-hashtab-code.patch
  The patch is empty because all the relevant code doesn't exist. Therefore,
  we just can just drop the patch.
- commit b1281f3</changelog>
</package>
<package pkgid="0a125f97976ab1ebc2fc09091cd17679d452a4adfeb49d463e7d4f9fe87dc528" name="kselftests-kmp-rt_debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="lp152.3.5.1"/>
  <changelog author="msuchanek@suse.de" date="1609329600">- powerpc/xmon: Change printk() to pr_cont() (bsc#1065729).
- commit 9125964</changelog>
  <changelog author="msuchanek@suse.de" date="1609329601">- powerpc: Fix incorrect stw{, ux, u, x} instructions in
  __set_pte_at (bsc#1065729).
- commit b5cc99b</changelog>
  <changelog author="msuchanek@suse.de" date="1609329602">- powerpc/bitops: Fix possible undefined behaviour with fls()
  and fls64() (bsc#1156395).
- commit e90809a</changelog>
  <changelog author="msuchanek@suse.de" date="1609329603">- ibmvnic: continue fatal error reset after passive init
  (bsc#1171078 ltc#184239 git-fixes).
- commit e6ea824</changelog>
  <changelog author="mkubecek@suse.cz" date="1609416000">- series.conf: cleanup
- move unsortable patch out of sorted section:
  patches.suse/ibmvnic-fix-NULL-pointer-dereference.patch
- update upstream reference:
  patches.suse/ibmvnic-continue-fatal-error-reset-after-passive-ini.patch
- commit a0b2ce7</changelog>
  <changelog author="tiwai@suse.de" date="1609761600">- ALSA/hda: apply jack fixup for the Acer Veriton
  N4640G/N6640G/N2510G (git-fixes).
- ALSA: hda/realtek: Apply jack fixup for Quanta NL3 (git-fixes).
- ALSA: hda/realtek: Add quirk for MSI-GP73 (git-fixes).
- ALSA: pcm: oss: Fix a few more UBSAN fixes (git-fixes).
- ALSA: usb-audio: Disable sample read check if firmware doesn't
  give back (git-fixes).
- ALSA: usb-audio: Add VID to support native DSD reproduction
  on FiiO devices (git-fixes).
- ALSA: core: memalloc: add page alignment for iram (git-fixes).
- ACPI: PNP: compare the string length in the matching_id()
  (git-fixes).
- clocksource/drivers/arm_arch_timer: Correct fault programming
  of CNTKCTL_EL1.EVNTI (git-fixes).
- clocksource/drivers/arm_arch_timer: Use stable count reader
  in erratum sne (git-fixes).
- clocksource/drivers/cadence_ttc: Fix memory leak in
  ttc_setup_clockevent() (git-fixes).
- clocksource/drivers/orion: Add missing clk_disable_unprepare()
  on error path (git-fixes).
- crypto: af_alg - avoid undefined behavior accessing salg_name
  (git-fixes).
- crypto: inside-secure - Fix sizeof() mismatch (git-fixes).
- crypto: talitos - Fix return type of current_desc_hdr()
  (git-fixes).
- crypto: talitos - Endianess in current_desc_hdr() (git-fixes).
- cfg80211: initialize rekey_data (git-fixes).
- commit 57d3bee</changelog>
  <changelog author="tiwai@suse.de" date="1609761601">- gpio: mvebu: update Armada XP per-CPU comment (git-fixes).
- dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
  (git-fixes).
- HID: i2c-hid: add Vero K147 to descriptor override (git-fixes).
- iio:imu:bmi160: Fix too large a buffer (git-fixes).
- crypto: atmel-i2c - select CONFIG_BITREVERSE (git-fixes).
- crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
  (git-fixes).
- crypto: omap-aes - Fix PM disable depth imbalance in
  omap_aes_probe (git-fixes).
- crypto: crypto4xx - Replace bitwise OR with logical OR in
  crypto4xx_build_pd (git-fixes).
- Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
  (git-fixes).
- Input: cros_ec_keyb - send 'scancodes' in addition to key events
  (git-fixes).
- commit 48f3c1f</changelog>
  <changelog author="tiwai@suse.de" date="1609761602">- remoteproc: qcom: Fix potential NULL dereference in
  adsp_init_mmio() (git-fixes).
- remoteproc: qcom: fix reference leak in adsp_start (git-fixes).
- remoteproc: q6v5-mss: fix error handling in q6v5_pds_enable
  (git-fixes).
- serial_core: Check for port state when tty is in error state
  (git-fixes).
- usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
  (git-fixes).
- USB: gadget: f_midi: setup SuperSpeed Plus descriptors
  (git-fixes).
- USB: gadget: f_acm: add support for SuperSpeed Plus (git-fixes).
- USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  (git-fixes).
- media: gspca: Fix memory leak in probe (git-fixes).
- media: saa7146: fix array overflow in vidioc_s_audio()
  (git-fixes).
- media: max2175: fix max2175_set_csm_mode() error code
  (git-fixes).
- media: imx214: Fix stop streaming (git-fixes).
- media: msi2500: assign SPI bus number dynamically (git-fixes).
- media: siano: fix memory leak of debugfs members in
  smsdvb_hotplug (git-fixes).
- media: sunxi-cir: ensure IR is handled when it is continuous
  (git-fixes).
- media: solo6x10: fix missing snd_card_free in error handling
  case (git-fixes).
- media: ipu3-cio2: Remove traces of returned buffers (git-fixes).
- media: ipu3-cio2: Make the field on subdev format
  V4L2_FIELD_NONE (git-fixes).
- media: ipu3-cio2: Validate mbus format in setting subdev format
  (git-fixes).
- media: ipu3-cio2: Serialise access to pad format (git-fixes).
- media: ipu3-cio2: Return actual subdev format (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_enc_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_release_dec_pm() (git-fixes).
- media: mtk-vcodec: add missing put_device() call in
  mtk_vcodec_init_dec_pm() (git-fixes).
- media: tm6000: Fix sizeof() mismatches (git-fixes).
- iwlwifi: pcie: add one missing entry for AX210 (git-fixes).
- commit 1e25d62</changelog>
  <changelog author="ghe@suse.com" date="1609761603">- ocfs2: fix unbalanced locking (bsc#1180506).
- commit b54b08a</changelog>
  <changelog author="mbenes@suse.cz" date="1609761604">- blacklist.conf: 310e3a4b5a4f ("tracing: Remove WARN_ON in start_thread()")
  CONFIG_HWLAT_TRACER is not set anywhere.
- commit 4f64022</changelog>
  <changelog author="mbenes@suse.cz" date="1609761605">- bpf: Fix bpf_put_raw_tracepoint()'s use of __module_address()
  (git-fixes).
- commit e888e29</changelog>
  <changelog author="mbenes@suse.cz" date="1609761606">- blacklist.conf: d9a9280a0d0a ("seq_buf: Avoid type mismatch for seq_buf_init")
  It breaks kABI. It is not worth the hassle to backport.
- commit 7c29506</changelog>
  <changelog author="mbenes@suse.cz" date="1609761607">- blacklist.conf: adab66b71abf ("Revert: "ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS"")
  We do not support metag and sparc64 archs.
- commit 99ad074</changelog>
  <changelog author="msuchanek@suse.de" date="1609761608">- powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145
  ltc#184630).
- commit a2fd2d8</changelog>
  <changelog author="lhenriques@suse.de" date="1609761609">- Refresh
  patches.suse/ceph-downgrade-warning-from-mdsmap-decode-to-debug.patch.
- Refresh
  patches.suse/ceph-fix-race-in-concurrent-_ceph_remove_cap-invocations.patch.
  Patches have been merged into mainline; refreshing Git-commit and Path-mainline
  tags in patches.
- commit d338d00</changelog>
  <changelog author="lhenriques@suse.de" date="1609761610">- Revert "ceph: allow rename operation under different quota
  realms" (bsc#1180541).
- commit 1a2a0a7</changelog>
  <changelog author="rgoldwyn@suse.com" date="1609761611">- btrfs: add missing check for nocow and compression inode flags (bsc#1178780).
- commit 98b0ffc</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- md/cluster: fix deadlock when node is doing resync job
  (bsc#1163727).
- md/cluster: block reshape with remote resync job (bsc#1163727).
- md/bitmap: fix memory leak of temporary bitmap (bsc#1163727).
- md/bitmap: md_bitmap_get_counter returns wrong blocks
  (bsc#1163727).
- md/bitmap: md_bitmap_read_sb uses wrong bitmap blocks
  (bsc#1163727).
- md-cluster: fix rmmod issue when md_cluster convert bitmap to
  none (bsc#1163727).
- md-cluster: fix safemode_delay value when converting to
  clustered bitmap (bsc#1163727).
- md-cluster: fix wild pointer of unlock_all_bitmaps()
  (bsc#1163727).
- commit 7522976</changelog>
  <changelog author="fdmanana@suse.com" date="1609848001">- btrfs: do not commit logs and transactions during link and
  rename operations (bsc#1180566).
- btrfs: do not take the log_mutex of the subvolume when pinning
  the log (bsc#1180566).
- btrfs: delete duplicated words + other fixes in comments
  (bsc#1180566).
- commit 916e8ac</changelog>
  <changelog author="tiwai@suse.de" date="1609848002">- mwifiex: Fix possible buffer overflows in
  mwifiex_cmd_802_11_ad_hoc_start (CVE-2020-36158 bsc#1180559).
- commit 3e80605</changelog>
</package>
<package pkgid="e54be7f796f3a5bb71f2c5f964b85777cf8488e441d062810b41d5dc93d83195" name="ktnef-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Cleanup now unused DBUS/Mailer code
  * Check if KMail is running before calling it, to avoid autostarting it at kontact startup
  * Provide DBus activation file for kmail
  * Remove wrong use of DBUS/Mailer servicetype
  * summaryview_part.h - fix build by including QMap
  * Fix apps name</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- Changes since 19.07.90:
  * Adapt to KCalendarCore namespace change</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 409662 - Missing "Save Attachments..." from Multiple Emails (kde#409662)
  * Fix using correct parent widget.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix Bug 412122 - Crash when closing the composer (kde#412122)
  * Fix hidpi support
  * FIX Bug 411836 - Folder settings for expired message stores bad values (maildir) (kde#411836)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- Changes since 19.08.2:
  * Fix Bug 412895 - Attachment detector should not trigger while saving as draft (kde#412895)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes since 19.08.3, only listing bugfixes:
  * Fix improve notification message (kde#411992)
  * Fix Bug 412904 - Provide option to hide menu bar in message view windows (kde#412904)
- Remove obsolete version requirements</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Show invalid fcc folder widget
  * When we use "send again" make sure to assign FCC to current folder.
  * honour notification inhibition by delaying reminders
  * Add missing Q_REQUIRED_RESULT</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Update Appstream for new release
  * Don't use nullptr as flag
  * Fix invalid fcc warning when we restore mail</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- Changes since 19.12.0:
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::
  * Update Appstream for new release
  * Fix Bug 415160 - KMail build fails if messagelib is built without Qca-qt5 (kde#415160)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579003200">- Drop the unneeded python2 requirement.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Fix option 'h' is already defined for help (now we can see this option)
  * Fix create mail from command line with body as utf8
  * Make sure that we show active windows
  * Fix show configure kmail
  * Fix change settings. KPIM::PIMMessageBox::fourBtnMsgBox return a QDialogButtonBox::</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Remove temporary directory
  * Remove temporary file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- Changes since 20.03.80:
  * Fix export to pdf filename
  * Do not ask users if they want to overwrite saved file twice
  * Fix clazy warning
  * Fix cppcheck warning</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Fix Bug 419948 - Changing an individual folder to "Prefer HTML"
    or to "Prefer Plain Text" is not remembered after restarting
    KMail (kde#419948)
  * Refresh message when we change display format
  * Remove extra margin
  * Fix assert when removing the selected folder from the local subscription
  * Use QLatin1Char('/') here
  * Show message info about restarting apps when we change a settings
  * comment not implement userfeedback plugin
  * Disable send again when we open directly an mbox
  * Fix generate pdf file</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix Bug 420327 reload email after changing html preference for contact (kde#420327)
  * Fix compile
  * Fix Bug 420327 - reload email after changing html preference for contact (kde#420327)</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Add obviously missing assignment (of mimeype name)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1600344000">- Add Fix-Bug-426596.patch to fix a possible crash of the
  archivemail agent after changing its settings (boo#1176666,
  kde#426596, kde#425786, kde#424232)</changelog>
</package>
<package pkgid="5a2363c225ac6db5556eefac16d2d714a1c5bc2310ca8f4c19259eb500be6e8f" name="kwin5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.18.6" rel="lp152.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1570708800">- Update to 5.17.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.0.php
- Changes since 5.16.90:
  * [platforms/drm] Disable transformations
  * don't allow to resize or move fullscreen windows
  * [platforms/hwcomposer] Fix build failure after D23495
  * Use lambdas for queued invocation of composition suspending (kde#412353)
  * [nightcolor] Print a debug message upon receiving new location from kded module
  * [nightcolor] Add missing const qualifiers
  * [nightcolor] Use local time in Automatic and Location mode</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1571745600">- Update to 5.17.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.1.php
- Changes since 5.17.0:
  * Fix non-atomic output init (kde#412684)
  * [aurorae] Fix visibility of Context Help button (kde#413145)
  * [effects/startupfeedback] Scale application icon size with cursor size
  * glx: Don't use sRGB configs on llvmpipe with depth 16
  * [aurorae] Fix crash on KCM teardown with Qt5.14
  * [tabbox] Correctly set global short on kwin tabbox (kde#407000)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1572350400">- Update to 5.17.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.2.php
- Changes since 5.17.1:
  * Dmabuf recovery on EGL reset (kde#411980)
  * [kcmkwin/kwindecoration] Fix default window size in KCMShell This also fixes a binding loop. (kde#413557)
  * [kcmkwin/desktop] Elide "Show animation when switching" checkbox text (kde#403151)
  * [kcmkwin/kwinvirtualdesktops] Improve default window size when opened in kcmshell
  * [scripting] Provide conversion functions for AbstractClient (kde#413044)
  * Don't use MESA_EGL_NO_X11_HEADERS
  * [kcmkwin/kwindecoration] Elide "theme default border size" CheckBox</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1573560000">- Update to 5.17.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.3.php
- Changes since 5.17.2:
  * [wayland] Fix sha check of filtered applications
  * [effects/startupfeedback] Fallback to small icon size when no cursor size is configured (kde#413605)
- Add patch to disarm wayland interface filter:
  * 0001-Bypass-wayland-interface-blacklisting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1575460800">- Update to 5.17.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.4.php
- Changes since 5.17.3:
  * Destroy dmabuf implementation on EGL backend going down (kde#413637)
  * [kcmkwin/kwindecoration] Better presentation of tabs
  * fix compilation with no-deprecated build of kwindowsystem
  * Fix the order of arguments passed to changeMaximize method (kde#413424,kde#412888,kde#413554)
  * [libkwineffects] Restore GL_DRAW_FRAMEBUFFER binding in GLTexture::clear</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1577102400">- Add patch to fix crash in systemsettings (kde#411166):
  * 0001-Possible-fix-for-KDecoration-crash-in-systemsettings.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1578398400">- Update to 5.17.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.5.php
- Changes since 5.17.4:
  * [nightcolor] Fix division by zero (kde#415359)
  * Possible fix for KDecoration crash in systemsettings (kde#411166)
- Remove patches, now upstream:
  * 0001-Possible-fix-for-KDecoration-crash-in-systemsettings.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579176000">- Update to 5.17.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.90.php
- Too many changes to list here
- Refresh patches:
  * 0001-Revert-Make-WindowSwitching-Alt-Tab-the-default-left.patch
  * 0001-Use-Xauthority-for-Xwayland.patch
- Drop patch, fallout apparently fixed:
  * 0001-Revert-platforms-x11-Force-glXSwapBuffers-to-block-w.patch
- Add patch to avoid env in shebang:
  * 0001-Use-fixed-absolute-path-instead-of-usr-bin-env-in-sh.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579780800">- Replace %make_jobs with %cmake_build</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1580990400">- Update to 5.18.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.0.php
- Changes since 5.17.90:
  * [libkwineffects] Detect AMD Navi GPUs
  * [x11] Fix visual artifacts during interactive resize (kde#415839)
  * ScreenEdge: Do not use localtime for measuring duration
  * [scripting] Expose Workspace::sendClientToDesktop() (kde#416093)
  * Fix minor issues in XdgShellClient::updateClientOutputs
  * Drop Toplevel::decorationRect()
  * s/m_xdgShellSurface/m_xdgShellToplevel/g
  * [wayland] Get rid of some duplicated code
  * Document AbstractClient::isResize() and AbstractClient::isMove()
  * Move definition of X11Client::damageNotifyEvent() to x11client.cpp
  * Rename X11Client::getSyncRequest() to X11Client::syncRequest()
  * Schedule a decoration repaint when client is resized
  * [decoration] Implement the size property
  * Fix kwin.upd not running if python 2 not installed
  * Port away from a deprecated signal
  * [wayland] Keep the opposite corner still when resizing a window
  * [wayland] Provide correct input geometry for client-side decorated clients (kde#416346)
  * [effects/morphingpopups] Don't animate popups when only shape changes (kde#416531)
  * [kcms/kwindecoration] Fix saving of window decoration plugin (kde#416525)
  * [nightcolor] Check whether Night Color is inhibited by a D-Bus service more efficiently
  * [plugins/windowsystem] Use upstream KWINDOWSYSTEM_BUILD_DEPRECATED_SINCE
  * [x11] Apply "Block compositing" rule right away (kde#415903)
- Refresh 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1581336000">- The devel subpackage needs libepoxy-devel (boo#1163286)
- Remove conditions for Leap 42</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582027200">- Update to 5.18.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.1.php
- Changes since 5.18.0:
  * Fix misplaced client windows (kde#417584)
  * [autotests] Make XWaylandInputTest more robust
  * Provide input geometry and input transformation matrix for Xwayland clients (kde#417444)
  * Return early if close button accepts input event (kde#415155)
  * [libkwineffects] Detect more AMD GPUs with GFX9 (Vega) chips
  * Require kdecoration &gt;= 5.18.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582632000">- Update to 5.18.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.2.php
- Changes since 5.18.1:
  * [kcm/effects] Clip ListView
  * Schedule a workspace repaint in AbstractClient::minimize()
  * [plastik] Disable problematic text hints (kde#417699,kde#413179)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1583841600">- Update to 5.18.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.3.php
- Changes since 5.18.2:
  * Notify about decorations button order change</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584100800">- Replace the Requires: xorg-x11-server-wayland dependency with a
  Recommends so we can install kwin5 in X11 only systems.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656000">- Update to 5.18.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.4.php
- Changes since 5.18.3:
  * [kcmkwin/kwindesktop] Fix inability to create more than one row on the "Virtual Desktops" settings page (kde#419141)
  * [wayland] Recursively destroy WindowPixmap objects
  * [scenes/opengl] Print a debug message when viewport limits aren't met</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656001">- Update to 5.18.4.1:
  * Version fixed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1588680000">- Update to 5.18.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.5.php
- Changes since 5.18.4.1:
  * Make Compositor more verbose
  * [scripting] Re-evaluate exclusions after switching between virtual desktops or activities
  * Avoid crash in KWin::DrmOutput::updateCursor (kde#420077)
  * [wayland] Fix teardown order
  * [wayland] avoid potential crash when checking for window inhibitions on desktop change (kde#420039)
  * [kcmkwin] Make dialog non blocking (kde#419118)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1601380800">- Update to 5.18.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma-5.18.6
- Changes since 5.18.5:
  * x11: Make removal of X11 event filters safe (kde#423319)
  * Fix invalidation of cached x stacking order in wayland only mode
  * effects/slidingpopups: Properly clip windows
  * Grab all possible keyboard modifiers for window commands (kde#424272)
  * [x11] Hold a passive grab on buttons only when needed (kde#394772)
  * Check if we successfully restored input focus
  * Partially revert a0c4a8e766a2160 (kde#424223)
  * [x11] Force FocusIn events for already focused windows
  * [x11] Create egl scene textures with right size
  * Fix the Plastik decoration with Qt 5.15
  * [wayland] Fix misuse of EGL/eglmesaext.h (kde#422131)
  * [wayland] Place lockscreen greeter above other windows
  * [kcmkwin/kwindecoration] Don't exec() QDialog (kde#421053)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1607601600">- Add patch to fix software rendering detection with Mesa 20.2+
  (boo#1179845):
  * 0001-Detect-softpipe-and-llvmpipe-on-Mesa-20.2.patch</changelog>
</package>
<package pkgid="0c9372681c64f1ff393e5ba52d886469ffbfd33e82077a28460229bec2425e64" name="kwin5-debugsource" arch="x86_64">
  <version epoch="0" ver="5.18.6" rel="lp152.2.3.1"/>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1570708800">- Update to 5.17.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.0.php
- Changes since 5.16.90:
  * [platforms/drm] Disable transformations
  * don't allow to resize or move fullscreen windows
  * [platforms/hwcomposer] Fix build failure after D23495
  * Use lambdas for queued invocation of composition suspending (kde#412353)
  * [nightcolor] Print a debug message upon receiving new location from kded module
  * [nightcolor] Add missing const qualifiers
  * [nightcolor] Use local time in Automatic and Location mode</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1571745600">- Update to 5.17.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.1.php
- Changes since 5.17.0:
  * Fix non-atomic output init (kde#412684)
  * [aurorae] Fix visibility of Context Help button (kde#413145)
  * [effects/startupfeedback] Scale application icon size with cursor size
  * glx: Don't use sRGB configs on llvmpipe with depth 16
  * [aurorae] Fix crash on KCM teardown with Qt5.14
  * [tabbox] Correctly set global short on kwin tabbox (kde#407000)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1572350400">- Update to 5.17.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.2.php
- Changes since 5.17.1:
  * Dmabuf recovery on EGL reset (kde#411980)
  * [kcmkwin/kwindecoration] Fix default window size in KCMShell This also fixes a binding loop. (kde#413557)
  * [kcmkwin/desktop] Elide "Show animation when switching" checkbox text (kde#403151)
  * [kcmkwin/kwinvirtualdesktops] Improve default window size when opened in kcmshell
  * [scripting] Provide conversion functions for AbstractClient (kde#413044)
  * Don't use MESA_EGL_NO_X11_HEADERS
  * [kcmkwin/kwindecoration] Elide "theme default border size" CheckBox</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1573560000">- Update to 5.17.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.3.php
- Changes since 5.17.2:
  * [wayland] Fix sha check of filtered applications
  * [effects/startupfeedback] Fallback to small icon size when no cursor size is configured (kde#413605)
- Add patch to disarm wayland interface filter:
  * 0001-Bypass-wayland-interface-blacklisting.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1575460800">- Update to 5.17.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.4.php
- Changes since 5.17.3:
  * Destroy dmabuf implementation on EGL backend going down (kde#413637)
  * [kcmkwin/kwindecoration] Better presentation of tabs
  * fix compilation with no-deprecated build of kwindowsystem
  * Fix the order of arguments passed to changeMaximize method (kde#413424,kde#412888,kde#413554)
  * [libkwineffects] Restore GL_DRAW_FRAMEBUFFER binding in GLTexture::clear</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1577102400">- Add patch to fix crash in systemsettings (kde#411166):
  * 0001-Possible-fix-for-KDecoration-crash-in-systemsettings.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1578398400">- Update to 5.17.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.5.php
- Changes since 5.17.4:
  * [nightcolor] Fix division by zero (kde#415359)
  * Possible fix for KDecoration crash in systemsettings (kde#411166)
- Remove patches, now upstream:
  * 0001-Possible-fix-for-KDecoration-crash-in-systemsettings.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1579176000">- Update to 5.17.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.17.90.php
- Too many changes to list here
- Refresh patches:
  * 0001-Revert-Make-WindowSwitching-Alt-Tab-the-default-left.patch
  * 0001-Use-Xauthority-for-Xwayland.patch
- Drop patch, fallout apparently fixed:
  * 0001-Revert-platforms-x11-Force-glXSwapBuffers-to-block-w.patch
- Add patch to avoid env in shebang:
  * 0001-Use-fixed-absolute-path-instead-of-usr-bin-env-in-sh.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1579780800">- Replace %make_jobs with %cmake_build</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1580990400">- Update to 5.18.0
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.0.php
- Changes since 5.17.90:
  * [libkwineffects] Detect AMD Navi GPUs
  * [x11] Fix visual artifacts during interactive resize (kde#415839)
  * ScreenEdge: Do not use localtime for measuring duration
  * [scripting] Expose Workspace::sendClientToDesktop() (kde#416093)
  * Fix minor issues in XdgShellClient::updateClientOutputs
  * Drop Toplevel::decorationRect()
  * s/m_xdgShellSurface/m_xdgShellToplevel/g
  * [wayland] Get rid of some duplicated code
  * Document AbstractClient::isResize() and AbstractClient::isMove()
  * Move definition of X11Client::damageNotifyEvent() to x11client.cpp
  * Rename X11Client::getSyncRequest() to X11Client::syncRequest()
  * Schedule a decoration repaint when client is resized
  * [decoration] Implement the size property
  * Fix kwin.upd not running if python 2 not installed
  * Port away from a deprecated signal
  * [wayland] Keep the opposite corner still when resizing a window
  * [wayland] Provide correct input geometry for client-side decorated clients (kde#416346)
  * [effects/morphingpopups] Don't animate popups when only shape changes (kde#416531)
  * [kcms/kwindecoration] Fix saving of window decoration plugin (kde#416525)
  * [nightcolor] Check whether Night Color is inhibited by a D-Bus service more efficiently
  * [plugins/windowsystem] Use upstream KWINDOWSYSTEM_BUILD_DEPRECATED_SINCE
  * [x11] Apply "Block compositing" rule right away (kde#415903)
- Refresh 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1581336000">- The devel subpackage needs libepoxy-devel (boo#1163286)
- Remove conditions for Leap 42</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582027200">- Update to 5.18.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.1.php
- Changes since 5.18.0:
  * Fix misplaced client windows (kde#417584)
  * [autotests] Make XWaylandInputTest more robust
  * Provide input geometry and input transformation matrix for Xwayland clients (kde#417444)
  * Return early if close button accepts input event (kde#415155)
  * [libkwineffects] Detect more AMD GPUs with GFX9 (Vega) chips
  * Require kdecoration &gt;= 5.18.0</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1582632000">- Update to 5.18.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.2.php
- Changes since 5.18.1:
  * [kcm/effects] Clip ListView
  * Schedule a workspace repaint in AbstractClient::minimize()
  * [plastik] Disable problematic text hints (kde#417699,kde#413179)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1583841600">- Update to 5.18.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.3.php
- Changes since 5.18.2:
  * Notify about decorations button order change</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1584100800">- Replace the Requires: xorg-x11-server-wayland dependency with a
  Recommends so we can install kwin5 in X11 only systems.</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656000">- Update to 5.18.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.4.php
- Changes since 5.18.3:
  * [kcmkwin/kwindesktop] Fix inability to create more than one row on the "Virtual Desktops" settings page (kde#419141)
  * [wayland] Recursively destroy WindowPixmap objects
  * [scenes/opengl] Print a debug message when viewport limits aren't met</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1585656001">- Update to 5.18.4.1:
  * Version fixed</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1588680000">- Update to 5.18.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.18.5.php
- Changes since 5.18.4.1:
  * Make Compositor more verbose
  * [scripting] Re-evaluate exclusions after switching between virtual desktops or activities
  * Avoid crash in KWin::DrmOutput::updateCursor (kde#420077)
  * [wayland] Fix teardown order
  * [wayland] avoid potential crash when checking for window inhibitions on desktop change (kde#420039)
  * [kcmkwin] Make dialog non blocking (kde#419118)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1601380800">- Update to 5.18.6
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/plasma-5.18.6
- Changes since 5.18.5:
  * x11: Make removal of X11 event filters safe (kde#423319)
  * Fix invalidation of cached x stacking order in wayland only mode
  * effects/slidingpopups: Properly clip windows
  * Grab all possible keyboard modifiers for window commands (kde#424272)
  * [x11] Hold a passive grab on buttons only when needed (kde#394772)
  * Check if we successfully restored input focus
  * Partially revert a0c4a8e766a2160 (kde#424223)
  * [x11] Force FocusIn events for already focused windows
  * [x11] Create egl scene textures with right size
  * Fix the Plastik decoration with Qt 5.15
  * [wayland] Fix misuse of EGL/eglmesaext.h (kde#422131)
  * [wayland] Place lockscreen greeter above other windows
  * [kcmkwin/kwindecoration] Don't exec() QDialog (kde#421053)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1607601600">- Add patch to fix software rendering detection with Mesa 20.2+
  (boo#1179845):
  * 0001-Detect-softpipe-and-llvmpipe-on-Mesa-20.2.patch</changelog>
</package>
<package pkgid="03fb6a74ceeb92c2d9fccfe259145fd2959e622a4babde206d91c3e31b2c7c0e" name="kyotocabinet-debuginfo" arch="i586">
  <version epoch="0" ver="1.2.77" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1343736000">- license update: SUSE-GPL-3.0-with-FLOSS-exception
  Package allows exceptions for linking with components under certain
  licenses (similar to MySQL)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Replace %makeinstall by make install; the former seldomly works
- kyoto requires at least i586 an arch; force it on RH6 (which
  defaults to i386)</changelog>
  <changelog author="dvaleev@suse.com" date="1356609600">- fix up configure test to handle lack of 8 byte atomics correctly
  (configure-8-byte-atomics.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
</package>
<package pkgid="9c3210b34fa416a119f3262ef3d87fc02bbacbd045028de5af98628dfacf785a" name="kyotocabinet-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.77" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1343736000">- license update: SUSE-GPL-3.0-with-FLOSS-exception
  Package allows exceptions for linking with components under certain
  licenses (similar to MySQL)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Replace %makeinstall by make install; the former seldomly works
- kyoto requires at least i586 an arch; force it on RH6 (which
  defaults to i386)</changelog>
  <changelog author="dvaleev@suse.com" date="1356609600">- fix up configure test to handle lack of 8 byte atomics correctly
  (configure-8-byte-atomics.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
</package>
<package pkgid="35d9d7436d40ea9cf227bfa8408bd824b135419ea3f55ad46dba5fb59157850f" name="kyotocabinet-debugsource" arch="i586">
  <version epoch="0" ver="1.2.77" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1343736000">- license update: SUSE-GPL-3.0-with-FLOSS-exception
  Package allows exceptions for linking with components under certain
  licenses (similar to MySQL)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Replace %makeinstall by make install; the former seldomly works
- kyoto requires at least i586 an arch; force it on RH6 (which
  defaults to i386)</changelog>
  <changelog author="dvaleev@suse.com" date="1356609600">- fix up configure test to handle lack of 8 byte atomics correctly
  (configure-8-byte-atomics.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
</package>
<package pkgid="0dd75b49fdd97d5df25610f71b6c49b32d4bc3efb8143c6c8779eaa0c45f4fa1" name="kyotocabinet-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2.77" rel="lp152.5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1343736000">- license update: SUSE-GPL-3.0-with-FLOSS-exception
  Package allows exceptions for linking with components under certain
  licenses (similar to MySQL)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Replace %makeinstall by make install; the former seldomly works
- kyoto requires at least i586 an arch; force it on RH6 (which
  defaults to i386)</changelog>
  <changelog author="dvaleev@suse.com" date="1356609600">- fix up configure test to handle lack of 8 byte atomics correctly
  (configure-8-byte-atomics.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file</changelog>
  <changelog author="Dr. Werner Fink &lt;werner@suse.de&gt;" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
</package>
<package pkgid="fae0701bc9ef971ff6e137ed122e17011a85405ba32c12ba7af08c5a35297626" name="lazarus-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.10" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1445169600">- update to 1.4.4
  This is a bug fix release. For complete list of changes see
  http://wiki.freepascal.org/Lazarus_1.4_fixes_branch#Fixes_for_1.4.4_.28Merged.29</changelog>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 1.6.0
  http://wiki.freepascal.org/Lazarus_1.6.0_release_notes
  http://wiki.lazarus.freepascal.org/User_Changes_3.0.0</changelog>
  <changelog author="aloisio@gmx.com" date="1479470400">- Update to 1.6.2
  This is a bugfix release. For a complete list of changes see:
  http://wiki.lazarus.freepascal.org/Lazarus_1.6_fixes_branch#Fixes_for_1.6.2_.28merged.29</changelog>
  <changelog author="mailaender@opensuse.org" date="1486468800">- Add an appdata.xml file for https://en.opensuse.org/openSUSE:AppStore
- Don't package lazarus/components/aggpas/gpc (problematic license)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726400">- Make build more reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Avoid bashisms in %prep. Escape call involving "!" with single
  quotes to really be sure that there is no history expansion.</changelog>
  <changelog author="aloisio@gmx.com" date="1512561600">- Update to version 1.8.0, for a complete changelog see:
  http://wiki.freepascal.org/Lazarus_1.8.0_release_notes
- Refreshed lazarus.desktop.patch
- Enabled Qt5 and built libQt5Pas for supported targets</changelog>
  <changelog author="ecsos@opensuse.org" date="1513512000">- add/download right/original source
- add missing %defattr(-,root,root,-) for new libQt5Pas and
  libQt5Pas-devel files section
- rebase lazarus.desktop.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1513512001">-  Actually install the LCL Qt5 interface</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Remove bashsisms from %prep. Replace useless use of cat.
  Fix unusual BuildRequires for sles&gt;=11.
  Trim filler wording from description.</changelog>
  <changelog author="termim@gmail.com" date="1515067200">- fix description fo libQt5Pas packages</changelog>
  <changelog author="aloisio@gmx.com" date="1519819200">- Update to version 1.8.2
  This is a bug fix release. For complete list of changes see
  http://wiki.lazarus.freepascal.org/Lazarus_1.8.0_release_notes</changelog>
  <changelog author="aloisio@gmx.com" date="1526990400">- Update to version 1.8.4
  This is a bugfix release. For a complete list of changes see:
  http://wiki.freepascal.org/Lazarus_1.8_fixes_branch#Fixes_for_1.8.4_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1549368000">- Update to version 2.0.0
  * For a complete list of changes, see:
    http://wiki.freepascal.org/Lazarus_2.0.0_release_notes
- Refreshed lazarus.desktop.patch and lazarus-rpmlintrc</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1555416000">- Update to version 2.0.2
  This is a bugfix release. For a complete list of changes see:
  http://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.2_.28Merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1565092800">- Update to version 2.0.4
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.4_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1572436800">- Update to version 2.0.6
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.6_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1586952000">- Update to version 2.0.8
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.8_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1594209600">- Update to version 2.0.10
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.10_.28merged.29
- Add lazarus-2.0.10-fpc304.patch (fix build with fpc 3.0.4)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1599220800">- Lazarus released a new 2.0.10 tarball (2.0.10-2) which just
  includes the lazarus-2.0.10-fpc304.patch patch on top of the
  previous one. Use this new tarball and update the Source
  URL accordingly
- Drop upstreamed patch:
  * lazarus-2.0.10-fpc304.patch
- Run specfile cleaner</changelog>
</package>
<package pkgid="eed501cfec3d2c0a46b230ef17a3a770456bab77484dcfbff252bcd86cb55325" name="lazarus-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.10" rel="lp152.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1445169600">- update to 1.4.4
  This is a bug fix release. For complete list of changes see
  http://wiki.freepascal.org/Lazarus_1.4_fixes_branch#Fixes_for_1.4.4_.28Merged.29</changelog>
  <changelog author="termim@gmail.com" date="1467028800">- Update to 1.6.0
  http://wiki.freepascal.org/Lazarus_1.6.0_release_notes
  http://wiki.lazarus.freepascal.org/User_Changes_3.0.0</changelog>
  <changelog author="aloisio@gmx.com" date="1479470400">- Update to 1.6.2
  This is a bugfix release. For a complete list of changes see:
  http://wiki.lazarus.freepascal.org/Lazarus_1.6_fixes_branch#Fixes_for_1.6.2_.28merged.29</changelog>
  <changelog author="mailaender@opensuse.org" date="1486468800">- Add an appdata.xml file for https://en.opensuse.org/openSUSE:AppStore
- Don't package lazarus/components/aggpas/gpc (problematic license)</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726400">- Make build more reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Avoid bashisms in %prep. Escape call involving "!" with single
  quotes to really be sure that there is no history expansion.</changelog>
  <changelog author="aloisio@gmx.com" date="1512561600">- Update to version 1.8.0, for a complete changelog see:
  http://wiki.freepascal.org/Lazarus_1.8.0_release_notes
- Refreshed lazarus.desktop.patch
- Enabled Qt5 and built libQt5Pas for supported targets</changelog>
  <changelog author="ecsos@opensuse.org" date="1513512000">- add/download right/original source
- add missing %defattr(-,root,root,-) for new libQt5Pas and
  libQt5Pas-devel files section
- rebase lazarus.desktop.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1513512001">-  Actually install the LCL Qt5 interface</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Remove bashsisms from %prep. Replace useless use of cat.
  Fix unusual BuildRequires for sles&gt;=11.
  Trim filler wording from description.</changelog>
  <changelog author="termim@gmail.com" date="1515067200">- fix description fo libQt5Pas packages</changelog>
  <changelog author="aloisio@gmx.com" date="1519819200">- Update to version 1.8.2
  This is a bug fix release. For complete list of changes see
  http://wiki.lazarus.freepascal.org/Lazarus_1.8.0_release_notes</changelog>
  <changelog author="aloisio@gmx.com" date="1526990400">- Update to version 1.8.4
  This is a bugfix release. For a complete list of changes see:
  http://wiki.freepascal.org/Lazarus_1.8_fixes_branch#Fixes_for_1.8.4_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1549368000">- Update to version 2.0.0
  * For a complete list of changes, see:
    http://wiki.freepascal.org/Lazarus_2.0.0_release_notes
- Refreshed lazarus.desktop.patch and lazarus-rpmlintrc</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1555416000">- Update to version 2.0.2
  This is a bugfix release. For a complete list of changes see:
  http://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.2_.28Merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1565092800">- Update to version 2.0.4
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.4_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1572436800">- Update to version 2.0.6
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.6_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1586952000">- Update to version 2.0.8
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.8_.28merged.29</changelog>
  <changelog author="Luigi Baldoni &lt;aloisio@gmx.com&gt;" date="1594209600">- Update to version 2.0.10
  This is a bugfix release. For a complete list of changes see:
  https://wiki.freepascal.org/Lazarus_2.0_fixes_branch#Fixes_for_2.0.10_.28merged.29
- Add lazarus-2.0.10-fpc304.patch (fix build with fpc 3.0.4)</changelog>
  <changelog author="Guillaume GARDET &lt;guillaume.gardet@opensuse.org&gt;" date="1599220800">- Lazarus released a new 2.0.10 tarball (2.0.10-2) which just
  includes the lazarus-2.0.10-fpc304.patch patch on top of the
  previous one. Use this new tarball and update the Source
  URL accordingly
- Drop upstreamed patch:
  * lazarus-2.0.10-fpc304.patch
- Run specfile cleaner</changelog>
</package>
<package pkgid="f11bd2a6c75e6921bc96f1f11bf4dd8f080c9cda9aed5376e7e651715bc1c050" name="ldb-debugsource" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.3.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="c8ddd81db09612d5c635f4ec73a31b322d9d296a68f981ba241cfc69d717a775" name="ldb-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.3.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="8fb9b559ef1ff1b3474ab36f34f21165b7fb1254999ec1b91a1679ccb5a8b274" name="ldb-debugsource" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.6.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="8ed45af8a736e22eb8327c2970b1590402ffc15636556ed34a1ad3f0916e1b34" name="ldb-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.6.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="b2beba049780618ff3f7d436ba5cd2f1c2fd1e76568df1b1e61a89fc3d22c383" name="ldb-debugsource" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.9.1"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).
- Add CVE-2020-27840-2.0.12.patch
- Add CVE-2021-20277-2.0.12.patch</changelog>
</package>
<package pkgid="7031b75037f96451b72dc24a5b366998bcd8e77b37f1aaec0b81447f01564bc7" name="ldb-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.9.1"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).
- Add CVE-2020-27840-2.0.12.patch
- Add CVE-2021-20277-2.0.12.patch</changelog>
</package>
<package pkgid="76a55037e1a91ecf33b264f2e56130aed8ecc780e2753055c0051b7c1ca27f70" name="ldb-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.3.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="cf9a685babb368fc69fe044e30535094d8c74e5a4088d3a37b15ae11f5969807" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.3.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="4a0f9fa712984ad4ce801fa4c9eaff7167eb8a132047ce5d9805d8cdf6845940" name="ldb-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.6.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="729f5085acac82834805a9c83701286322cadbfda6273e28ca660e24e32bfe46" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.6.1"/>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 1.2.3; (bsc#1080545);
  + Performance regression in DNS server with introduction of DNS wildcard;
    (bso#13191);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
</package>
<package pkgid="0a4600ae99647933df88b9505a3632948318f38d4d46d4486e371fb653c730c0" name="ldb-tools-debuginfo" arch="i586">
  <version epoch="0" ver="2.0.12" rel="lp152.2.9.1"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).
- Add CVE-2020-27840-2.0.12.patch
- Add CVE-2021-20277-2.0.12.patch</changelog>
</package>
<package pkgid="e29075f7a915af972a100e2559b82d03ead4ffce9c95a0707b675b771baaad50" name="ldb-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.12" rel="lp152.2.9.1"/>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to 1.3.2;
  + Expose the SHOW_BINARY, ENABLE_TRACING and DONT_CREATE_DB flag
    constants in the python api.
  + Don't load LDB_MODULESDIR as a module file.
  + Fix binary data in debug log (bug #13185).
  + Intersect the index from SCOPE_ONELEVEL with the index for the
    search expression (bso#13191)
  + GUID Index support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1527076800">- Update to 1.3.3
  + Fix failure to upgrade to the GUID index DB format; (bso#13306).</changelog>
  <changelog author="dmulder@suse.com" date="1534248000">- Update to 1.3.5
  + Security fix for CVE-2018-1140 (NULL pointer de-reference,
    bug #13374).
- 1.3.4
  + Fix memory leaks and missing error checks (bug #13459, #13471,
    [#13475]).
  + Fix fallback to full scan (performance regression) on
    one-level search (bug #13448).
  + Fix read corruption (missing results) during writes,
    particularly during a Samba subtree rename (bug #13452).</changelog>
  <changelog author="dmulder@suse.com" date="1534334400">- Add fix_ldb_mod_op_test.patch: Fix missing NULL terminator in
  ldb_mod_op_test testsuite</changelog>
  <changelog author="dmulder@suse.com" date="1534507200">- Update to 1.4.2
  + Security fix for CVE-2018-1140 (NULL pointer de-reference, bug 13374)
  + Fix memory leaks and missing error checks (bug 13459, 13471, 13475)
- 1.4.1
  + add some missing return value checks
  + Fix several mem leaks in ldb_index ldb_search ldb_tdb (bug#13475)
  + ldb_tdb: Use mem_ctx and so avoid leak onto long-term memory
    on duplicated add. (bug#13471)
  + ldb: Fix memory leak on module context (bug#13459)
  + Refused build of Samba 4.8 with ldb 1.4 (bug #13519)
  + Prevent similar issues in the future at configure time (bug #13519)
- 1.4.0
  + New LMDB backend (experimental)
  + Comprehensive tests for index behaviour
  + Enforce transactions for writes
  + Enforce read lock use for all reads
  + Fix memory leak in paged_results module.
    We hold at most 10 outstanding paged result cookies
    (bug #13362)
  + Fix compiler warnings
  + Python3 improvements
  + Restore --disable-python build
  + Fix for performance regression on one-level searches
    (bug #13448)
  + Samba's subtree_rename could fail to rename some entries
    (bug #13452)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1537876800">- Update license to LGPL-3.0</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1542024000">- Update to 1.4.3
  + Python: Ensure ldb.Dn can accept utf8 encoded unicode (bug 13616)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1549454400">- Update to 1.5.2
  + dirsync: Allow arbitrary length cookies (bug #13686)
  + The build uses python3 by default: --extra-python would take
    python2 now
  + To build with python2 only use:
    PYTHON=python2 ./configure
    PYTHON=python2 make
    PYTHON=python2 make install</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1551787200">- Update to 1.5.4
  + Fix standalone build of ldb.
  + C99 build fixes.
  + CVE-2019-3824 out of bounds read in wildcard compare (bug#13773)
- Update to 1.5.3
  + Avoid inefficient one-level searches (bug#13762)
  + The test api.py should not rely on order of entries in dict (bug#13772)</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1553688000">- Update to 1.4.6
  + CVE-2019-3824 out of bounds read in wildcard compare; (bso#13773);</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1564660800">- Update to 1.5.5
  + LDAP_REFERRAL_SCHEME_OPAQUE was added to ldb_module.h; (bso#12478);
  + Skip @ records early in a search full scan; (bso#13893);</changelog>
  <changelog author="James McDonough &lt;jmcdonough@suse.com&gt;" date="1570104000">- Update to version 2.0.7
  + Robustness improvements against duplicate attributes in ldb_filter_attrs()
    (bso#13695)
  + Robustness improvements against invalid string DN values (bso#14049)
  + log database repack so users know what is happening (bso#14059)
  + add ldb_options_get
  + add "batch_mode" option.
  + Remove Python 2.x support except to build just the bare C library
  + Remove --extra-python (a build time mode to produce Python2 and Python3
    bindings at the same time)
  + Fix standalone build of ldb.
  + CVE-2019-3824 out of bounds read in wildcard compare (bso#13773)</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1576584000">- Add obsolete ldb1 directive to baselibs.conf</changelog>
  <changelog author="David Mulder &lt;dmulder@suse.com&gt;" date="1579262400">- libldb1 fails to migrate to libldb2 when libldb2 version is less
  than libldb1 version; (bsc#1160341)</changelog>
  <changelog author="David Mulder &lt;david.mulder@suse.com&gt;" date="1579694400">ldb: Release ldb 2.0.8
  + Upgrade waf to version 2.0.18 to match the rest of Samba 4.11.x
    (bso#13846)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587556800">- Update to version 2.0.9
  + Samba 4.11 and later give incorrect results for SCOPE_ONE
    searches (bso#14270)</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1587729600">- CVE-2020-10700: Use-after-free in Samba AD DC LDAP Server with
  ASQ; (bso#14331); (bsc#1169850);
- Add CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Samuel Cabrero &lt;scabrero@suse.de&gt;" date="1588593600">- Update to version 2.0.10
  + Drop patch CVE-2020-10700-2.0.10.patch</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1593691200">- Update to version 2.0.12
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server
    when ASQ and VLV combined; (bso#14364); (bsc#1173159).
  + ldb_ldap: fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + lib/ldb: add unit test for ldb_ldap internal code.
- Update to version 2.0.11
  + lib ldb: lmdb init var before calling mdb_reader_check.
  + lib ldb: lmdb clear stale readers on write txn start;
    (bso#14330).
  + ldb tests: Confirm lmdb free list handling</changelog>
  <changelog author="Noel Power &lt;nopower@suse.com&gt;" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).
- Add CVE-2020-27840-2.0.12.patch
- Add CVE-2021-20277-2.0.12.patch</changelog>
</package>
<package pkgid="b7d3d84059139c4699b9f6e64b90b39d50f7fafff40e46dc614d4be2cde594c3" name="lftp-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.4" rel="lp152.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1415016000">- Fix the update-alternatives to be up-par</changelog>
  <changelog author="vcizek@suse.com" date="1418299200">- build with openssl instead of gnutls as suggested in bnc#792456
  * don't default to /etc/ssl/ca-bundle.pem (bnc#907803)
  * drop lftp-ca-bundle-path.patch
- fix a "curl" vulnerability CVE-2014-0139
  * that's because lftp uses code borrowed from curl 7.21.3 which
    contains this incorrect wildcard certificate validation
  * added lftp-CVE-2014-0139.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1420804800">- lftp 4.6.1:
  * new mirror option --scan-all-first.
  * mirror --Remove-source-files now removes files already present
    at the target.
  * added a workaround for FUSE with HadoopFS I/O error during
    rename(2).
  * fixed du to round file size up to block size.
  * fixed compilation with libressl.
  * fixed OPTS MLST, removed trailing semicolon.
  * fixed put to sftp with special files (like /dev/stdin).
  * fixed ftp to copy SID properly with GnuTLS
  * fixed mirror to follow redirections to files</changelog>
  <changelog author="idonmez@suse.com" date="1432814400">- Update to version 4.6.2:
  * new command "edit" instead of the edit alias.
  * new setting ssl:priority for disabling selected protocols.
  * new settings fish:auto-confirm and sftp:auto-confirm.
  * new setting file:use-lock to lock local files before accessing.
  * ftp: fixed disconnecting on timeout (broken in 4.6.0).
  * http: enclose ipv6 address in brackets in URLs and Host header.
  * fixed mirror for http protocol with redirections.
  * fixed `bookmark edit' to use correct XDG path if XDG is used.
  * fixed a wildcard certificate validation vulnerability (CVE-2014-0139).
  * fixed proxy authentication for CONNECT method.
  * fixed exit code of `help' command.
  * fixed sftp to show file names with slashes.
  * fixed pget status display when all chunks are done except the first one.
- Drop lftp-CVE-2014-0139.patch, fixed upstream.
- Refresh lftp-default-ssl-cipher.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 4.6.3a
  * new mirror setting mirror:overwrite and options
  - -overwrite/--no-overwrite.
  * new mirror option --upload-older.
  * new mirror option --recursion={always,never,missing,newer}.
  * try to download zero sized files as they may be non-empty.
  * torrent: new options --only-new, --only-incomplete.
  * torrent: fixed endless loop in FD deallocation.
  * fixed a memleak when parsing a directory listing with special
    files.
  * fixed one byte buffer overflow in cls.
  * fixed cmd:fail-exit description in the man page.
  * fixed large stack usage when parsing fish directory listings.
- refresh lftp-stdio.h.patch
- use spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1440158400">- lftp 4.6.4:
  * mirror: new option --transfer-all.
  * torrent: new setting torrent:timeout to limit time without any progress.
  * torrent: fixed handling of udp tracker without explicit port number.
  * torrent: improved transfer start time after metadata download.
  * improved sftp put -c to use a single FSETSTAT.
  * mirror --skip-noaccess now uses user name to check for permissions.
  * don't rename temporary file to the target name when transfer fails.
  * new cmd:prompt escapes \l and \L for local working directory.</changelog>
  <changelog author="andreas@suse.de" date="1450094400">- lftp 4.6.5:
  * sftp: fixed handling of out-of-order replies.
  * fixed futex_wait issue in SIGCHLD handler.
  * ftp: fixed ls freezing with unstable server connection.
  * torrent: show more correct ETA on the status line.
  * fixed gnutls priority string.
  * mirror: fixed excessive stack usage on large directories.
  * documented some hard to fix bugs.
  * improved man page on open command and cmd:prompt setting.
  * translations updated (zh_TW).</changelog>
  <changelog author="moio@suse.com" date="1462968000">- lftp 4.7.0:
  * ftp: add MODE Z support.
  * ftp: new settings ftp:use-mode-z, ftp:compressed-re, ftp:mode-z-level.
  * ftp: add MFF support for chmod.
  * ftp: prefer EPSV by default.
  * ftp: prefer CWD-relative paths.
  * ftp: enable MLSD by default (when supported).
  * ftp: assume AUTH is supported based on other newer features.
  * http: add support for digest authentication.
  * http: fixed webdav directory listing.
  * http: fixed a coredump when using a proxy for https.
  * sftp: fixed mirror to sftp with xfer:use-temp-file set.
  * ssl: optimized ssl for speed and lower syscall count.
  * ssl: log server's certificate fingerprint.
  * ssl: allow disabling certificate verification by its fingerprint.
  * get: rename backup file back if new file cannot be retrieved.
  * get: new settings xfer:backup-suffix and xfer:keep-backup.
  * get/put/mget/mput/pget/get1: add -q (quiet) option.
  * edit: allow creating a new file.
  * new debug option -T (truncate output file).
  * new mirror options: --{in,ex}clude-{rx,glob}-from.
  * new mirror options: --Remove-source-dirs, --Move.
- lftp 4.7.1:
  * http: fixed authentication for proxy, transient errors, max-retries=1.
  * http: fixed put with authentication not to use HEAD request.
  * translations updated (cs, ru).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470657600">- lftp 4.7.3:
  * mirror: don't add source directory base name to the target if
    the source ends with a slash.
  * mirror: fixed transfer count tracking in --scan-all-first mode.
  * new setting file:use-fallocate.
  * fixed "kill all" to remove queued commands.
  * fixed xfer:log-file setting to a writable file in a protected
    directory.
  * fixed xfer:clobber to allow output to non-plain files.
  * fixed mirror --Move to really keep source dir if it ends with a
    slash.
  From 4.7.2:
  * ftp: fixed loss of 17th file from MLSD listing.
  * new setting xfer:timeout.
  * ssl: improved ssl performance for small read sizes.
  * pget: allocate all needed disk space at once.
  * http: new settings http:use-range and hftp:use-range.
  * http: fixed setting http:authorization.
  * http: resolve redirections when getting files information.
  * http: include X-OC-MTime header in PUT requests for OwnCloud.
  * mirror: changed --Move option to keep source dir if it ends
    with a slash.
  * mirror: fixed timestamp mirroring when the source site sends
    redirections.
  * mirror: don't report errors when the target does not support
    chmod.
  * torrent: discard cached data after validating.
  * torrent: fixed a coredump on a file read error.
  * torrent: fixed closing oldest cached FD.
  * torrent/DHT: fixed our external IP voting.
  * torrent/DHT: black-list nodes which change node_id often.
  * torrent/DHT: black-list nodes which report many bad nodes.
  * torrent/DHT: ignore nodes with our own ID.
  * torrent/DHT: made node search more robust.
  * torrent/DHT: mark new nodes as questionable.
  * translations updated (zh_TW, ru).
- Added new build requirements libexpat-devel, libidn-devel and
  zlib-devel.
- Fixes for update-alternatives usage.
- Rebased lftp-wrapper+edit+compat-modify.patch to apply cleanly.</changelog>
  <changelog author="idonmez@suse.com" date="1480075200">- lftp 4.7.4:
  * mirror: new option --directory (-F) for source directories
    glob pattern.
  * mirror: fixed coredump with --depth-first + --recursion=newer.
  * mirror: create inaccessible directories anyway.
  * pget, torrent: avoid long delays in posix_fallocate(3) call.
  * new setting dns:name for host aliases.
  * ftp: allow SSL after certain types of ftp proxy.
  * http: fixed interpretation of links without a protocol.
  * cls: fixed glob metacharacter unquoting.
  * sftp: fixed mirroring of files with a leading tilde.
  * fixed transfer logging.</changelog>
  <changelog author="psimons@suse.com" date="1488369600">- Fork lftp in SLE-12-SP3 to use the version from Factory to enable
  support for OpenSSL as requested in fate#321022. That change also
  obsoletes the following patches, which SLE previously required:
  * lftp-deal-gracefully-with-ipv6-failures.patch corresponds to
    upstream commit 58bfcfc2b00c and has been included since
    release 4.7.2 [bnc#975913].
  * lftp-ca-bundle-path.patch is necessary only when lftp was
    compiled against GNUTLS, but we use OpenSSL now [bnc#792456].
- Normalize spec file with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1493208000">- Version update to 4.7.7:
  * License has changed from GPL-2.0+ to GPL-3.0+
  * Various small fixes all around
- Remove all internal patches, if the ftp compat is needed we need
  to upstream it on github:
  * lftp-autoconf-req.patch
  * lftp-compat-addfiles.patch
  * lftp-completion.patch
  * lftp-config_h.patch
  * lftp-stdio.h.patch
  * lftp-vi.1.1.tar.gz
  * lftp-wrapper+edit+compat-modify.patch
- Pass all the configure arguments to ensure nothing gets automagically
  disabled
- Remove unused dependencies</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- update to 4.8.2:
  * fixed a memory leak
  * fixed a core dump on exit
- includes changes from 4.8.1:
  * improved rate limiting to allow per-host limits
  * ftp: make prefer-epsv default "no"
  * ftp: fixed quote command and ftp:use-stat-for-list setting
  * switched to libidn2
  * fixed configure --disable-rpath
  * fixed coredump when a parent directory was deleted
- includes changes from 4.8.0:
  * mirror: improved performance of --scan-all-first for big trees
  * mirror: new --flat option to flatten the target directory structure
  * mmv: new command for file moving; redirect mv to mmv in certain cases
  * fixed compilation with newer openssl (1.1.0 and later)
  * du: allow multiple --exclude options to be combined
  * new setting cmd:nullglob for `glob' command prefix
  * http: use proppatch to set last-modified property
  * new settings net:connection-limit-timer and ftp:too-many-re
  * ftp: dynamically ajust connection limit
  * ftp: fixed core dump on LINK/SYMLINK when the command is not supported
  * get1: fixed -o option
  * sftp,fish: connect-program setting is now passed to the shell for execution
  * get/mget/put/mput: add -P option for parallel transfers and long options
  * fixed "local glob"
- build with libidn2
- package desktop file</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 4.8.3:
  * fixed 2 other core dumps on exit (incorrect order of deallocation).
  * fixed compilation with older C++ compilers.</changelog>
  <changelog author="psimons@suse.com" date="1519819200">- fix-zero-byte-file-upload-via-ssl.patch: fix a bug that caused
  lftp to break the TLS protocol and lose the connection when
  trying to upload a 0 byte length file. [bsc#1079168]</changelog>
  <changelog author="psimons@suse.com" date="1521201600">- Added openSUSE-specific patches that implement a wrapper script
  called "ftp" on top of the lftp command that is compatible to
  lukemftp. Those patches are maintained in a fork of the upstream
  project at https://github.com/opensuse/lftp. [bsc#1083331]
  * 0001-Add-content-of-the-SUSE-lftp-vi-1.1-archive.patch
  * 0002-Add-content-of-lftp-compat-addfiles.patch.patch
  * 0003-Add-content-of-lftp-completion.patch.patch
  * 0004-Include-config.h-to-detect-gnulib-macros.patch
  * 0005-Add-the-wrapper-code-to-the-Makefile-in-order-to-bui.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Update to version 4.8.4
  * Fixed a security vulnerability with "file:" file names.
    CVE-2018-10916 bsc#1103367
  * Fixed mirror --flat.
  * http: extract links from &lt;source&gt; tags.
  * Fixed upload of zero-length files over ftps.
  * Fixed assert on "mput -d".
  * Fixed a core dump.
  * Avoid multiple backup files of DHT cache.
  * Translations updated (uk, zh_CN).
- Remove upstream patch:
  * fix-zero-byte-file-upload-via-ssl.patch</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1551268800">- Add "relax-ssh-password-prompt-recognition.patch" to make sure
  the SSH login handling code detects password prompts more
  reliably. [bsc#1120946]</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1552996800">- Refresh "relax-ssh-password-prompt-recognition.patch" to the
  solution upstream chose in commit 0bcd1d2d6bfb9d53. The previous
  patch assumed incorrectly that the underlying buffer would always
  contain a NUL-terminated string. [bsc#1120946]</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1611144000">- Add "relax-ssh-password-prompt-recognition-some-more.patch" to
  synchronize the code in src/SSH_Access.cc with the upstream code
  from lftp-4.9.2. This change further improves the prompt
  recognition algorithm and makes it more robust. [bsc#1179669]
- Install COPYING file via %license macro rather than %doc.</changelog>
</package>
<package pkgid="9f59bdf9c0e570fe73a008ff79e22693a8376f4f4b6e29ab0286d266376bf02d" name="lftp-debugsource" arch="x86_64">
  <version epoch="0" ver="4.8.4" rel="lp152.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1415016000">- Fix the update-alternatives to be up-par</changelog>
  <changelog author="vcizek@suse.com" date="1418299200">- build with openssl instead of gnutls as suggested in bnc#792456
  * don't default to /etc/ssl/ca-bundle.pem (bnc#907803)
  * drop lftp-ca-bundle-path.patch
- fix a "curl" vulnerability CVE-2014-0139
  * that's because lftp uses code borrowed from curl 7.21.3 which
    contains this incorrect wildcard certificate validation
  * added lftp-CVE-2014-0139.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1420804800">- lftp 4.6.1:
  * new mirror option --scan-all-first.
  * mirror --Remove-source-files now removes files already present
    at the target.
  * added a workaround for FUSE with HadoopFS I/O error during
    rename(2).
  * fixed du to round file size up to block size.
  * fixed compilation with libressl.
  * fixed OPTS MLST, removed trailing semicolon.
  * fixed put to sftp with special files (like /dev/stdin).
  * fixed ftp to copy SID properly with GnuTLS
  * fixed mirror to follow redirections to files</changelog>
  <changelog author="idonmez@suse.com" date="1432814400">- Update to version 4.6.2:
  * new command "edit" instead of the edit alias.
  * new setting ssl:priority for disabling selected protocols.
  * new settings fish:auto-confirm and sftp:auto-confirm.
  * new setting file:use-lock to lock local files before accessing.
  * ftp: fixed disconnecting on timeout (broken in 4.6.0).
  * http: enclose ipv6 address in brackets in URLs and Host header.
  * fixed mirror for http protocol with redirections.
  * fixed `bookmark edit' to use correct XDG path if XDG is used.
  * fixed a wildcard certificate validation vulnerability (CVE-2014-0139).
  * fixed proxy authentication for CONNECT method.
  * fixed exit code of `help' command.
  * fixed sftp to show file names with slashes.
  * fixed pget status display when all chunks are done except the first one.
- Drop lftp-CVE-2014-0139.patch, fixed upstream.
- Refresh lftp-default-ssl-cipher.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1434715200">- update to 4.6.3a
  * new mirror setting mirror:overwrite and options
  - -overwrite/--no-overwrite.
  * new mirror option --upload-older.
  * new mirror option --recursion={always,never,missing,newer}.
  * try to download zero sized files as they may be non-empty.
  * torrent: new options --only-new, --only-incomplete.
  * torrent: fixed endless loop in FD deallocation.
  * fixed a memleak when parsing a directory listing with special
    files.
  * fixed one byte buffer overflow in cls.
  * fixed cmd:fail-exit description in the man page.
  * fixed large stack usage when parsing fish directory listings.
- refresh lftp-stdio.h.patch
- use spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1440158400">- lftp 4.6.4:
  * mirror: new option --transfer-all.
  * torrent: new setting torrent:timeout to limit time without any progress.
  * torrent: fixed handling of udp tracker without explicit port number.
  * torrent: improved transfer start time after metadata download.
  * improved sftp put -c to use a single FSETSTAT.
  * mirror --skip-noaccess now uses user name to check for permissions.
  * don't rename temporary file to the target name when transfer fails.
  * new cmd:prompt escapes \l and \L for local working directory.</changelog>
  <changelog author="andreas@suse.de" date="1450094400">- lftp 4.6.5:
  * sftp: fixed handling of out-of-order replies.
  * fixed futex_wait issue in SIGCHLD handler.
  * ftp: fixed ls freezing with unstable server connection.
  * torrent: show more correct ETA on the status line.
  * fixed gnutls priority string.
  * mirror: fixed excessive stack usage on large directories.
  * documented some hard to fix bugs.
  * improved man page on open command and cmd:prompt setting.
  * translations updated (zh_TW).</changelog>
  <changelog author="moio@suse.com" date="1462968000">- lftp 4.7.0:
  * ftp: add MODE Z support.
  * ftp: new settings ftp:use-mode-z, ftp:compressed-re, ftp:mode-z-level.
  * ftp: add MFF support for chmod.
  * ftp: prefer EPSV by default.
  * ftp: prefer CWD-relative paths.
  * ftp: enable MLSD by default (when supported).
  * ftp: assume AUTH is supported based on other newer features.
  * http: add support for digest authentication.
  * http: fixed webdav directory listing.
  * http: fixed a coredump when using a proxy for https.
  * sftp: fixed mirror to sftp with xfer:use-temp-file set.
  * ssl: optimized ssl for speed and lower syscall count.
  * ssl: log server's certificate fingerprint.
  * ssl: allow disabling certificate verification by its fingerprint.
  * get: rename backup file back if new file cannot be retrieved.
  * get: new settings xfer:backup-suffix and xfer:keep-backup.
  * get/put/mget/mput/pget/get1: add -q (quiet) option.
  * edit: allow creating a new file.
  * new debug option -T (truncate output file).
  * new mirror options: --{in,ex}clude-{rx,glob}-from.
  * new mirror options: --Remove-source-dirs, --Move.
- lftp 4.7.1:
  * http: fixed authentication for proxy, transient errors, max-retries=1.
  * http: fixed put with authentication not to use HEAD request.
  * translations updated (cs, ru).</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470657600">- lftp 4.7.3:
  * mirror: don't add source directory base name to the target if
    the source ends with a slash.
  * mirror: fixed transfer count tracking in --scan-all-first mode.
  * new setting file:use-fallocate.
  * fixed "kill all" to remove queued commands.
  * fixed xfer:log-file setting to a writable file in a protected
    directory.
  * fixed xfer:clobber to allow output to non-plain files.
  * fixed mirror --Move to really keep source dir if it ends with a
    slash.
  From 4.7.2:
  * ftp: fixed loss of 17th file from MLSD listing.
  * new setting xfer:timeout.
  * ssl: improved ssl performance for small read sizes.
  * pget: allocate all needed disk space at once.
  * http: new settings http:use-range and hftp:use-range.
  * http: fixed setting http:authorization.
  * http: resolve redirections when getting files information.
  * http: include X-OC-MTime header in PUT requests for OwnCloud.
  * mirror: changed --Move option to keep source dir if it ends
    with a slash.
  * mirror: fixed timestamp mirroring when the source site sends
    redirections.
  * mirror: don't report errors when the target does not support
    chmod.
  * torrent: discard cached data after validating.
  * torrent: fixed a coredump on a file read error.
  * torrent: fixed closing oldest cached FD.
  * torrent/DHT: fixed our external IP voting.
  * torrent/DHT: black-list nodes which change node_id often.
  * torrent/DHT: black-list nodes which report many bad nodes.
  * torrent/DHT: ignore nodes with our own ID.
  * torrent/DHT: made node search more robust.
  * torrent/DHT: mark new nodes as questionable.
  * translations updated (zh_TW, ru).
- Added new build requirements libexpat-devel, libidn-devel and
  zlib-devel.
- Fixes for update-alternatives usage.
- Rebased lftp-wrapper+edit+compat-modify.patch to apply cleanly.</changelog>
  <changelog author="idonmez@suse.com" date="1480075200">- lftp 4.7.4:
  * mirror: new option --directory (-F) for source directories
    glob pattern.
  * mirror: fixed coredump with --depth-first + --recursion=newer.
  * mirror: create inaccessible directories anyway.
  * pget, torrent: avoid long delays in posix_fallocate(3) call.
  * new setting dns:name for host aliases.
  * ftp: allow SSL after certain types of ftp proxy.
  * http: fixed interpretation of links without a protocol.
  * cls: fixed glob metacharacter unquoting.
  * sftp: fixed mirroring of files with a leading tilde.
  * fixed transfer logging.</changelog>
  <changelog author="psimons@suse.com" date="1488369600">- Fork lftp in SLE-12-SP3 to use the version from Factory to enable
  support for OpenSSL as requested in fate#321022. That change also
  obsoletes the following patches, which SLE previously required:
  * lftp-deal-gracefully-with-ipv6-failures.patch corresponds to
    upstream commit 58bfcfc2b00c and has been included since
    release 4.7.2 [bnc#975913].
  * lftp-ca-bundle-path.patch is necessary only when lftp was
    compiled against GNUTLS, but we use OpenSSL now [bnc#792456].
- Normalize spec file with spec-cleaner.</changelog>
  <changelog author="tchvatal@suse.com" date="1493208000">- Version update to 4.7.7:
  * License has changed from GPL-2.0+ to GPL-3.0+
  * Various small fixes all around
- Remove all internal patches, if the ftp compat is needed we need
  to upstream it on github:
  * lftp-autoconf-req.patch
  * lftp-compat-addfiles.patch
  * lftp-completion.patch
  * lftp-config_h.patch
  * lftp-stdio.h.patch
  * lftp-vi.1.1.tar.gz
  * lftp-wrapper+edit+compat-modify.patch
- Pass all the configure arguments to ensure nothing gets automagically
  disabled
- Remove unused dependencies</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- update to 4.8.2:
  * fixed a memory leak
  * fixed a core dump on exit
- includes changes from 4.8.1:
  * improved rate limiting to allow per-host limits
  * ftp: make prefer-epsv default "no"
  * ftp: fixed quote command and ftp:use-stat-for-list setting
  * switched to libidn2
  * fixed configure --disable-rpath
  * fixed coredump when a parent directory was deleted
- includes changes from 4.8.0:
  * mirror: improved performance of --scan-all-first for big trees
  * mirror: new --flat option to flatten the target directory structure
  * mmv: new command for file moving; redirect mv to mmv in certain cases
  * fixed compilation with newer openssl (1.1.0 and later)
  * du: allow multiple --exclude options to be combined
  * new setting cmd:nullglob for `glob' command prefix
  * http: use proppatch to set last-modified property
  * new settings net:connection-limit-timer and ftp:too-many-re
  * ftp: dynamically ajust connection limit
  * ftp: fixed core dump on LINK/SYMLINK when the command is not supported
  * get1: fixed -o option
  * sftp,fish: connect-program setting is now passed to the shell for execution
  * get/mget/put/mput: add -P option for parallel transfers and long options
  * fixed "local glob"
- build with libidn2
- package desktop file</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- update to 4.8.3:
  * fixed 2 other core dumps on exit (incorrect order of deallocation).
  * fixed compilation with older C++ compilers.</changelog>
  <changelog author="psimons@suse.com" date="1519819200">- fix-zero-byte-file-upload-via-ssl.patch: fix a bug that caused
  lftp to break the TLS protocol and lose the connection when
  trying to upload a 0 byte length file. [bsc#1079168]</changelog>
  <changelog author="psimons@suse.com" date="1521201600">- Added openSUSE-specific patches that implement a wrapper script
  called "ftp" on top of the lftp command that is compatible to
  lukemftp. Those patches are maintained in a fork of the upstream
  project at https://github.com/opensuse/lftp. [bsc#1083331]
  * 0001-Add-content-of-the-SUSE-lftp-vi-1.1-archive.patch
  * 0002-Add-content-of-lftp-compat-addfiles.patch.patch
  * 0003-Add-content-of-lftp-completion.patch.patch
  * 0004-Include-config.h-to-detect-gnulib-macros.patch
  * 0005-Add-the-wrapper-code-to-the-Makefile-in-order-to-bui.patch</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1538654400">- Update to version 4.8.4
  * Fixed a security vulnerability with "file:" file names.
    CVE-2018-10916 bsc#1103367
  * Fixed mirror --flat.
  * http: extract links from &lt;source&gt; tags.
  * Fixed upload of zero-length files over ftps.
  * Fixed assert on "mput -d".
  * Fixed a core dump.
  * Avoid multiple backup files of DHT cache.
  * Translations updated (uk, zh_CN).
- Remove upstream patch:
  * fix-zero-byte-file-upload-via-ssl.patch</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1551268800">- Add "relax-ssh-password-prompt-recognition.patch" to make sure
  the SSH login handling code detects password prompts more
  reliably. [bsc#1120946]</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1552996800">- Refresh "relax-ssh-password-prompt-recognition.patch" to the
  solution upstream chose in commit 0bcd1d2d6bfb9d53. The previous
  patch assumed incorrectly that the underlying buffer would always
  contain a NUL-terminated string. [bsc#1120946]</changelog>
  <changelog author="Peter Simons &lt;psimons@suse.com&gt;" date="1611144000">- Add "relax-ssh-password-prompt-recognition-some-more.patch" to
  synchronize the code in src/SSH_Access.cc with the upstream code
  from lftp-4.9.2. This change further improves the prompt
  recognition algorithm and makes it more robust. [bsc#1179669]
- Install COPYING file via %license macro rather than %doc.</changelog>
</package>
<package pkgid="efb8aa831e8b1a73ffb0e23ff87ead0e4a4145b144c0508f2bbe8ad028dfb8c1" name="libBasicUsageEnvironment1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2019.06.28" rel="lp152.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1414584000">- BuildRequire pkg-config to get rpm Provides/Requires pkgconfig(live555)</changelog>
  <changelog author="aloisio@gmx.com" date="1422705600">- fixed paths in live555.pc
- update to version 2015.01.27:
  * Fixed a bug in "MPEG2TransportStreamFromESSource" that could
    sometimes cause an abort if more than one Elementary Stream
    Source were multiplexed into a single Transport Stream.
    (Thanks to Marc Palau for reporting this issue.)
- version 2015.01.19:
  * Fixed an obscure bug in "RTSPClient" that might conceivably
    have caused a crash if it received a completely empty RTSP
    response.
- version 2015.01.04:
  * Updated "config.iphone-simulator" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
  * In the "BasicUsageEnvironment" implementation, renamed
    "EventTime" to "_EventTime" to avoid a reported naming conflict.
- version 2014.12.17:
  * Updated "RTSPServerSupportingHTTPStreaming" to make sure that
    the data stream source gets closed when it's no longer needed.
- version 2014.12.16:
  * Changed the FD_SETSIZE check (introduced in version 2014.12.11)
    so that it's not done in Windows (because in Windows,
    FD_SETSIZE has different semantics).
    (Thanks to Deanna Earley for reporting this.)
- version 2014.12.13:
  * Updated the H.264/H.265 parsing code in "H264or5VideoStreamFramer"
    to be a little smarter about how it computes a file's frame rate
    (when streaming a 'raw' H.264 or H.265 file).
    (Thanks to Michel Promonet for inspiring this.)
  * Updated "config.iphoneos" to work with the latest Xcode.
    (Thanks to Braden Ackerman.)
- version 2014.12.11:
  * Changed our implementation of "setBackgroundHandling()" and
    "moveBackgroundHandling()" in "BasicTaskScheduler" to check for
    (and disallow) socket numbers &gt;= FD_SETSIZE, because &lt;sys/select.h&gt;
    has a bug (at least, in most systems) that causes buffer overflow
    in this case.  (Thanks to Michel Promonet for pointing this out.)
- version 2014.12.09:
  * Needed to make the "QuickTimeFileSink" constructor and destructor
    protected: to allow subclassing.
- version 2014.12.08:
  * Fixed a bug in parsing 'absolute' RTSP "Range:" headers with no end
    time. (Thanks to Ken Chow for reporting this.)
  * Added a new option "-K" to "openRTSP, to tell the client to
    periodically send "OPTIONS" requests as 'keep-alives' for buggy
    servers that don't use incoming RTCP "RR" packets to indicate client
    liveness.  (Thanks to Peter Schlaile for this suggestion.)
  * Added a new 'protected' virtual member function "noteRecordedFrame()"
    to "QuickTimeFileSink". This function is called whenever a frame is
    recorded to the output file. The default implementation of this
    virtual function does nothing, but subclasses can redefine it if
    they wish.
- version 2014.11.28:
  * When "RTSPClient" parses a RTSP response, we first skip over any
    blank lines that may be at the start of the response.  This can
    happen if the previous response (e.g., to a "DESCRIBE") contained
    extra whitespace. (Thanks to ilwoo Nam for giving an example of
    a server that exhibited this behavior.)
- version 2014.11.12:
  * We had forgotten to initialize the "RTSPClient" member variable
  "fAllowBasicAuthentication" that we introduced in the previous
  version.
- version 2014.11.07:
  * Added a new "RTSPClient" member function "disallowBasicAuthentication()"
    that you can call if you don't want a RTSP client to perform 'basic'
    authentication (whcih involves sending the username and password over
    the network), even if the server asks for this.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated the debugging printout code in "RTCP.cpp" to identify all
    known RTCP payload types, even if we don't currently handle them.
    We also - when doing debugging printout - parse and print out
    the contents of SDES RTCP packets.
- version 2014.11.01:
  * Updated "RTSPClient" so that it reuses "fCurrentAuthenticator"
    if we previously updated it with data from a "WWW-Authenticate:"
    response, even if a non_NULL "authenticator" parameter was
    passed as a parameter to the command.  This reduces the number
    of authetication exchanges that take place if the server asks
    for authentication on more than one command in a RTSP session.
    (Thanks to Tomasz Pala for this suggestion.)
  * Updated "DigestAuthenticator" to allow for the possibility of
    "username" or "password" being NULL.
  * Updated the "RTSPServer" implementation to add an access check
    before the first "SETUP" (the one that doesn't include a
    session id), because it's possible, in principle, for a client
    to send such a "SETUP" without first sending a "DESCRIBE".
    Therefore, we need to perform access checks on both commands.
- version 2014.10.28:
  * Added support for the VP9 video RTP payload format (sending and
    receiving), including the demultiplexing and streaming of a VP9
    video track from a Matroska-format file.
  * Made "VP8VideoRTPSource" more robust against a bad first-byte
    header field in the payload.
- version 2014.10.21:
  * Increased the max output packet size for "MultiFramedRTPSink"
    and "RTCPInstance" from 1448 to 1456, because we had a report
    of problems when proxying incoming JPEG/RTP packets of this
    size (and because 1456 bytes still gives a packet size of no
    more than 1500 bytes when we add
    in IP, UDP, and UMTP headers).
- version 2014.10.20:
  * Increased the RTSP request and response buffer sizes from 10000
    to 20000 bytes, because we saw a RTSP stream (VP8 video) that
    had an extremely large "configuration=" string that was hiting
    the previous limit.
- version 2014.10.16:
  * Fixed the "RTSPServer" implementation to handle a rare race
    condition that could cause a "ServerMediaSession" object to
    be deleted while it was being used to implement "DESCRIBE".
    (Thanks to Michel Promonet for reporting this.)
- version 2014.10.07:
  * Fixed a bug in the "MultiFramedRTPSource" implementation where
    we weren't properly checking the size of incoming RTP packets
    that have the "CC" field (i.e., number of "CSRC" fields) non-zero.
  * Updated "Groupsock::output()" to be a virtual function.
    (This makes it possible to implement "Groupsock" subclasses that
    implement 'bump-in-the-stack' protocols (such as SRT(C)P) below
    RTP/RTCP.)
- version 2014.10.03:
  * Fixed a problem in the "timestampString()" routine that occurs
    if "time_t" is 64 bits, but we're on a 32-bit machine.
    (Thanks to Deanna Earley for reporting this.)
  * Updated the debugging output code in "RTCP.cpp" to make it
    clearer that SDES and APP packets are not invalid; just not
    (yet) handled by us.</changelog>
  <changelog author="aloisio@gmx.com" date="1444996800">- Update to version 2015.10.12:
  * The change that we made to the "ProxyServerMediaSession" code
    in version 2015.07.31 (to reset the proxy server's state if
    a back-end "SETUP" command fails) was too aggressive; it was
    deleting the "ProxyServerMediaSubsession" object.  This was
    a problem, because "SETUP" commands can be called from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we now deal with a failed back-end "SETUP" command
    simply by resetting the 'back-end' connection. (Thanks to
    Hardik Sangani for reporting this issue.)
- 2015.09.24:
  * Fixed a bug in "RTSPClient" that could cause a crash if the
    TCP connection was lost while resending a RTSP command.
    (Thanks to ChaSeop Im for reporting this.)
  * Moved some more generic 'media server' functionality from
    "RTSPServer" to its parent class "GenericMediaServer".
  * Added a new pure virtual function "getRTPSinkandRTCP()"
    to "ServerMediaSubsession" to allow callers to get ('const')
    access to a stream's "RTPSink" and/or "RTCPInstance" (and
    thus their corresponding "Groupsock" objects) after the
    stream has been created (using "getStreamParameters()".
  * Updated "Groupsock" to allow for the possibility of there
    being more than one 'destRecord' for each sessionId.
    (This is something that doesn't happen in the normal case;
    it's only a special case for WebRTC.)
- 2015.08.07:
  * If a "RTCPInstance" happens to have both a source and a sink
    (an unusual situation), we now include both "SR" and "RR"
    reports in each outgoing RTCP report packet.
  * When a "RTPSink" is being closed, we no longer turn off
    background reading on its 'groupsock' (because, being a
    "RTPSink", we never turned it on), just in case the
    'groupsock' is also being shared with something else
    (e.g., a "RTPSource") that does background read handling).
- 2015.08.06:
  * Fixed a bug that would cause the destruction of a
    "RTCPInstance" that was sharing a 'groupsock'
    with a "RTPSource" (i.e., for multiplexed RTP and RTCP) to
    stop the "RTPSource" from continuing to receive incoming RTP
    packets.  This normally wasn't a major problem, because the
    destruction of the "RTCPInstance" was usually followed
    immediately by the destruction of the "RTPSource".
    However, it's also possible for the "RTPSource" to stay alive
    long after the "RTCPInstance" is deleted; in this case things
    will now work correctly.
- 2015.07.31:
  * Fixed a minor memory leak in the "ProxyServerMediaSession"
    code ("PresentationTimeSessionNormalizer"s and
    "PresentationTimeSubsessionNormalizer"s weren't being deleted
    properly). (Thanks to Dnyanesh Gate for reporting this.)
  * Made the "ProxyServerMediaSession" code a bit more
    bullet-proof, by resetting the 'back-end' connection if a
    "SETUP" command fails. (Thanks to Craig Matsuura for providing
    a real-world example of "SETUP" failing.)
  * Fixed the 'estimated bitrate' values in
    "testMPEG1or2VideoReceiver.cpp" and
    "testMPEG2TransportReceiver.cpp" to match those in the
    corresponding "test*Streamer.cpp" files.
    (Thanks to Alex Anderson for reporting this.)
- 2015.07.23:
  * Fixed a potential buffer overflow bug in "RTSPServer".
    (Thanks to "an anonymous researcher working with Beyond
    Security's SecuriTeam Secure Disclosure" for discovering this.)
- 2015.07.19:
  * Fixed a bug in "RTPInterface::sendDataOverTCP()"; it was
    disabling transmission on its socket if the "send()" call
    failed.  We now do this only if the error was not "EAGAIN".
    (Thanks to Erik Oomen for bringing this to our attention.)
  * Changed "QuickTimeFileSink" to try to work around an issue with
    QuickTime sometimes complaining about the frame number in the
    last 'sync frame' being 'out of range'.
  * Changed the parameter signature for
    "ProxyServerMediaSession::createNew()" (and the
    "ProxyServerMediaSession" constructor) to take a
    "GenericMediaServer*" rather than a "RTSPServer" as parameter.
    This makes it possible to create proxy servers that use protocols
    other than RTSP at the 'front-end'.  (The 'back-end' protocol will
    still be RTSP, however.)
  * Defined a new class "MediaTranscodingTable" that can be used to
    generate "FramedFilter" (subclass) objects that perform media
    transcoding.  Added a parameter of this type (with default value
    NULL) to the "ProxyServerMediaSession" constructor and
    "createNew()" function.  This makes it possible to - if you wish
  - add transcoding functionality to a proxy server.  (This feature
    is still experimental, and might be changed in the future.)
  * Added optional "initialPortNum" and "multiplexRTCPWithRTP"
    parameters to the "ProxyServerMediaSession" constructor - to be
    passed to the "ProxyServerMediaSubsession" objects that it creates.
    This allows subclasses to change these parameters if they wish.
  * Updated "ProxyServerMediaSession" to make it possible for
    subclasses to create subclasses of "Groupsock" and/or
    "RTCPInstance", if they wish.
- 2015.06.25:
  * Changed the definition of the "doEventLoop()" "watchVariable" to
    make it 'volatile'. (Ditto for the "fTriggersAwaitingHandling"
    field in the "BasicTaskScheduler" implementation.) This is to
    alleviate a concern about aggressive optimizing compilers
    possibly generating incorrect code.  (Thanks to Remi
    Denis-Courmont for bringing this issue to our attention.)
- 2015.06.24:
  * Updated the implementation of "GenericMediaServer" to move the
    code that removes and deletes all "ClientConnection",
    "ClientSession", and "ServerMediaS(ubs)ession" objects from the
    "GenericMediaServer" destructor to a member function "cleanup()".
    This member function MUST be called from the destructor of any
    subclass of "GenericMediaServer".  (Putting this code in the
    destructor of "GenericMediaServer" itself was a bug, because the
    "ClientConnection", "ClientSession", and
    "ServerMediaS(ubs)ession" objects may themselves have been
    subclassed, and there may be a problem deleting them after the
    "GenericMediaServer" subclass destructor has already been called.
    (Thanks to Christopher Benne for noting this.)
  * Fixed the way that "RTSPClient" handles responses to
  "GET_PARAMETER" to properly allow for possible additional
    pipelined responses appearing afterwards.
    (Thanks to Paul Clark for identifying this problem.)
  * Moved the "ClientSession" liveness checking/timeout mechanism
    from "RTSPServer" to its new abstract base class
    "GenericMediaServer".  (The API and functionality of the
    "RTSPServer" class remains unchanged.)
  * Updated the "OnDemandServerMediaSubsession" code to make it
    possible for subclasses to create and use subclasses of
    "RTCPInstance".
  * Undid the change that we made to "RTSPClient.hh" in the
    previous version.  There is no longer a demonstrated need to
    make "RTSPClient::connectToServer()" virtual.
  * Made a syntactic change to "MatroskaFile.cpp" to eliminate
    some compiler warnings.
- 2015.06.21:
  * Updated "RTSPClient" to put "port=" rather than "client_port="
    in "Transport:" headers when requesting a multicast stream,
    in accordance with RFC 2326.
    (Thanks to Julian Scheel for noting this.)
  * Updated "MultiFramedRTPSource" so that it doesn't deliver
    0-length frames to the downstream object - in case the
    downstream object interprets this as being an error.
    (Thanks to Julian Scheel for the suggestion.)
  * Made the member function "RTSPClient::connectToServer()"
    virtual, in response to a request from a developer who wanted
    to reimplement this in their "RTSPClient" subclass.
  * Changed the "Groupsock::output()" function to no longer
    take a 'TTL' parameter. (Instead, we now use the TTL (usually
    255) that was provided when the "Groupsock" object was
    created.)
  * Cleaned up the "GroupEId" class that's used by "Groupsock".
    (Previously, that class had some extra, experimental
    functionality that turned out not to be useful.)
  * Cleaned up the "destRecord" structure that's used in
    "Groupsock" to represent the (possibly multiple) destinations
    for each "Groupsock" object.
  * Updated the "groupsock" library and
    "OnDemandServerMediaSubsession" to better support (in some
    future release) sockets whose destination endpoints are set
    via STUN packet exchanges.
- 2015.06.11:
  * Fixed a bug in "RTSPClient" that had accidentally been
    introduced in version - 2015.06.04 that prevented "Session:"
    headers from being included in some requests.
- 2015.06.10:
  * Fixed the return type of the "createNewClientConnection()"
    virtual function, redefined in
    "RTSPServerSupportingHTTPStreaming".
  * More changes to satisfy anal-retentive compilers.
  * Removed the "DarwinInjector" code; that functionality has
    not been supported for some time.
- 2015.06.09a:
  * More changes to supposedly satisfy anal-retentive compilers.
- 2015.06.09:
  * Added some "friend" declarations to "GenericMediaServer.hh"
    and "RTSPServer.hh" in an attempt to placate an anal-retentive
    Windows compiler.  (Issue reported by Deanna Earley.)
- 2015.06.07:
  * Restructured the "RTSPServer" class into an abstract base
    class "GenericMediaServer" and a subclass "RTSPServer".
    This makes it possible to develop other kinds of media server
    that use the same "ServerMediaSession"/"ServerMediaSubsession"
    objects to represent the stream(s) that they serve, but using
    protocols other than RTSP.
  * Added a new virtual function "createGroupsock" to
    "OnDemandServerMediaSubsession". This makes it possible for
    subclasses of "OnDemandServerMediaSubsession" to automatically
    use subclasses of "Groupsock" (e.g., those that implement
    STUN/DTLS).
  * Moved the "ignoreSigPipeOnSocket()" function from
    "RTSPCommon.hh" ("liveMedia" library) to "GroupsockHelper.hh"
    ("groupsock" library), because the function is not specific to
    RTSP.
- 2015.06.04:
  * Added optional support for including the RTSP "Speed:" header
    in "PLAY" requests. (Thanks to Sarma Kolavasi.)
  * Updated the implementation of "setResultErrMsg()" in
    "BasicUsageEnvironment" to work properly in Windows.
    (Thanks to Stas Tsymbalov.)
- 2015.05.31:
  * Updated the "ProxyServerMediaSession" code to recover better
    if a back-end RTSP "PLAY" command fails (for whatever reason).
    Should this happen, we now reset the connection to the
    'back-end' server.  (This will cause the initial 'front-end'
    client connection (that caused the "PLAY" command to be sent)
    to fail, but subsequent 'front-end' client requests will now
    have a better chance of succeeding.)
- 2015.05.28:
  * Fixed a bug in error reporting in the "groupsock" library.
    In a couple of places, we were using the result of
    "getResultMsg()" directly in a call to "setResultMsg()", but
    unfortunately those functions are implemented (at least in
    "BasicUsageEnvironment") using the same buffer.
    (Thanks to Stas Tsymbalov for reporting this.)
  * Updated the "MPEGVideoStreamFramer" class (and thereby its
    subclasses, including "H264VideoStreamFramer" to implement
    the "doStopGettingFrames()" virtual function by calling
    "flushInput()".  This should fix a potential problem whereby
    these classes might not work correctly if the downstream
    reader calls "stopPlaying()", and then resumes reading.
    (Thanks to Stas Tsymbalov for bringing this issue to our
    attention.)
- 2015.05.25:
  * Fixed a bug in "StreamReplicator::removeStreamReplica()":
    It should have been calling "deactivateStreamReplica()"
  * before* possibly deleting the "StreamReplicator" object
    (if this was the last replica, and
    "fDeleteWhenLastReplicaDies" was True).
    (Thanks to Stas Tsymbalov for reporting this.)
  * Fixed some potential problems with "StreamReplica"
    deactivation.  (Thanks to Stas Tsymbalov.)
  * Updated the "RTSPServer" implementation to call
    "ignoreSigPipeOnSocket()" on 'client connection' sockets,
    rather than just on the main server socket.  This is to
    ensure that the server doesn't get killed if a client -
    running on the same host - gets killed.  (Note that, because
    of this fix, it should never be necessarily to set the
    "MSG_NOSIGNAL" flag on any of our calls to "send()".)
- 2015.05.12:
  * Updated the previous revision to change the order in which
    fields are deleted in the "RTSPServer" destructor, to avoid
    a possible crash if "RTSPServer" objects are deleted.
    (Thanks to ChaSeop Im for noting the problem.)
- 2015.05.03:
  * Updated the "RTSPServer" implementation to fix a bug in
    RTP/RTCP-over-TCP streaming. Before, if the
    "RTSPClientConnection" object closed before the
    "RTSPClientSession" object, and the TCP connection was also
    being used for RTP/RTCP-over-TCP streaming, then the streaming
    state (in the "RTSPClientSession") would stay alive, even
    though the TCP socket had closed (and the socket number
    possibly reused for a subsequent connection). This could cause
    a problem when the "RTSPClientSession" was later reclaimed
    (due to inactivity). Now, whenever a "RTSPClientConnection"
    object is closed (due to the RTSP TCP connection closing), we
    make sure that we also close any stream that had been using
    the same TCP connection for RTP/RTCP-over-TCP streaming.
    (Thanks to Kirill Zhegulev for noting this issue.)
  * Removed extraneous comments near the top of
    "testProgs/registerRTSPStream".
- 2015.04.22:
  * Updated "config.iphone" and "config.iphone-simulator" to work
    with the latest Xcode. (Thanks to Braden Ackerman.)
  * Fixed a rare memory leak in "MultiFramedRTPSource" that might
    occur if it's reading an incoming packet over TCP - requiring
    &gt;1 read for the packet - and the "MultiFramedRTPSource" gets
    closed or paused while this is happening.
    (Thanks to Kirill Zhegulev for noting this.)
- 2015.04.16:
  * Added the "f" (force symbolic link) flag to the "ln" command
    in the "make install" Makefile rules, in case you're
    reinstalling the same version of a library.
    (Thanks to Luca Ceresoli for noting the need for this.)
- 2015.04.15:
  * Removed the previous (20 kByte) hard-wired limitation in the
    size of incoming packets for "MultiFramedRTPSource".  (Now,
    any size packet up to the maximum size of 65535 can be
    handled.)
  * Added a (u_int16_t) field "desiredMaxIncomingPacketSize" to
    "RTSPClient".  If set to a value &gt;0, then a "Blocksize:"
    header with this value (minus an allowance for IP, UDP, and
    RTP headers) will be sent with each "SETUP" request.
    (Thanks to Deanna Earley for noting the optional RTSP
    "Blocksize" header.)
- 2015.04.01:
  * By default, "H264or5VideoStreamDiscreteFramer" sets
    "fPictureEndMarker" (and thus the RTP 'M' bit) if the NAL
    unit is VCL.  Because this isn't always the right thing to do
    (e.g., if we're delivering multiple 'slice' NAL units per
    'access unit' (picture)), we now move this test into a virtual
    function
    "H264or5VideoStreamDiscreteFramer::nalUnitEndsAccessUnit()".
    If desired, you can implement a subclass that redefines this
    virtual function. (Thanks to Chris Richardson for bringing
    this issue to our attention.)
  * Made a minor syntactic change to
    "ProxyServerMediaSubsession.cpp" to ensure that it compiles
    with some old versions of VC++.
- 2015.03.19:
  * Updated the "RTSPClient" code for handling a
    "WWW-Authenticate:" header in a "401 Unauthorized" response.
    We now check for the "stale=TRUE" parameter.  If it's set,
    then we resend the command, even if we already handled an
    earlier "WWW-Authenticate:" header. (Thanks to Deanna Earley
    for noting the need to handle "stale=TRUE".)
- 2015.03.16:
  * Made a small change to the "BasicTaskScheduler"
    implementation to reduce the likelihood of a race condition
    with external thread(s) calling "triggerEvent()".
- 2015.03.06a:
  * Oops - forgot to add '\0'-termination to the previous fix.
- 2015.03.06:
  * Updated "RTSPClient" to decode %-encoded characters, should
    they appear in the &lt;username&gt; and/or &lt;password&gt; fields in a
    "rtsp://" URL. (Thanks to Deanna Earley for suggesting this.)
- 2015.03.01:
  * Updated the "H264or5VideoRTPSink" implementation to make sure
    that any stale fragmented data is flushed (discarded) if a
    server's stream is paused.  This ensures that - after we
    resume from the pause - that we never stream data with old
    presentation times. (Thanks to Gilles Chanteperdrix for
    discovering and reporting this issue.)
- 2015.02.26:
  * Fixed a bug in "ProxyServerMediaSubsession" that could cause a
    crash if the parent "ProxyServerMediaSession" object is
    removed from the RTSP server and deleted. (Thanks to Sergio ?
    for first reporting this problem.  Thanks to Chiung Ikhwan
    for discovering the source of the bug.)
- 2015.02.23:
  * Fixed a bug in
    "OnDemandServerMediaSubsession::getCurrentNPT()".
    (Thanks to Gilles Chanteperdrix for noting this.)
- 2015.02.17:
  * Latest version of the "LIVE555 Streaming Media" code
  (reinstalled due to a server crash).
- 2015.02.13:
  * Oops - removed the "#define DEBUG" that had inadvertently
    been left in "RTCP.cpp" in the previous version.
- 2015.02.12:
  * Updated the previous release of "RTCP.cpp" to ensure that it
    will compile for Windows.
- 2015.02.10:
  * Added experimental support for sending RTCP "APP" packets,
    and handling incoming RTCP "APP" packets.  (Thanks to Nick
    Ogden for suggesting this, and providing an example
    implementation.)
- 2015.02.05:
  * Made the "ProxyServerMediaSession" code a bit more
    'bulletproof'.
- 2015.02.04:
  * Fixed a bug in "DigestAuthentication" that could cause the
    proxy server code to crash if it was given a username and
    password for its 'back end' server.
    (Thanks to Sergio Andrade  for reporting this.)
  * Fixed a minor bug in "MatroskaFileParser".
  * Did some syntactic cleanup on a few files to avoid compiler
    warnings with the newest version of "gcc".</changelog>
  <changelog author="aloisio@gmx.com" date="1476619200">- Update to version 2016.10.11
  2016.10.11:
  * After building the source code, we now display a message
    reminding the developer about our FAQ.
  2016.09.22:
  * Added a new "liveMedia" class
    "MPEG2TransportStreamAccumulator" - a filter that can
    be used to combine several (by default, 7) MPEG Transport
    Stream 188-byte 'packets' into a larger chunk of data,
    more appropriate for streaming via RTP (or raw UDP).
  2016.09.19:
  * Added support for an experimental RTSP "DEREGISTER"
    command, which undoes the effect of a "REGISTER" command.
  * Moved the REGISTER/DEREGISTER-specific functionality of
    "RTSPServer.cpp" into a new file "RTSPServerRegister.cpp",
    to make the base RTSP server code (in "RTSPServer.cpp")
    easier to comprehend.
  2016.09.12:
  * Fixed "GenericMediaServer::createNewClientSessionWithId()"
    to make sure that the new 'client session' object (returned
    by a call to "createNewClientSession()") is not NULL
    before it tries to add it to the 'fClientSessions' table.
    (Thanks to Helmut Grohne for discovering this issue.)
  2016.09.08:
  * Updated "RTSPClient::reset()" to reset each of the 'request
    queues' as well.
    (Thanks to Erik Montnemery for noting a problem (with the
    "LIVE555 Proxy Server") that this caused.)
  * Updated "GenericMediaServer::ClientConnection::closeSockets()"
    so that it doesn't try to call "closeSocket()" (=="close()")
    on socket numbers &lt;0.
  2016.09.05:
  * Fixed a problem whereby a 'delayed task' for a
    "MPEG2TransportStreamMultiplexor" object might have gotten run
    after such an object was deleted.
    (Thanks to Bruno Basilio for providing debugging output to
    help track this down.)
  * Updated "Socket::reset()" (in "groupsock/NetInterface.cpp") so
    that it doesn't try to call "closeSocket()" (=="close()") on
    socket numbers &lt;0.
  * Added a comment to "UsageEnvironment/include/UsageEnvironment.hh"
    to note that "triggerEvent()" should not be called with the
    same 'event trigger id' from different threads.
    (This was already noted in a comment in
    "liveMedia/DeviceSource.cpp", but not in
    "UsageEnvironment/include/UsageEnvironment.hh", which is
    where "triggerEvent()" is defined.)
  2016.08.27:
  * Fixed a problem whereby a "Medium" object's "nextTask()"
    (i.e., "fNextTask") could hold an invalid value after a
    'scheduled task' has occurred (but before the next similar
    task is scheduled) - which causes problems should the
    "Medium" object be deleted during that window of time.
    (Thanks to Helmut Grohne for noting this problem.)
  * Added comments to "UsageEnvironment/include/UsageEnvironment.hh"
    to make it clear that "unscheduleDelayedTask()" (or
    "rescheduleDelayedTask()") must not be called on a
    'scheduled task' after it has already occurred.
    (Thanks to Helmut Grohne for motivating this.)
  2016.08.07:
  * Fixed a bug in the handling of the non-standard
    "com.ses.streamID:" header (used by 'SAT&gt;IP' servers)
    that we had introduced in version 2016.01.12.
    (Thanks to Yaobing Deng for noting this.)
  2016.07.19:
  * Fixed a bug in "RTSPServer" that could cause a crash if a
    "RTSPServer" object is deleted after having been used
    for RTSP-over-HTTP streaming.  (Thanks to Pavel Aronov.)
  * Updated "RTSPClient" to recognize a "Connection: Close"
    header in a server's response. It handles this header by
    closing the RTSP TCP connection (because the server is
    assumed to not be using it again), so that we open a new
    TCP  connection for any subsequent commands.
    (Thanks to Nathan (at MediaPortal) for this suggestion.)
  * Made a small optimization to "RTSPServer"s handling of the
    first "SETUP" command from each client.  (Thanks to Maxim
    Dementiev for the suggestion.)
  2016.06.26:
  * Added a new (public) function "canDeliverNewFrameImmediately()"
    to "MPEG2TransportStreamMultiplexor".
    This function may be used by a downstream reader to test
    whether the next call to "doGetNextFrame()" will deliver
    data immediately.  It can be useful if you want to decide
    whether or not to keep accumulating multiple Transport Stream
    'packets' into an outgoing RTP packet.
    (Thanks to Gilles Chanteperdrix for suggesting this.)
  * Made a minor syntactic change to "MediaTranscodingTable.hh"
    to eliminate compiler warnings.
  2016.06.23:
  * Changed the constant "MAX_INPUT_ES_FRAME_SIZE" to a static
    member variable
    "MPEG2TransportStreamFromESSource::maxInputESFrameSize"
    that can, if desired, be increased at run time (before a
    "MPEG2TransportStreamFromESSource" object is created).
    (Thanks to Gilles Chanteperdrix for motivating this.)
  2016.06.22:
  * Changed "~ProxyServerMediaSession()" so that it no longer
    deletes the "MediaTranscodingTable" object that it had
    been passed in its constructor.  (The reason for this is
    that the same "MediaTranscodingTable" can be used by more
    than one "ProxyServerMediaSession".)
  * Made the "parseTransportHeaderForREGISTER()" function
    (that's used in the "RTSPServer" implementation) non-static,
    so that it can be used in other, non-RTSP server
    implementations that want to handle the "REGISTER" command.
  * Made the "RTPSink::SSRC()" function "public:" rather than
    "protected:".
    (Thanks to Jean-Luc Bonnet for this suggestion.)
  2016.05.20:
  * Added a new virtual function "noteLiveness()" to the
    "ServerMediaSession" class. This function is called
    (by a "GenericMediaServer") whenever there's 'liveness'
    on a "ClientSession".  The default implementation of this
    function is a 'noop', but subclasses can redefine it - e.g.,
    if you want to remove long-unused "ServerMediaSession"s
    from the server.
  * Fixed a bug in the options handling for the command
    "live555ProxyServer" that could erroneously produce a
    "usage" error if the '-R' option is used, but no
    back-end "rtsp://" URL is given.
  2016.05.18:
  * Backed out the change to "MultiFramedRTPSink" that was
    made in 2016.05.17; the 2016.05.16 version turned out
    to be correct.
  * Rearranged "#include"s to avoid an 'excessive #include
    nesting' error with some old compilers.
  2016.05.17:
  * Made a (mostly inconsequential) fix to the previous bugfix
    for "MultiFramedRTPSink".
  2016.05.16:
  * Fixed a bug in "MultiFramedRTPSink" that affected
    subclasses that redefine "frameSpecificHeaderSize()"
    (for frame-specific headers that precede multiple frames
    in a RTP packet).  (Currently, the only subclass that
    this affected was "VorbisAudioRTPSink".)
    (Thanks to Gilles Chanteperdrix for reporting this bug.)
  * Made a minor update to the "ProxyServerMediaSession" code
    to better support optional media transcoding.
  2016.04.21:
  * Made it easier to set the MTU for all outgoing RTP
    packets, instead of having to call "setPacketSizes()"
    after each "MultiFramedRTPSink" is created.  If you wish,
    you can define the compile-time constants (macros)
    RTP_PAYLOAD_MAX_SIZE and (optionally) RTP_PAYLOAD_PREFERRED_SIZE
    when compiling "MultiFramedRTPSink.cpp".  (These constants
    have default values of 1456 and 1000 respectively, just as
    before.)
  * Updated "GroupsockHelper.{hh,cpp}" to (supposedly) support
    'MinGW' better
  2016.04.01:
  * Fixed a bug the "ProxyServerMediaSubsession" code that
    could cause an infinite loop if the 'back-end' server was
    slow to respond to "SETUP" requests.
    (Thanks to Erik Montnemery for helping to debug this.)
  * Added support for parsing/streaming Matroska files that
    contain PCM audio tracks.
    (Thanks to Michel Promonet.)
  2016.03.16:
  * Added some more debugging fprintf()s to the
    "ProxyServerMediaSubsession" code to try to track down a
    bug.
  * Simplified the "genMakefiles" script (moving duplicate
    code into a 'for' loop).
  2016.03.14:
  * Updated the proxy server implementation to better handle
    'front-end' clients that have asked to stream only some
    of the substreams of a multi-stream session.  Now, if a
    substream is closed (because all 'front-end' clients have
    stopped requesting it), but other front-end clients are
    still streaming other substreams, then we will send - to
    the 'back-end' server - only a substream-specific "PAUSE"
    command; not a "PAUSE" command for the entire stream.
    (Thanks to Lakshmi Narayanan for noting this issue.)
  * Added an optional "-p &lt;RTSP-port-number&gt;" option to the
    "LIVE555 Proxy Server", to allow the user to specify a
    RTSP server port number other than the standard port
    numbers: 554 and 8554. (These standard port numbers are
    still tried if the specified port number can't be used.)
    (Thanks to Denis Genestier for this suggestion.)
  2016.02.22:
  * Updated the "ProxyServerMediaSession" to add a Boolean
    virtual function "allowProxyingForSubsession()".
    By default, this always returns True.  However,
    subclasses can redefine this if they wish to restrict
    which subsessions of a stream get proxied - e.g., if
    you want to proxy only video tracks.
  * Improved the "WAVAudioFileSource" code (for parsing
    WAV-format audio files) to make it more tolerant of
    unusual formats.
  * Made it possible to build a version of the "liveMedia"
    library that doesn't contain any RTSP server code;
    e.g., if you are developing only a RTSP client, and
    want to save space. To do this, omit any files that
    contain "Server" or "RTPSink" in their name, and define
    OMIT_REGISTER_HANDLING when compiling "RTSPClient.cpp".
    (Thanks to Jeff Shanab for this suggestion.)
  2016.02.09:
  * Added an option "-E &lt;absolute-seek-end-time&gt;" to
    "openRTSP".
    (Thanks to Hans Maes for suggesting this.)
  2016.02.08:
  * Fixed a bug that was causing "playSIP" to crash.
    (Thanks to Vilaysak Thipavong for reporting this.)
  2016.01.29:
  * Updated "QuickTimeFileSink" to make it usable with non-RTP
    input sources. It still needs to have a "MediaSession"
    that describes the input source; however, this input source
    no longer needs to be RTP; it can, instead, be a UDP or
    other type of source. (Of course, audio/video synchronization
    and hint tracks can't be done in this case.)
  * Changed the name of a variable in the "Makefile.tail" file
    for the "BasicUsageEnvironment" project, in response to
    a complaint that the old name clashed with something in
    some Windows development environment
  2016.01.24:
  * Updated "ProxyServerMediaSession.cpp" to add some
    'internal error' debugging fprintf()s to try to catch a
    possible bug that was reported recently.
  2016.01.20:
  * When a server calls "startStream()" to start a RTSP stream
    for a client, we now no longer make a slight adjustment to
    the RTP timestamp sequence (using the "presetNextTimestamp()"
    call) if there is already another ongoing stream using the
    same "RTPSink".  The effect of this is only minor, but it
    ensures that the addition of an addition 'destination' to
    an ongoing RTSP/RTP stream does not cause any change to the
    contents of the RTP/RTCP packets.
    (Thanks to Erik Montnemery for noting this issue.)
  2016.01.16:
  * This release has no source-code changes from the previous
    release.  However, a test file was mistakenly left in the
    previous version; this produced an excessively-large tar file.
    This has now been removed.
  2016.01.12:
  * Added a hack to "RTSPClient" to handle the non-standard
    "com.ses.streamID:" header - used by 'SAT&gt;IP' servers -
    by using its value in the 'base URL' for subsequent requests.
    (Thanks to Julian Scheel for proposing this.)
  2015.12.22:
  * Updated "QuickTimeFileSink" to add a sanity check to try
    to prevent an occasional problem with H.264 video tracks
    that contain 'sync frames'.
  * Updated the "config.linux-with-shared-libraries"
    configuration file to use the $(CC) and $(CXX)
    macros, to allow for cross-compiling.  (Thanks to Michel
    Promonet.)
  * Updated the years in the copyright notice on each file.
  2015.11.09:
  * Changed the "ProxyServerMediaSession" code once again.  We
    backed out the changes in the previous two releases,
    and now respond to failures of the back-end "SETUP"
    or "PLAY" commands by doing a full reset - which involves
    deleting the "ProxyServerMediaSubsession" object, and
    doing another "DESCRIBE" to create a new one.  However, we
    can't do this immediately - because the "SETUP" and "PLAY"
    commands can be sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()".
    Instead, we wait until the next 'liveness' command, which
    will get sent immediately when we return to the event loop.
  * Our proxy server code no longer converts the "mode" string
    to lower case before passing it to
    "MPEG4GenericRTPSink::createNew()".  (This turned out to
    be unnecessary, and was breaking some clients that weren't
    treating this string as case-insensitive when they saw it
    in the stream's SDP descriptor.)  (Thanks to Craig Matsuura
    for noting this issue.)
  2015.10.29:
  * Updated the fix in the previous revision to apply to the
    back-end "PLAY" command as well as the back-end "SETUP"
    command, because both of these back-end commands can get
    sent from within
    "ProxyServerMediaSubsession::createNewStreamSource()", so
    we can't allow the "ProxyServerMediaSubsession" object
    to get deleted in either case.</changelog>
  <changelog author="ramaxlo@gmail.com" date="1499083200">- Update to version 2017.06.04
  2017.06.04:
  * Fixed a bug in "RTPInterface::removeStreamSocket()" that could
    cause not all 'TCP stream' records for a given socket number
    to be removed if a TCP socket I/O error occurred (during
    RTP/RTCP-over-TCP streaming).  (Thanks to Gerald Hansink et al
    for reporting this.)
  2017.05.24:
  * In "RTSPClient.cpp", moved the call to "clearServerRequestAlternativeByteHandler()"
    from the "RTSPClient" destructor to the "resetTCPSockets()"
    function (which is called more often). This should eliminate
    a 'pointer to a deleted object' error. (Thanks to Gerald Hansink
    et al for reporting this.)
  2017.04.26:
  * Added a new public member function "numClientSessions()"
    to "GenericMediaServer" (and therefore to "RTSPServer", which
    inherits from this).  This allows a server to - at any time -
    check how many clients are currently accessing the server.
  * Updated the diagnostic output in "RTSPClient" to distinguish
    between opening a new TCP socket and connect()ing on a TCP
    socket. (The distinction is important for "REGISTER", which can
    reuse an existing TCP socket.)
  2017.04.10:
  * Fixed a bug in "base64Decode()" that could be triggered
    if (1) your RTSP server is streaming RTP/RTCP-over-HTTP, and (2)
    the remote client sends bad Base64 data (containing an embedded '\0'
    character). (Thanks to Arkady Bernov for reporting this.)
  2017.01.26:
  * Updated "ProxyServerMediaSession.cpp" to change all 'reset()'
    operations so that they are now run as a 'scheduled task' from
    the event loop - avoiding the possibility of bugs caused by
    'reset()' being called while another operation is in progress.
    (Thanks to Erik Montnemery for reporting this issue, and proposing a fix.)
  2016.11.28:
  * Our "RTSPClient" code now ignores "Connection: close" lines in
    the responses to HTTP "GET" requests (that are used to set up
    RTSP-over-HTTP tunneling). Because this tunneling requires that
    the (separate) input and output TCP connections remain intact,
    we assume that the server - if it includes such a line in the
    response to a HTTP "GET" - doesn't really mean it.
    (Thanks to Nguyen Viet Hung for reporting a server that does this.)
  2016.11.17:
  * Fixed a bug in the handling of 'APP' RTCP subpackets. (Thanks to
    Frederik de Ruyck for reporting this.)
  * Fixed a bug in the "StreamReplicator" code. (Thanks to Bruno Abreu
    for reporting this.)
  2016.11.06:
  * Increase the RTSP client's socket receive buffer when we'll be
    receiving RTP/RTCP-over-TCP, and increase the RTSP server's
    client connection socket send buffer when it's used to
    "REGISTER" a stream.
  2016.11.03:
  * Fixed a bug (in the sending/ handling of the "REGISTER"/"DEREGISTER"
    commands) that had been accidentally introduced in version
    2016.09.19. (Thanks to Ralf Globisch for noting this.)
  2016.10.29:
  * Performed the annual update of the copyright years and license
    near the start of each file
  2016.10.21:
  * Changed the "RTCPInstance error" message in "RTCP.cpp" to make
    it clear that the problem is caused by the remote endpoint using
    a buggy version of RTP/RTCP-over-TCP streaming.
  * Updated "QuickTimeFileSink" to make the various creation/modification
    times relative to January 1st 1904 in UTC (as Apple recommends),
    rather than in US Pacific Time.</changelog>
  <changelog author="jengelh@inai.de" date="1499515200">- Replace silly -exec rm ; by -delete.</changelog>
  <changelog author="schwab@suse.de" date="1502107200">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1509537600">- Update to 2017.10.28
  2017.10.28:
- Fixed the handling of the LIVE555 Proxy Server's "-u &lt;username&gt; &lt;password&gt;" command-line option if
  the "REGISTER" command is also implemented (i.e., with "-R").  Now, when we handle "REGISTER",
  the &lt;username&gt; and &lt;password&gt; are used to access the REGISTER'ed back-end stream, if necessary.
- Changed the server handling of the RTSP "REGISTER" command to (if "reuseConnection" is True) delay
  a short period of time (100ms) between replying to the "REGISTER" command, and actually
  handling it.  This is intended to reduce/avoid the possibility of a subsequent "DESCRIBE" command
  ending up in the client ("REGISTER" sender)'s buffer, before the socket gets reused for handling
  incoming RTSP commands.  (Thanks to Durgesh Tanuku for noting this issue.)
- Made a change to "SIPClient" to better handle Asterisk SIP servers with authentication.
  (Thanks to Rus.)
  2017.09.12:
- Made some improvements/bug fixes to AVI indexes in "AVIFileSink".
  (Thanks to Victor V. Vinokurov.)
- Updated the handling of the "writeTimeoutInMilliseconds" parameter in the "makeSocketBlocking()"
  function to work correctly on Windows. (Thanks to Jeff Shanab for noting this issue.)
- Added support for adding Opus audio to MPEG Transport Streams.  This is done by setting the
  "mpegVersion" parameter to 3 in "MPEG2TransportStreamFromESSource::addNewAudioSource()" or
  "MPEG2TransportStreamMultiplexor::handleNewBuffer()".
  (Thanks to Praveen Mathad for suggesting this.)
  2017.07.18:
- Updated "BitVector" to support a signed version of "get_expGolomb()", and fixed our H.264/265
  parsing code to use the signed version where appropriate.
  (Thanks to Toson Huang and Long Zhang for reporting this.)</changelog>
  <changelog author="Mathias Homann &lt;Mathias.Homann@opensuse.org&gt;" date="1541505600">- Update to 2018.10.17
  * CVE-2018-4013: remote code execution vulnerability (boo#1114779)
  * changes: see http://www.live555.com/liveMedia/public/changelog.txt
  * removed xlocale.patch - xlocale.h is now conditionally included, only when
    required. Upstream fix.</changelog>
  <changelog author="astieger@suse.com" date="1547553600">- update to 2018.11.26:
  * CVE-2019-6256: DoS vulnerability in the server implementation
    of RTSP-over-HTTP (boo#1121892)</changelog>
  <changelog author="astieger@suse.com" date="1547553601">- update to 2018.12.14:
  * Add support for sending (and handling) RTCP "BYE" packets that
    contain a 'reason' string (breaking api change)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1549281600">- update to 2019.02.03:
  * CVE-2019-7314:A use-after-free error causes the RTSP server to
    crash (boo#1124159)</changelog>
  <changelog author="Martin Li?ka &lt;mliska@suse.cz&gt;" date="1558008000">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1561377600">- Convert to dynamic libraries (boo#1121995):
  + Use make ilinux-with-shared-libraries: build the dynamic libs
    instead of the static one.
  + Use make install instead of a manual file copy script: this
    also reveals that we missed quite a bit of code to be installed
    before.
  + Split out shared library packages according the SLPP.</changelog>
  <changelog author="Dave Plater &lt;davejplater@gmail.com&gt;" date="1563192000">- Update to version 2019.06.28, fixes boo#1127341 VUL-1:
  CVE-2019-9215: live555: malformed headers lead to invalid memory
  access in the parseAuthorizationHeader function.</changelog>
</package>
<package pkgid="45f5d606a087f5b0b81dbd26fa8450b25c7a9562d4b965b63f9a2a128a767c5a" name="libBox2D2_3_1-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="8e194ad983d69b50e07cbfbd379c90af2d68dc058e66f795de7b4fcc0c2b9ffd" name="libBox2D2_3_1-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp152.4.5.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="767bf66f6160527e5232ed29d0caf4e7368914fe986a3e5dc103da2cdc581396" name="libBox2D2_3_1-debuginfo" arch="i586">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="97829a6cde9337562e5b6acf77e4d1dc2b8c0cefca1731dd4ed1cd9de8eca322" name="libBox2D2_3_1-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="lp152.4.3.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="05643ae17155ab8c788093fdf79de93ae94df573ca7872e24c912f67e5eca6dd" name="libBox2D2_3_1-debuginfo" arch="i586">
  <version epoch="0" ver="2.3.1" rel="lp152.4.5.1"/>
  <changelog author="adam@mizerski.pl" date="1339502400">- new package</changelog>
  <changelog author="rpm@fthiessen.de" date="1450267200">- Update to new upstream version 2.3.1:
  * Polygon creation now computes the convex hull.
  * The convex hull code will merge vertices closer than
  dm_linearSlop.
  * Vertices no longer need to be ordered.
  * New GUI
  * Various other bugfixes
- removed upstream patched Box2D_v2.2.1-lib64.patch
- replaced Box2D_v2.2.1-version.patch with
  Box2D-fix-version-2.3.1.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Fixed tar.gz by osc service localrun download_files
- Fixed version in baselibs.conf (for 32bits packages)
- Added baselibs.conf as source1</changelog>
  <changelog author="dap.darkness@gmail.com" date="1469102400">- Fixed Factory review (License.txt is not packaged).
- Minor spec clean-up (may fix SLE build).
- Cmake release with debug info build type.</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- RPM group correction</changelog>
  <changelog author="jengelh@inai.de" date="1471003200">- Replace strange buildroot definition</changelog>
  <changelog author="Mark&#xE9;ta Machov&#xE1; &lt;mmachova@suse.com&gt;" date="1613044800">- Download the real upstream tarball</changelog>
</package>
<package pkgid="5673f5f535edae97c0ea9ebc5e8a1f4ab4242fd075ddfd7a608706798e2ec320" name="libFLAC++6-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="f8c6e10477f6672bc6fdc0a4c81cd3d4da976f448d069448aa2875d6875e2b67" name="libFLAC++6-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="f14dc16c170bcc33d281a5baa73d201c20f6f1f69fc0701c19d23612aa76dd7c" name="libFLAC++6-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="031bb6f37f08b661db1e0c1adc4a8391bac7b60e288479ba304610d43b0018c3" name="libFLAC8-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="1251d4a3149488e5a62f1640a9796d57462a4483a8e6e04da5bd56605a8c0ace" name="libFLAC8-debuginfo" arch="i586">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="1009bf28b53be23428ef8172936f9f484af7974a08873d4b1ce3348348dd0f45" name="libFLAC8-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.2" rel="lp152.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1369569600">- Update to flac 1.3.0pre4 (packaged as 1.2.99_git* to avoid
  messing with RPM versioning)
  * Mostly non-linux related bugfixes plus autotools fixes
  - flac-openssl.patch --&gt; 0001-Allow-use-of-openSSL.patch
  - remove flac-1.2.1-automake1_13.patch, fixed in upstream.
  - add 0001-getopt_long-not-broken-here.patch, FLAC bundles
  GNU-compatible getopt_long for broken OS, but we do have
  a functional version in libc already.</changelog>
  <changelog author="jengelh@inai.de" date="1372680000">- Update to final upstream release 1.3.0
  * No user-visible changes
- More robust make install call</changelog>
  <changelog author="tiwai@suse.de" date="1417003200">- A couple of security fixes:
  * flac-fix-CVE-2014-8962.patch:
    arbitrary code execution by a stack overflow (CVE-2014-8962,
    bnc#906831)
  * flac-fix-CVE-2014-9028.patch:
    Heap overflow via specially crafted .flac files (CVE-2014-9028,
    bnc#907016)</changelog>
  <changelog author="mpluskal@suse.com" date="1426852800">- Cleanup spec file with spec-cleaner
- Update url
- Remove no longer needed patches
  * flac-fix-CVE-2014-8962.patch
  * flac-fix-CVE-2014-9028.patch
  * 0001-getopt_long-not-broken-here.patch
- Remove following as benefit of using openssl is small
  * 0001-Allow-use-of-openSSL.patch
- Add flac-cflags.patch
- Use doxygen to build documentation
- Split documentation to separate package
- Update to 1.3.1
  * Improved decoding efficiency of all bit depths but especially
    so for 24 bits for IA32 architecture (lvqcl and Miroslav Lichvar).
  * Faster encoding using SSE and AVX (lvqcl).
  * Fixed bartlett, bartlett_hann and triangle functions.
  * New apodization functions partial_tukey and punchout_tukey for
    improved compression (Martijn van Beurden).
  * Retuned compression presets to incorporate new apodization
    functions (Martijn van Beurden).
  * Fix -Wcast-align warnings on armhf architecture (Erik de
    Castro Lopo).
  * Help output documentation improvements.
  * I/O buffering improvements on Windows to reduce disk
    fragmentation when writing files.
  * Only write vorbis-comments if they are non-empty.
  * Fix symbol visibility in XMMS plugin.
  * Many fixes and improvements across all the build systems.
  * Fix CVE-2014-9028 (heap write overflow) and CVE-2014-8962
    (heap read overflow)</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Build documentation as noarch</changelog>
  <changelog author="tchvatal@suse.com" date="1473508800">- Drop patch that should be upstreamed first, otherwise we will
  have to keep it ofrever:
  * flac-ocloexec.patch
- Drop wrong patch:
  * flac-fix-pkgconfig.patch
    + If using this change you get assert.h include overriden in your
    project by the one from FLAC/ which is not what upstream desired
    If packages fail to build they should fix their include</changelog>
  <changelog author="aloisio@gmx.com" date="1483272000">- Update to version 1.3.2
  * Fix undefined behaviour using GCC/Clang UBSAN (erikd).
  * General hardening via fuzz testing with AFL (erikd and
    others).
  * General code improvements (lvqcl, erikd and others).
  * Add FLAC in MP4 specification docs (Ralph Giles).
  * Fix some cppcheck warnings (erikd).
  * Assume all currently used OSes support SSE2.
  flac:
  * Fix potential infinite loop on flac-to-flac conversion
    (erikd).
  * Add WAVEFORMATEXTENSIBLE to WAV (as needed) when
    decoding (lvqcl).
  * Only write vorbis-comments if they are non-empty.
  * Error out if decoding RAW with bits != (8|16|24).
  metaflac:
  * Add --scan-replay-gain option.
  libraries:
  * CPU detection cleanup and fixes (Julian Calaby, erikd
    and lvqcl).
  * Fix two stream decoder bugs (Max Kellermann).
  * Fix a NULL dereference bug (on a malformed file).
  * Changed the LPC order guess for a slight compression
    improvement, particularly for classical music
    (Martijn van Beurden).
  * Improved encoding speed on older Intel CPUs.
  * Fixed a seeking bug when decoding certain files
    (Miroslav Lichvar).
  * Put an upper bound (32768) on the number of seek
    points.
  * Fix potential memory leaks.
  * Support 64bit brword/bwword allowing
    FLAC__BYTES_PER_WORD to be set to 8 (disabled by
    default).
  * Fix an out-of-bounds heap read.
- Refreshed flac-cflags.patch</changelog>
  <changelog author="tiwai@suse.de" date="1524830400">- Fix memory leak in read_metadata_vorbiscomment_() function
  (CVE-2017-6888, bsc#1091045):
  flac-CVE-2017-6888.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120000">- Fix out-of-bounds access (CVE-2020-0499 bsc#1180099):
  libFLAC-bitreader.c-Fix-out-of-bounds-read.patch</changelog>
  <changelog author="tiwai@suse.de" date="1608120001">- Fix memory leak (CVE-2020-0487 bsc#1180112):
  stream_decoder.c-Fix-a-memory-leak.patch</changelog>
</package>
<package pkgid="d7e2d77381075d91d7a52f8004cf50419f77a65061e2bc6f115f95fa83105203" name="libHepMC3-1-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="lp152.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1386331200">- Initial version</changelog>
  <changelog author="badshah400@gmail.com" date="1501934400">- Update to version 3.0.0:
  + See list of changes from:
    https://gitlab.cern.ch/hepmc/HepMC3/blob/3.0.0/ChangeLog.
- Drop shared library subpackage; there is no numbered shared lib
  any more. Package everything into the devel package.
- Use cmake macros for build and install.
- Drop unused cmake options.
- Build and install doxygen documentation.
- Manually install examples to docdir, running fdupes to weed out
  duplicated files.
- Update URL and Source URL for new upstream links.
- Updated file-list.</changelog>
  <changelog author="jengelh@inai.de" date="1502280000">- Reapply shared library guidelines.
- Add sover.diff to force shlib versioning.
- Slightly trim description for length.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1556712000">- Update to version 3.1.1:
  * Improved treatment of events with cycles.
  * Improved documentation and examples.
- Changes from version 3.1.0:
  * Renaming the namespace, header directory and library name to
    HepMC3
  * SmartPointer is repaced with shared_ptr from C++11, so C++11
    is always required now
  * Split library into HepMC3(core) and HepMC3search (search
    engine)
  * New Search engine with highly abstract search capabilities
  * New readers and writers: WriterAsciiHepMC2, ReaderLHEF
  * Ascii files now have own string in header: Asciiv3
  * Deduction of input file format in ReaderFactory
  * Improved consistency of interface
  * Removal of most deprecated functions and  multiple bugfixes
  * Implemented test suite
  * Improved examples and documentation
- Drop sover.diff: so versioning added by upstream.
- Update Source url in keeping with upstream name changes.
- Adapt to name changes (HepMC -&gt; HepMC3) in spec file wherever
  appropriate.
- Use %%cmake_build for building and parallel jobs when building
  documentation.
- Package new library libHepMC3search.
- New BuildRequires: graphviz-gd and ghostscript-fonts-std needed
  to generate docs, gcc-fortran needed for library.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1578484800">- Update to version 3.1.2:
  * Add GenParticle::abs_pid() to match FourVector::abs_eta(),
    abs_rap().
  * Add FourVector component-setting functions in HepMC method
    naming convention; deprecate old camelCase ones.
  * Bugfix release. Fixed some typos and minor bugs.
  * Fixed name of ROOT dictionary
  * Added more standard attributes
  * Extended documentation for doxygen
  * Added stremer output to Reader/Writer classes
  * Added procedures for boost, rotation and reflection to
    GenEvent
  * Added operators for printing events, particles, etc.
  * Added example with reading of compressed file and more tests
- Run fdupes on full docdir to link even more duplicated files.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1585483200">- Disable setting rpaths on installed libs.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1586001600">- Update to version 3.2.1:
  * Bugfix release.
  * Explicit usage of namespaces.
  * Disallow empty lines for the attribute names.
  * Added an option for explicit selection of packages for
    testing.
  * Adjustments in the interfaces of Tauola/Photos/mc-tester as a
    part of preparation to the new releases of these libraries
  * Experimental support for Python modulescompilation with pypy.
  * Bugfix in VectorString attribute.
  * Improvement in the attribute parsing.
  * Added an option to handle Python 3.9.
  * Implemented special treatment of some broken HePMC2 events.
- Update to version 3.2.0:
  * First release with Python bindings.
  * Added ReaderPlugin and WriterPlugin and macros to declare
    plugins.
  * Fixed GenCrossSection for the case of multiple
    cross-sections.
  * Removed Error class.
  * Removed ReaderHEPEVT::read_hepevt_particle(int i, bool
    iflong=true), ReaderHEPEVT::read_event(GenEvent &amp;evt, bool
    iflong).
  * Removed ReaderHEPEVT::get_vertices_positions_present and
    ReaderHEPEVT::set_vertices_positions_present. The
    functionality above is implemented now Reader::set_options,
    Reader::get_options.
  * Fixed GenEvent::weight_names(). Now it should be called w/o
    arguments.
  * Added set_options, get_options to I/O classes for fine control
    of I/O.
  * The standard Selector members from Selector (e.g.
    Selector::MASS) were moved into a new class StandardSelector.
  * Added HEPMC3_ prefix to DEBUG, ERROR, WARNING  macros.
  * Added Reader::skip(int &amp;) for fast forwarding of input.
  * Added to LHEF::Writer wrapper functions that can be used in
    Python.
  * use delete/override for class members.
- Build python3 bindings and package them in a new subpackage
  python3-HepMC; introduces BuildRequires on python3 and
  python3-devel.
- Build docs and examples by passing the appropriate options to
  cmake and package them in a -doc subpackage; drop commands used
  to build doc separately.
- Use %bcond_with/%bcond_without to enable pythia and disable
  rootio respectively.
- Add BuildRequires: pkgconfig(zlib) to enable linking against
  zlib.
- Package LICENCE and COPYING files using %license.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1587556800">- Update Licensing:
  * Main License has been changed to GPL-3.0-or-later.
  * Python bindings licensed under the BSD-3-Clause.
- Package the appropriate License file for python-%{name} package.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1591617600">- Add HepMC-type-mismatch-error.patch: Fix type mismatch between
  function definition and function call flagged by GCC 10.
- Use autosetup to setup build dir and automatically apply patch.</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 3.2.2:
  * Fixed treatment of the weights in case of different number of
    weights and weight names.
  * Fixed WriterAsciiHepMC2 option for separate flows.
  * Improved treatment of python installation.
  * Split the sources of python bindings into smaller files to
    optimize compilation.
  * Improved cmake configuration for special cases, e.g. old
    cmake, no ROOT, some compilers, etc. Added more error
    handling.
  * Fixed compilation of the search module with Clang.
  * Added an example for search module.
  * Fixed the HepMC2 output for events without weights.
  * Fixed the signal vertex ID for HepMC2 output.
  * Added an interface for HepMC2 (in-memory-conversion).
  * Added functions to search module: search for relatives
    (particle or vertex)-&gt;(particle or vertex) in different
    combinations.
  * The previous point bumps .so version of the libHepMC3search to
    4.
  * Improved the configuration of Pythia8 for tests (minimal
    version requirement).
  * Fixed compatibility of ROOT trees written with HePMC3.0 and
    removed the typedefs in the dictionaries.
- Drop HepMC-type-mismatch-error.patch: incorporated upstream.</changelog>
</package>
<package pkgid="02c49c4991313b6c6728fdc29121fb899389cd91115f48404b6214c42654ec10" name="libHepMC4-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.06.11" rel="lp152.4.3.1"/>
  <changelog author="badshah400@gmail.com" date="1501934400">- Initial version (copy from HepMC = 2.06.09).</changelog>
  <changelog author="badshah400@gmail.com" date="1501934401">- Adapt to using HepMC2 as package name.</changelog>
  <changelog author="badshah400@gmail.com" date="1504267200">- Add explicit Conflicts between HepMC2-devel and HepMC-devel &gt; 3,
  make HepMC2-devel provide HepMC-devel = %{version}.</changelog>
  <changelog author="badshah400@gmail.com" date="1504612800">- Fix shared lib Group, should be System/Libraries.</changelog>
  <changelog author="jengelh@inai.de" date="1504612801">- Trim description for size (like was already done for HepMC
  1st Generation).</changelog>
  <changelog author="Atri Bhattacharya &lt;badshah400@gmail.com&gt;" date="1594728000">- Update to version 2.06.11:
  * HepMC/HepMCDefs.h: Add a HEPMC_HAS_ORDERED_WEIGHTS #define.
  * HepMC/WeightContainer.h: Add weights() and weight_names()
    public methods.
  * src/WeightContainer.cc: Fix print() to use canonical weight
    ordering.
  * src/GenEventStreamIO.cc: Fix the I/O streaming to preserve the
    weight ordering.
  * Fixed the tests.
- Use %license for COPYING file.
- Minor updates to spec file.
- Update URL and Source Url to new upstream website.</changelog>
</package>
<package pkgid="93104cf99dfc8f3f8c01d8f380ec309fed2aff827483878c2887ce2c0e7a3dd8" name="libIlmImf-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="fdf65d309fc3b011dd400eaf14cc07f005a47451b03b8c18662a7ffc0271b98f" name="libIlmImf-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="acb4a6dbd546c0f522c24250b2117b0e21fb74f31acaffd1533a8acc934a1af3" name="libIlmImf-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="8b2c3b00be09ebccf9fd5b8b2231eabf0573b684382429a76625a053fcee3903" name="libIlmImf-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="69a5ad3d8c3fec2a8e327e6be153643ffb34ca8577ee5e1ed4d99e8ae20f2d57" name="libIlmImf-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="a812d7e87024da63ca72b42fa096adc58938d542ee42ac2ff37970c7cd4db0db" name="libIlmImf-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="731069bce1d4ce59bbf640d1b7ccd636dc3d723b90c48b0e2dcf2a6798e6be9a" name="libIlmImf-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="dace25d381a33f7996727d761dbd545fb403a5a6b85d8db6c8c974f691a8154e" name="libIlmImf-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="a997332bf25504874a22a72ad43c847cad240a9618cabd097d93ee1c67e8ef84" name="libIlmImf-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="dae8dfc0f61795fc22f4af77016e323d86848a4816242c56b3fa71ca56b3977b" name="libIlmImf-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="d78b6f5ced51155d23d3dd1c1b09bc2f58b79e389f0375ae2b22ecdf296881a4" name="libIlmImf-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="a3b582f5d9b6d621011d3da25bafeb8762792b237b2c775925769d9bb12c9350" name="libIlmImf-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="d7e022dff8db19fbbc00c30bff1ffc49e9055467ba51565ca787f1e000cbe323" name="libIlmImfUtil-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="e5ecbbfa83a41a748abc14e48b9a121157430873bb58d880ba4d59c90cb1f5b1" name="libIlmImfUtil-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="613be02ecf197773dd1b2d76a0f5521b7ded66a777196ba56ca15b44d1a8127b" name="libIlmImfUtil-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="08f972123dd2ad540d6a2c04b40f00c15031c56a17def6e5bec47ba16503d0d6" name="libIlmImfUtil-2_2-23-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="2b33f668c96cfda187431754781cb6e9951b9abeef447b46b8a33ae261d8ed58" name="libIlmImfUtil-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="4f94e919a0448205a265fd7c2d70cfe8d684f2ba504a308354a1400eec8427f1" name="libIlmImfUtil-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.11.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
</package>
<package pkgid="1f03f5fa3ead2911fd5c44c82c13e5c48b6a62e10b7229212d9daf711157f9de" name="libIlmImfUtil-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="2703f1f0af70a24c5d44848d17f0aa99523e05b1b447589ed27c4ba27a605975" name="libIlmImfUtil-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.14.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- security update
- added patches
  fix CVE-2021-3474 [bsc#1184174], Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder
  + openexr-CVE-2021-3474.patch
  fix CVE-2021-3475 [bsc#1184173], Integer-overflow in Imf_2_5::calculateNumTiles
  + openexr-CVE-2021-3475.patch
  fix CVE-2021-3476 [bsc#1184172], Undefined-shift in Imf_2_5::unpack14
  + openexr-CVE-2021-3476.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1617883200">- security update
- modified patches
  % openexr-CVE-2021-3474.patch (splitted into openexr-CVE-2021-20296.patch)
- added patches
  fix CVE-2021-20296 [bsc#1184355], Segv on unknown address in Imf_2_5:hufUncompress - Null Pointer dereference
  + openexr-CVE-2021-20296.patch
  fix CVE-2021-3477 [bsc#1184353], Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts
  + openexr-CVE-2021-3477.patch
  fix CVE-2021-3479 [bsc#1184354], Out-of-memory caused by allocation of a very large buffer
  + openexr-CVE-2021-3479.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1619524800">- security update
- added patches
  fix CVE-2021-23215 [bsc#1185216], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  fix CVE-2021-26260 [bsc#1185217], Integer-overflow in Imf_2_5:DwaCompressor:initializeBuffers
  + openexr-CVE-2021-23215,26260.patch</changelog>
</package>
<package pkgid="8fa4d67fe4109617422966335ad471a553ec6f4d245e7883c78cf3af97b7eb49" name="libIlmImfUtil-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="95f76a6df557741b326db3c31474092c653632b5b564d8df5730bb1386f3366b" name="libIlmImfUtil-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.5.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
</package>
<package pkgid="e94b43073a023dff56dc608c91beebc8c53acd9c2b335333822c7caee492d1b3" name="libIlmImfUtil-2_2-23-debuginfo" arch="i586">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="2f4c6a0bb3b5387543c0e4454ef0d4c26d2f8e86033ff47d2460f3ef664d9cc9" name="libIlmImfUtil-2_2-23-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.2.1" rel="lp152.7.8.1"/>
  <changelog author="mlin@suse.com" date="1422532800">- Update to 2.2.0
  * DreamWorks Lossy Compression A new high quality, high performance lossy
    compression codec contributed by DreamWorks Animation. This codec allows
    control over variable lossiness to balance visual quality and file size.
    This contribution also includes performance improvements that speed up
    the PIZ codec.
  * IlmImfUtil A new library intended to aid in development of image file
    manipulation utilities that support the many types of OpenEXR images.
  * This release also includes improvements to cross-platform build support
    using CMake.
- Bumped the soname, and now we have libIlmImf and libIlmImfUtil
- Removed openexr-2.1.0-headers.patch
- Updated openexr.keyring from the savannah project page.</changelog>
  <changelog author="tchvatal@suse.com" date="1499860800">- Cleanup a bit with spec-cleaner</changelog>
  <changelog author="avindra@opensuse.org" date="1516017600">- Update to 2.2.1
  * Fix reported OpenEXR security vulnerabilities: CVE-2017-9110,
    CVE-2017-9111, CVE-2017-9112, CVE-2017-9113, CVE-2017-9114,
    CVE-2017-9115 and CVE-2017-9116
- pgajdos@suse.com: but really seem to fix only:
  CVE-2017-9110 [bsc#1040107], CVE-2017-9114 [bsc#1040114],
  CVE-2017-9116 [bsc#1040116], CVE-2017-12596 [bsc#1052522]; for
  the rest of issues see [bsc#1040109], [bsc#1040112],
  [bsc#1040113], [bsc#1040114], [bsc#1040115], and [bsc#1061305]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541505600">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1541592000">- security update
  * CVE-2018-18444 [bsc#1113455]
    + openexr-CVE-2018-18444.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560513600">- security update
- added patches
  CVE-2017-9111 [bsc#1040109], CVE-2017-9113 [bsc#1040113], CVE-2017-9115 [bsc#1040115]
  + openexr-CVE-2017-9111,9113,9115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563192000">- security update
- added patches
  CVE-2017-14988 [bsc#1061305]
  + openexr-CVE-2017-14988.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1568980800">- on behalf of Martin Pluskal:
- Enable tests on architectures with enough memory - boo#1146648
  * disable imffuzztest as it takes to much resources</changelog>
  <changelog author="pgajdos@suse.com" date="1568980801">- testsuite only for x86_64 [bsc#1146648]</changelog>
  <changelog author="pgajdos@suse.com" date="1587556800">- security update
- added patches
  fix CVE-2020-11762 [bsc#1169549], out-of-bounds read and write in DwaCompressor:uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case
  fix CVE-2020-11758 [bsc#1169573], out-of-bounds read in ImfOptimizedPixelReading.h.
  fix CVE-2020-11764 [bsc#1169574], out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp
  fix CVE-2020-11765 [bsc#1169575], off-by-one error in use of the ImfXdr.h read function by DwaCompressor:Classifier:Classifier
  fix CVE-2020-11763 [bsc#1169576], out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp
  fix CVE-2020-11761 [bsc#1169578], out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder:refill in ImfFastHuf.cpp
  fix CVE-2020-11760 [bsc#1169580], out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp
  + openexr-CVE-2020-11762,11758,11764,11765,11763,11761,11760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593604800">- security update
- added patches
  fix CVE-2020-15304 [bsc#1173466], NULL pointer dereference in TiledInputFile:TiledInputFile()
  + openexr-CVE-2020-15304.patch
  fix CVE-2020-15305 [bsc#1173467], use-after-free in DeepScanLineInputFile:DeepScanLineInputFile()
  + openexr-CVE-2020-15305.patch
  fix CVE-2020-15306 [bsc#1173469], invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize()
  + openexr-CVE-2020-15306.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1608120000">- security update
- added patches
  fix CVE-2020-16587, CVE-2020-16588, CVE-2020-16589 [bsc#1179879], multiple memory safety issues
  + openexr-CVE-2020-16587.patch
  + openexr-CVE-2020-16588.patch
  + openexr-CVE-2020-16589.patch</changelog>
</package>
<package pkgid="5ea10777daa477a7e7cb2979ef6b1630fe14a613d5fa9598b22d360657d773ff" name="libKF5AkonadiAgentBase5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="e652602082ff843409c2f6f21fdf1099b3d5b703c716b9bfd27bf6eeb2951e5e" name="libKF5AkonadiAgentBase5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="09a2a657bc40975c1b5f5658055000257ba0a2738d6c4ba51c53d30621c1e94f" name="libKF5AkonadiCore5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="80cc3e02fa6965732fedaa7916d1dda8466529dad1691bda46fc8ea3ecb84b23" name="libKF5AkonadiCore5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="42767c7c8ddbb990b1155f07a17f42a091b88ac2cb4ccfbd730d514286d5fe21" name="libKF5AkonadiPrivate5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="41effee4eb961e0083e6fdf0b94e785b5dbdc5906c4a1984e9f611e71edf8fce" name="libKF5AkonadiPrivate5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="1ae0671e91983007799dd4df2ded843b1e1898f0fe4e7fdb585bc5d06d487e4d" name="libKF5AkonadiWidgets5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="e39e8d11b34e3648a5c7791ace2d4b0e8482d1e0f1505a7f9834f3c542fb476f" name="libKF5AkonadiWidgets5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="778ae26bff7553a95d615dc4c4e14057f8987f118997f4db1d826fc490fd7ecb" name="libKF5AkonadiXml5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
</package>
<package pkgid="70fd49853aba9c78a0d57f8c220eb090a58f91a78143c2ce94dbd72509e2bfa4" name="libKF5AkonadiXml5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.6.1"/>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Fix compatibility with QMYSQL driver after 74aed95
- Dropped patches, superseded by upstream changes:
  * 0001-Revert-Adapt-DBInitializer-to-behavior-change-of-QPS.patch</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Fix Bug 403208 - Short name of favorite folder results in improperly shown number of unread messages (kde#403208)
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- No code change since 19.08.1</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- Changes since 19.11.80:
  * Only build and install designer plugin if it's enabled
  * akonadi: improve debug message in state() method
  * Testrunner: wait until all jobs are done before aborting setup
  * akonadi_control: announce new Resource once both services are registered
  * Make itemmovetest more robust.
  * Fix build with Qt 5.14
  * Avoid KIO starting klauncher, as that can hang the CI</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- No code change since 19.11.90</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Stefan Br&#xFC;ns &lt;stefan.bruens@rwth-aachen.de&gt;" date="1580817600">- Align build dependencies with the ones from CMakeLists.txt,
  same for -devel and KF5AkonadiConfig.cmake.
- Remove libxslt-devel, only xstlproc (libxml2-tools) is required.
- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- No code change since 19.12.1</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- No code change since 19.12.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Too many changes to list here.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- Changes since 20.03.90:
  * Try to fix compile against qt5.15
  * Akonadi server should not expect specific mysql server process name
  * Fix emit signal before class will be deleted
  * Add signal when all settings was saved</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- Changes since 20.04.0:
  * Fix potential double-free corruption in RemoteLog
  * Windows: Handle QLocalSocket behavior gracefully
  * Save configuration when creating resources for new user</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- Changes since 20.04.1:
  * Akonadi searches for file mysql-global.conf at wrong path (kde#422079)
  * Allow ptrace for akonadiserver for mysqld_akonadi.
  * AppArmor DBus rules for AkonadiServer</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1595419200">- SLED doesn't include mysql/mariadb but SLES does. So make mysql
  a Recommended (instead of Required) package when building for
  Backports and add a patch that checks in runtime if mysql is
  available before setting it as the default database and if
  it's not, use the QSQLITE3 driver (boo#1172539). Patches already
  submitted and approved by upstream.
  * 0001-Fallback-to-using-the-QSQLITE3-driver-if-QMYSQL-can-.patch
  * 0002-Check-availability-of-Postgresql-backend-and-clean-a.patch
  * 0003-Use-nullptr-instead-of-0L.patch
  * 0004-Add-curly-braces-around-single-line-blocks-and-space.patch
  * 0005-Add-missing-default-value-for-storeSettings-in-init-.patch
  * 0006-Use-std-unique_ptr-to-get-the-DbConfig.-temporary-ob.patch
  * 0007-Add-missing-include-memory.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1614772800">- Add patch to work around QTBUG-72649 (boo#1173759, boo#1182982):
  * 0001-Replace-disconnect-reconnect-with-recursion-detectio.patch</changelog>
</package>
<package pkgid="e8acc0f1c46f0e45c4ee315af433ccc84a99a0160c9727378e85638b1c0aac8e" name="libKF5GlobalAccel5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="6b50abe093f428aa22d972ab6936d1a94201e7881962cadff5ff1e6e7ee062a3" name="libKF5GlobalAccel5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="1ee909387a2ce44b1d9286d057f10cec5dadaeaf6d36e0e40426d2edbed36036" name="libKF5GlobalAccel5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="c3b7147d2cd94034699f0027059743e872b485ce43aeb74fe2766240fa3932a1" name="libKF5GlobalAccel5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="eb456f6a09480caba50a6d70137736efb6e5342d381205366ee2913d2957b598" name="libKF5GlobalAccel5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="ca15b23fa586c8e456611953d01b1d6227bea0d3dc9bb197042fe4eff5c3da8e" name="libKF5GlobalAccel5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="2591384067a58c234e01a4b53d717baff2bd7ea9280bef8548534af43eb805f6" name="libKF5GlobalAccelPrivate5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="48a268e947fe3878d384f92f33717861e4b422bf57493544b3bfadaf3aff2610" name="libKF5GlobalAccelPrivate5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kglobalaccel] Make it compile without foreach</changelog>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
</package>
<package pkgid="683c46e41834bc5f2e63bcf3b1bf99bc95a66a3ff9631878dfc56d0b2acb5a2e" name="libKF5GlobalAccelPrivate5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="055ed89283ff218135b74e3fe9bf7905eb6099c7625f3027bfdccc3d00387c71" name="libKF5GlobalAccelPrivate5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.6.1"/>
  <changelog author="wbauer@tmo.at" date="1555416000">- Add Dont-use-qAsConst-over-a-temporary-variable.patch to fix a
  possible crash (kde#406426)</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1555588800">- Add patch to fix another possible crash:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- Changes since 5.57.0:
  * Copy container in Component::cleanUp before interating
  * Don't use qAsConst over a temporary variable
  * Remove two ';'
- Dropped patches, now upstream:
  * 0001-Copy-container-in-Component-cleanUp-before-interatin.patch
  * Dont-use-qAsConst-over-a-temporary-variable.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- No code change since 5.62.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- No code change since 5.64.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Make it compile against qt5.15
  * insertMulti is already a QMultiHash.
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1605528000">- Add upstream patch to fix adding keyboard shortcuts for
  application menu entries in kmenuedit (kde#421329, boo#1174064)
  * Load-service-files-for-shortcuts-from-appdatadir-as-fallback.patch</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1616760000">- Add patch to refuse startup with the wrong uid (boo#1178488):
  * 0001-Don-t-let-kglobalaccel-run-if-KDE_SESSION_UID-mismat.patch</changelog>
</package>
<package pkgid="6c0b8e95d4e0c42e684c116ec7ef2d8f309bec73f7629816f5a80e8bf1323208" name="libKF5IconThemes5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="d3252cc4915e42a2c7a57c1f8560e3a63f8b36f35444c83614e83823968ccf39" name="libKF5IconThemes5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="51902fb780f330202938b8a1ee0a06d75777ac8cc7627e63a34087805b879a29" name="libKF5IconThemes5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without it
  * Port deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [kiconthemes] compiles without foreach
  * Fix padding icon that doesn't exactly match the requested size (kde#397106)</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- Changes since 5.60.0:
  * Restore "Check if group &lt; LastGroup, as KIconEffect doesn't handle UserGroup anyway"
  * Remove explicit use of ECM_KDE_MODULE_DIR, is part of ECM_MODULE_PATH</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Properly turn real into integer
  * Remove unused includes
  * Add option to build Qt Designer plugin (BUILD_DESIGNERPLUGIN, default ON)
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Deprecate the global [Small|Desktop|Bar]Icon() methods
  * Port away from deprecated QPixmapCache::find method.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- Changes since 5.63.0:
  * Fix usage of the new deprecation macros for assignIconsToContextMenu
  * Deprecate KIconTheme::assignIconsToContextMenu
  * Use ECMGenerateExportHeader to manage deprecated API better</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Deprecate top-level UserIcon method, no longer used
  * Replace for with maths with range for</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Set breeze as default theme when reading from configuration file
  * Qt 5.12 is now required so remove the ifdef
  * Deprecate the top-level IconSize() function
  * Update the obsolete projects.kde.org URL
  * Fix centering scaled icons on high dpi pixmaps</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- No code change since 5.66.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * Add note about porting loadMimeTypeIcon</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- No code change since 5.70.0</changelog>
  <changelog author="Alynx Zhou &lt;alynx.zhou@suse.com&gt;" date="1609416000">- Added kiconthemes-suppress-warning-for-adwaita.patch: Prevent
  warning about some legacy icons in Adwaita, those icons are used
  for backward compatibility. (bsc#1179545)</changelog>
</package>
<package pkgid="5abda184c72ce0e7a6222973748c0075fcca7554719e7e0be475a94bdcf26c56" name="libKF5Runner5-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [krunners] compile without foreach</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Don't delay emission of matchesChanged indefinitely
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Make sure we're checking whether tearing down is due after finishing a job
  * Port runnertest to QGuiApplication
  * Fix runnertest exiting early
  * Add a done signal to FindMatchesJob instead of using QObjectDecorator wrongly
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Consider UNC paths as NetworkShare context</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- No code change since 5.63.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Include KDE CMake settings macros as first
  * KRunner: port away from deprecated KF5 API
  * Remove unused variable "package"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Port QRegExp to QRegularExpression</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * templates: Convert license statements to SPDX headers
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * DBus Runner: Add service property to request actions once
  * Print a warning if runner is incompatible with KRunner
  * KRunner: Improve code snippet
  * Use ecm_setup_qtplugin_macro_names</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix and expand unit test
  * Do not persist runner whitelist to config
  * KRunner fix prepare/teardown signals (kde#420311)
  * Improve docstring for Type::InformationalMatch
  * Detect local files and folders starting with ~
  * Deprecate defunct functions</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594728000">- Add patch to fix ABI mismatch (kde#423003, boo#1175563):
  * 0001-Do-not-remove-virtual-method-from-build.patch</changelog>
</package>
<package pkgid="4ac615be37a81de61f38bc7f81d0d2e8aba50538f5a5ef1b630dd9ca5db55b9d" name="libKF5Runner5-debuginfo" arch="i586">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [krunners] compile without foreach</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Don't delay emission of matchesChanged indefinitely
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Make sure we're checking whether tearing down is due after finishing a job
  * Port runnertest to QGuiApplication
  * Fix runnertest exiting early
  * Add a done signal to FindMatchesJob instead of using QObjectDecorator wrongly
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Consider UNC paths as NetworkShare context</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- No code change since 5.63.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Include KDE CMake settings macros as first
  * KRunner: port away from deprecated KF5 API
  * Remove unused variable "package"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Port QRegExp to QRegularExpression</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * templates: Convert license statements to SPDX headers
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * DBus Runner: Add service property to request actions once
  * Print a warning if runner is incompatible with KRunner
  * KRunner: Improve code snippet
  * Use ecm_setup_qtplugin_macro_names</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix and expand unit test
  * Do not persist runner whitelist to config
  * KRunner fix prepare/teardown signals (kde#420311)
  * Improve docstring for Type::InformationalMatch
  * Detect local files and folders starting with ~
  * Deprecate defunct functions</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594728000">- Add patch to fix ABI mismatch (kde#423003, boo#1175563):
  * 0001-Do-not-remove-virtual-method-from-build.patch</changelog>
</package>
<package pkgid="17ba784ef5ccfbb6d4c3bea769a0b155a0dd329c5b6e825a2a335fe5476b71eb" name="libKF5Runner5-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.71.0" rel="lp152.2.3.1"/>
  <changelog author="alarrosa@suse.com" date="1550232000">- Downgrade the Qt version requirement to build with 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1552219200">- Update to 5.56.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.56.0.php
- Changes since 5.55.0:
  * It compiles fine without deprecated methods</changelog>
  <changelog author="lbeltrame@kde.org" date="1555243200">- Update to 5.57.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.57.0.php
- Changes since 5.56.0:
  * [krunners] compile without foreach</changelog>
  <changelog author="lbeltrame@kde.org" date="1557921600">- Update to 5.58.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.58.0.php
- No code changes since 5.57.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1560081600">- Update to 5.59.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.59.0.php
- No code changes since 5.58.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1563105600">- Update to 5.60.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.60.0.php
- Changes since 5.59.0:
  * Don't delay emission of matchesChanged indefinitely
  * Install in new logging directory when we use kf5 5.59.0</changelog>
  <changelog author="Wolfgang Bauer &lt;wbauer@tmo.at&gt;" date="1563537600">- Don't lower minimum Qt version anymore, it requires 5.11 now</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565179200">- Update to 5.61.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.61.0.php
- No code change since 5.60.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1567857600">- Update to 5.62.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.62.0.php
- Changes since 5.61.0:
  * Make sure we're checking whether tearing down is due after finishing a job
  * Port runnertest to QGuiApplication
  * Fix runnertest exiting early
  * Add a done signal to FindMatchesJob instead of using QObjectDecorator wrongly
  * Remove unused includes
- Replace foo-devel with cmake(KF5Foo) in build requirements</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1570363200">- Update to 5.63.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.63.0.php
- Changes since 5.62.0:
  * Consider UNC paths as NetworkShare context</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1572782400">- Update to 5.64.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.64.0.php
- No code change since 5.63.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1575806400">- Update to 5.65.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.65.0.php
- Changes since 5.64.0:
  * Use ECMGenerateExportHeader to manage deprecated API better
  * Include KDE CMake settings macros as first
  * KRunner: port away from deprecated KF5 API
  * Remove unused variable "package"</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578225600">- Update to 5.66.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.66.0.php
- Changes since 5.65.0:
  * Update the obsolete projects.kde.org URL</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644800">- Update to 5.67.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.67.0.php
- Changes since 5.66.0:
  * Port QRegExp to QRegularExpression</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1580644801">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * templates: Convert license statements to SPDX headers
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- Changes since 5.69.0:
  * DBus Runner: Add service property to request actions once
  * Print a warning if runner is incompatible with KRunner
  * KRunner: Improve code snippet
  * Use ecm_setup_qtplugin_macro_names</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix and expand unit test
  * Do not persist runner whitelist to config
  * KRunner fix prepare/teardown signals (kde#420311)
  * Improve docstring for Type::InformationalMatch
  * Detect local files and folders starting with ~
  * Deprecate defunct functions</changelog>
  <changelog author="Fabian Vogt &lt;fabian@ritter-vogt.de&gt;" date="1594728000">- Add patch to fix ABI mismatch (kde#423003, boo#1175563):
  * 0001-Do-not-remove-virtual-method-from-build.patch</changelog>
</package>
<package pkgid="b2e35da2a81b7b7652e5e5e0f72b09711acba06aae507da0a3c7c97344562ac0" name="libKPimGAPIBlogger5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="a26af3a1ecca55f1502a9053a242ae22c9c0dcca6173abe88297f02849f4aaab" name="libKPimGAPICalendar5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="6fa019f7c6a48be4b19a0b0927d599940f9cb6549f8d77a619b846c00dd56d6a" name="libKPimGAPIContacts5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="c2ce168883ba58ee38a25f7fd2e66532a74cb1b211c471ff1973591672ae8ca5" name="libKPimGAPICore5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="8aff3b81a338c7365257965a5ccbf188ef2bce70e8e7d8dc382dc3e09a1faeb0" name="libKPimGAPIDrive5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="e8790d76c1c2c335eb9a0dc40dfdeda60fda7383151de2ff8e943bc0f2d40857" name="libKPimGAPILatitude5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="b3df5d2f8a852053b6fc719a0c9e595fc0da27c05643caba8b948b08f4512539" name="libKPimGAPIMaps5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="c65adf4d75e8dde8a3d9222401b2a7fa231636be9781d591da3ec1e36d965c2f" name="libKPimGAPITasks5-debuginfo" arch="x86_64">
  <version epoch="0" ver="20.04.2" rel="lp152.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1563883200">- Update to 19.07.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-beta.php
- Changes since 19.04.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1565092800">- Update to 19.07.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08-rc.php
- Changes since 19.07.80:
  * Adapt to KCalendarCore namespace change
  * Use mimeType from metadata instead of blindly re-determining it during uploads</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1565352000">- Update to 19.08.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.0.php
- No code change since 19.07.90</changelog>
  <changelog author="wbauer@tmo.at" date="1566907200">- Temporarily disable LTO to avoid crash when using gdrive
  (boo#1148217)</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1567684800">- Update to 19.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.1.php
- Changes since 19.08.0:
  * Include KDE* cmake macros before any others</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1570795200">- Update to 19.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.2.php
- Changes since 19.08.1:
  * Fix null pointer dereference, keep FileModifyJob metadata and serialize with options. (kde#411634)
  * Fix compilation with Qt 5.14</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1573128000">- Update to 19.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-19.08.3.php
- No code change since 19.08.2</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1574596800">- Update to 19.11.80
  * New feature release
- Changes since 19.08.3:
  * Fix minor typo
  * Fix comparison typo
  * Cleanup and modernize the Calendar library codebase
  * Add missing parameters to Permission related jobs and fix url typo.
  * QString::remove operates on the same object, no need to reassign
  * Use QLatin1String overload for QString::operator ==/!=
  * Use QLatin1String in join/startswith/endsWith/contains + QString::replace
    operates on the same object, no need to reassign
  * Fix API docs generation</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575115200">- Update to 19.11.90
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/19.12-rc
- No code change since 19.11.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1575979200">- Update to 19.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12
- Changes since 19.11.90:
  * Make it compile with last qt5.14</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1578398400">- Update to 19.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/releases/19.12.1
- No code change since 19.12.0</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1580904000">- Update to 19.12.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-02-apps-update
- Changes since 19.12.1:
  * Handle 410 Gone errors during Calendar sync</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1581076800">- Replace %make_jobs with %cmake_build.</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1583409600">- Update to 19.12.3
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-03-apps-update
- Changes since 19.12.2:
  * Fix typo in event status</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1584878400">- Update to 20.03.80
  * New feature release
- Changes since 19.12.3:
  * Undo switch to networkError() getter
  * It was reverted in qt5.15
  * Make it compile against qt5.15
  * Fix clazy warning
  * Make it compile against last qt5.15 without deprecated methods
  * Port to QComboBox
  * Fix typos, update links</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1586088000">- Update to 20.03.90
  * New feature release
- No code change since 20.03.80</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1587643200">- Update to 20.04.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-04-apps-update
- No code change since 20.03.90</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1589544000">- Update to 20.04.1
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-05-apps-update
- No code change since 20.04.0</changelog>
  <changelog author="Christophe Giboudeaux &lt;christophe@krop.fr&gt;" date="1591704000">- Update to 20.04.2
  * New bugfix release
  * For more details please see:
  * https://kde.org/announcements/releases/2020-06-apps-update
- No code change since 20.04.1</changelog>
  <changelog author="opensuse.lietuviu.kalba@gmail.com" date="1604059200">- Add TemporarilyMovedUseSameMethod.patch to fix kde#425261
  to accept HTTP status 307 as a redirect; otherwise Google document
  download fails with an unknown error.
  This upstream patch backported from libkgapi 20.08.2.</changelog>
</package>
<package pkgid="b69ef6d3a30744a0bc6f9aa3188738c949a08fd8af1d65ac9a91a8bb2250baf7" name="libMagick++-7_Q16HDRI4-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="c95a255fcb5febe38511f98a11e654f1568430d66eb72f2ef26b296c09a20b17" name="libMagick++-7_Q16HDRI4-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="c90928c639024d0c75d5f49cd8946fbf632d45134e00575eae9d091c915e82da" name="libMagick++-7_Q16HDRI4-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="d074a8d5040d441327dde00a7d51b73f47f1af53882dfef4651db8b570cac789" name="libMagick++-7_Q16HDRI4-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="232dfb1b5a9a0731263c33e8bddf745992401057a8647bb54d6d40b1683d444f" name="libMagick++-7_Q16HDRI4-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="8908bd08e58d65089233bfa4f4e9f124a6d91af6f99ede9ad5ff6900d22dbe0e" name="libMagick++-7_Q16HDRI4-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="461536990f12f56f1668c990ed247768ce215c52f3efdbe611472b8b0df0ca4c" name="libMagick++-7_Q16HDRI4-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="1e94c8a16fa34e62f454cc4db48a0b6f505cb99515324b2223bf7c8f3d52869f" name="libMagick++-7_Q16HDRI4-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="a09656c11f5a5cb30ed41b9304d66663ec670b57f97d52e4bf521417ead62301" name="libMagick++-7_Q16HDRI4-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
</package>
<package pkgid="49eae08f6141293c1c07ce17f40d80ce0d17436acde2300bcb60d03609021ce0" name="libMagick++-7_Q16HDRI4-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="26ae48e5db3d87f8793a30cbfcc3a9a2d53a4daac5b0b29811f9fda46d99a939" name="libMagick++-7_Q16HDRI4-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.3.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (dib.c)
  * CVE-2019-7398 [bsc#1124365]
    + ImageMagick-CVE-2019-7398.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886403">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
</package>
<package pkgid="032030ea602489d31d4c084ddd2f21c2a4e2ef3dfb5e15339301be0d00d686c7" name="libMagick++-7_Q16HDRI4-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="03231e9152e6fe929b530b4533b8d5d899a625cba8a506d4f250baf1793fcade" name="libMagick++-7_Q16HDRI4-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.6.1"/>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886400">- security update (sixel.c):
  * CVE-2019-7396 [bsc#1124367]
    + ImageMagick-CVE-2019-7396.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886401">- security update (psd.c):
  * CVE-2019-7395 [bsc#1124368]
    + ImageMagick-CVE-2019-7395.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1549886402">- security update (pdf.c):
  * CVE-2019-7397 [bsc#1124366]
    + ImageMagick-CVE-2019-7397.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2019-7175 [bsc#1128649]
  + ImageMagick-CVE-2019-7175.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1554379200">- security update
- added patches
  CVE-2019-10650 [bsc#1131317]
  + ImageMagick-CVE-2019-10650.patch
  CVE-2019-9956 [bsc#1130330]
  + ImageMagick-CVE-2019-9956.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch</changelog>
</package>
<package pkgid="1f069045ac7337542954fed8d33d1f7cd937ffe0f227774123fe12efecae9c07" name="libMagick++-7_Q16HDRI4-debuginfo" arch="i586">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="7083c250a9aed8e4b2e8f8895c1e4a24afe9b4c170bf25f84d5c293ea8225baa" name="libMagick++-7_Q16HDRI4-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.9.1"/>
  <changelog author="pgajdos@suse.com" date="1555329600">- security update
- added patches
  CVE-2019-11007 [bsc#1132060]
  + ImageMagick-CVE-2019-11007.patch
  CVE-2019-11008 [bsc#1132054]
  + ImageMagick-xwd.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
</package>
<package pkgid="2387008a59b61c0beb882d4bc7a3c74b892d51e6a91f39e1501191f501ad5d27" name="libMagickCore-7_Q16HDRI6-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.12.1"/>
  <changelog author="pgajdos@suse.com" date="1555416000">- provide two new packages with configuration
  [bsc#1122033]:
  * ImageMagick-config-upstream
  - provides configuration provided by upstream (no restrictions)
  * ImageMagick-config-SUSE (preferred)
  - provides configuration provided by SUSE (with security
    restrictions)
  and use update-alternatives for selecting configurations.
- deleted patches
  - ImageMagick-disable-insecure-coders.patch (renamed)
- added patches
  + ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
</package>
<package pkgid="c4028e4100bca417f9969c25e92b9d89e43f5e26ced9c3dfe3b8c21822244ff5" name="libMagickCore-7_Q16HDRI6-32bit-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp152.12.15.1"/>
  <changelog author="pgajdos@suse.com" date="1556625600">- security update
- modified patches
  CVE-2019-11008 [bsc#1132054], CVE-2019-11472 [bsc#1133204]
  % ImageMagick-xwd.c-update.patch (extended)
- added patches
  CVE-2019-11470 [bsc#1133205]
  + ImageMagick-CVE-2019-11470.patch
  CVE-2019-11506 [bsc#1133498]
  + ImageMagick-CVE-2019-11506.patch
  CVE-2019-11505 [bsc#1133501]
  + ImageMagick-CVE-2019-11505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559044800">- disable also PCL [bsc#1136183]
- modified patches
  % ImageMagick-configuration-SUSE.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1559217600">- security update
- added patches
  CVE-2019-11598 [bsc#1136732]
  + ImageMagick-CVE-2019-11598.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1560859200">- security update
- disable indirect reads [bsc#1138425]
  (https://imagemagick.org/script/security-policy.php)
- modified patches
  % ImageMagick-configuration-SUSE.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
